Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/2531c9-aaff-449d-9195-9bbcf6dab043/1/uLmiaW_RMnaEomOHvSfMR95V81w.mft
File: uLmiaW_RMnaEomOHvSfMR95V81w.mft (raw, json)
Hash identifier: 86L6lhPYUQKDV9ynJcQHItRxzIu20u4fMPX/v3XAQ1Q=
Subject key identifier: 97:37:1B:C5:91:DE:69:AE:14:2D:27:B5:E4:55:40:F1:7B:57:28:D0
Authority key identifier: B8:B9:A2:69:6F:D1:32:76:84:A2:63:87:BD:27:CC:47:DE:55:F3:5C
Certificate issuer: /CN=b8b9a2696fd1327684a26387bd27cc47de55f35c
Certificate serial: 01A0DB7254199F170ABA54A8B2024C74693E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLmiaW_RMnaEomOHvSfMR95V81w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/2531c9-aaff-449d-9195-9bbcf6dab043/1/uLmiaW_RMnaEomOHvSfMR95V81w.mft
Manifest number: 29
Signing time: Sat 26 Sep 2026 02:01:37 +0000
Manifest this update: Sat 26 Sep 2026 02:01:37 +0000
Manifest next update: Sun 27 Sep 2026 02:01:37 +0000
Files and hashes: 1: MAfy7GCztZapHG3Mba4fGQ7n6jo.roa (hash: fHGd3BCJwRMKjNKFXuS7tP7gKEFDjkZoKbV0ULV1RLY=)
2: uLmiaW_RMnaEomOHvSfMR95V81w.crl (hash: l75eX8ARhrY65iEq+3LRUUvl9id9PkE+I0VoNHl38E8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/2531c9-aaff-449d-9195-9bbcf6dab043/1/uLmiaW_RMnaEomOHvSfMR95V81w.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/2531c9-aaff-449d-9195-9bbcf6dab043/1/uLmiaW_RMnaEomOHvSfMR95V81w.mft
rsync://rpki.ripe.net/repository/DEFAULT/uLmiaW_RMnaEomOHvSfMR95V81w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:72:54:19:9f:17:0a:ba:54:a8:b2:02:4c:74:69:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8b9a2696fd1327684a26387bd27cc47de55f35c
Validity
Not Before: Sep 26 02:01:37 2026 GMT
Not After : Sep 27 02:01:37 2026 GMT
Subject: CN=97371bc591de69ae142d27b5e45540f17b5728d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:19:86:09:65:42:dc:62:51:24:bd:ee:8c:59:
db:cd:e9:a5:d4:89:31:ed:77:58:62:d2:58:02:0e:
24:9f:24:ee:e5:21:26:bc:17:f9:3f:b0:99:5c:0a:
f1:49:a1:06:b5:96:1d:43:cf:c5:1b:4a:b6:2f:67:
f4:4b:2f:b2:67:4b:16:85:36:8e:82:0f:20:33:c5:
42:58:38:88:28:b4:1a:3e:f8:d1:25:9a:bf:d7:06:
cf:d2:74:2c:52:34:d7:8a:9e:12:0f:85:fb:f9:78:
6c:6b:57:dd:82:0b:24:54:2e:a0:34:73:ab:9b:d1:
cb:fe:e8:fa:7c:3c:60:62:5b:fa:3b:dd:a6:3d:99:
78:79:89:e8:b0:42:36:34:9f:41:95:ff:97:b4:7d:
b7:c9:a9:ca:39:5f:85:92:06:42:47:8a:3f:49:a5:
89:a2:39:9c:6d:24:85:21:79:9c:e3:69:d4:89:95:
56:c8:eb:28:ae:03:c3:2f:b4:15:c5:2c:9c:db:47:
1e:39:79:e2:d9:e2:91:3b:4c:3e:72:25:2b:90:41:
a9:85:b4:bb:17:2c:73:97:0f:18:c1:39:72:d8:90:
a7:5d:7b:6c:1b:d3:7c:2b:fe:f0:51:a6:71:1f:11:
5e:b7:c9:0e:db:14:ef:59:56:b4:9b:83:af:07:9c:
13:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:37:1B:C5:91:DE:69:AE:14:2D:27:B5:E4:55:40:F1:7B:57:28:D0
X509v3 Authority Key Identifier:
