Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
File: UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft (raw, json)
Hash identifier: 8rRh0NhMUKGOWbpP8YKXhuVRbd6uqHFLvKe6nxjmJ8s=
Subject key identifier: 12:48:9F:32:8E:F4:25:26:89:7D:AD:7F:1E:E6:9A:54:A1:D6:1F:F5
Authority key identifier: 50:C0:06:D6:40:1E:F4:2F:A5:0E:24:09:55:00:B2:FD:AF:AD:5B:AA
Certificate issuer: /CN=50c006d6401ef42fa50e24095500b2fdafad5baa
Certificate serial: 019D32D136C924F82C1F23E587409B810FA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
Manifest number: 171D
Signing time: Sat 28 Mar 2026 05:01:04 +0000
Manifest this update: Sat 28 Mar 2026 05:01:04 +0000
Manifest next update: Sun 29 Mar 2026 05:01:04 +0000
Files and hashes: 1: Rx6_2dFGC_byik0IQci9SEzvGuI.roa (hash: HsI4o34Z5wlmbwp0oeAuMzNNb5shkpIEpxzJkNhrxZk=)
2: UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl (hash: +cX731ADOSPMnS2APO+woQ2QxSj71QyA2ZK63Nnw0sE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:d1:36:c9:24:f8:2c:1f:23:e5:87:40:9b:81:0f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c006d6401ef42fa50e24095500b2fdafad5baa
Validity
Not Before: Mar 28 05:01:04 2026 GMT
Not After : Mar 29 05:01:04 2026 GMT
Subject: CN=12489f328ef42526897dad7f1ee69a54a1d61ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f5:96:8f:fe:46:7d:92:0d:0d:65:9a:81:8e:
00:fd:59:9c:35:49:c4:3f:0c:36:e5:52:1f:48:25:
1b:b4:17:73:a9:fa:e7:7c:b2:0e:2b:66:8d:29:c8:
9e:73:28:09:9d:87:54:7b:b3:61:7a:ab:d8:f2:ec:
22:97:45:69:40:31:e9:c9:a7:7a:40:8d:53:4b:10:
bc:1f:5f:89:74:49:aa:d1:64:b3:ac:03:4c:8a:c9:
6b:2d:77:b0:09:d8:06:cf:5f:25:52:38:7e:3a:f8:
a5:98:2c:19:52:49:9e:bd:f4:cd:a4:c1:e7:6d:a0:
0f:31:86:fd:c8:4d:56:08:74:79:90:0d:23:13:38:
7f:6b:af:fc:c2:7e:35:34:11:32:e1:f7:12:10:68:
41:1c:ae:88:dc:a6:11:58:ca:81:36:57:da:df:57:
ad:b3:a8:34:64:f0:a2:1c:1c:0f:09:93:58:66:c4:
fe:41:03:5f:b1:12:1c:c6:2a:ce:2b:26:07:51:4c:
2d:6c:d9:57:76:2d:d7:1f:da:15:24:f5:16:b8:51:
0a:0f:0e:e4:28:08:f6:94:4e:4d:b6:f1:84:0c:77:
e3:77:de:d1:33:fe:32:52:90:4f:45:15:ba:d3:7b:
a0:aa:94:4c:71:7e:b9:da:73:ea:13:e4:b7:a3:d4:
a3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:48:9F:32:8E:F4:25:26:89:7D:AD:7F:1E:E6:9A:54:A1:D6:1F:F5
X509v3 Authority Key Identifier:
keyid:50:C0:06:D6:40:1E:F4:2F:A5:0E:24:09:55:00:B2:FD:AF:AD:5B:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:44:29:1e:e1:18:ad:6c:5d:ad:d6:95:90:61:33:f9:a1:27:
db:e2:89:43:be:47:41:7e:e5