keyid:B8:B9:A2:69:6F:D1:32:76:84:A2:63:87:BD:27:CC:47:DE:55:F3:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLmiaW_RMnaEomOHvSfMR95V81w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2531c9-aaff-449d-9195-9bbcf6dab043/1/uLmiaW_RMnaEomOHvSfMR95V81w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2531c9-aaff-449d-9195-9bbcf6dab043/1/uLmiaW_RMnaEomOHvSfMR95V81w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:7a:94:54:0f:4a:56:c3:01:d3:dd:37:6f:60:8d:f2:a7:06:
de:9a:fe:b1:e0:97:bf:a5:bc:bb:4a:2f:78:76:3a:c3:31:29:
45:cf:95:ab:09:6c:26:93:83:01:3a:09:5e:8a:8c:84:fe:73:
5b:6e:fb:c5:55:55:7f:95:ca:18:85:f8:bc:94:13:08:96:95:
a0:f7:e6:3c:76:11:3d:65:b9:e9:47:cb:da:86:c1:bd:0d:79:
98:5d:ac:5f:7d:77:8e:c3:e9:da:97:ca:2c:b9:53:86:d6:b1:
db:3a:c8:b2:b8:2a:14:ea:40:8e:cf:ca:7a:43:3f:65:b3:ac:
89:de:eb:4f:db:88:73:84:02:2c:49:54:f0:4c:ef:00:39:df:
cc:f8:26:0f:62:71:5a:7b:b8:25:af:22:51:90:8c:cb:a8:fe:
d6:c3:a0:94:85:e3:38:37:57:c7:74:af:eb:64:1a:81:80:52:
85:b2:c0:d4:b1:91:03:76:f3:48:42:56:59:65:e4:30:bc:02:
a2:9c:9b:14:36:78:37:e3:55:b3:29:e2:95:21:74:c4:62:7d:
ec:e8:07:41:b7:63:ed:6b:44:75:59:3c:b8:94:2d:5c:3a:5c:
6d:8f:ed:2c:66:ff:6e:6f:78:15:35:ab:ee:9b:77:1c:66:e1:
9a:f9:4e:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDbclQZnxcKulSosgJMdGk+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4YjlhMjY5NmZkMTMyNzY4NGEyNjM4N2JkMjdjYzQ3ZGU1
NWYzNWMwHhcNMjYwOTI2MDIwMTM3WhcNMjYwOTI3MDIwMTM3WjAzMTEwLwYDVQQD
Eyg5NzM3MWJjNTkxZGU2OWFlMTQyZDI3YjVlNDU1NDBmMTdiNTcyOGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRmGCWVC3GJRJL3ujFnbzeml1Ikx
7XdYYtJYAg4knyTu5SEmvBf5P7CZXArxSaEGtZYdQ8/FG0q2L2f0Sy+yZ0sWhTaO
gg8gM8VCWDiIKLQaPvjRJZq/1wbP0nQsUjTXip4SD4X7+Xhsa1fdggskVC6gNHOr
m9HL/uj6fDxgYlv6O92mPZl4eYnosEI2NJ9Blf+XtH23yanKOV+FkgZCR4o/SaWJ
ojmcbSSFIXmc42nUiZVWyOsorgPDL7QVxSyc20ceOXni2eKRO0w+ciUrkEGphbS7
Fyxzlw8YwTly2JCnXXtsG9N8K/7wUaZxHxFet8kO2xTvWVa0m4OvB5wTSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJc3G8WR3mmuFC0nteRVQPF7VyjQMB8GA1UdIwQY
MBaAFLi5omlv0TJ2hKJjh70nzEfeVfNcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUxtaWFXX1JNbmFFb21PSHZTZk1SOTVWODF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8yNTMxYzktYWFmZi00NDlkLTkxOTUt
OWJiY2Y2ZGFiMDQzLzEvdUxtaWFXX1JNbmFFb21PSHZTZk1SOTVWODF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8yNTMxYzktYWFmZi00NDlkLTkxOTUtOWJiY2Y2ZGFiMDQz
LzEvdUxtaWFXX1JNbmFFb21PSHZTZk1SOTVWODF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiXqUVA9K
VsMB0903b2CN8qcG3pr+seCXv6W8u0oveHY6wzEpRc+VqwlsJpODAToJXoqMhP5z
W277xVVVf5XKGIX4vJQTCJaVoPfmPHYRPWW56UfL2obBvQ15mF2sX313jsPp2pfK
LLlThtax2zrIsrgqFOpAjs/KekM/ZbOsid7rT9uIc4QCLElU8EzvADnfzPgmD2Jx
Wnu4Ja8iUZCMy6j+1sOglIXjODdXx3Sv62QagYBShbLA1LGRA3bzSEJWWWXkMLwC
opybFDZ4N+NVsynilSF0xGJ97OgHQbdj7WtEdVk8uJQtXDpcbY/tLGb/bm94FTWr
7pt3HGbhmvlOtw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 08:45:06 2026 by rpki-client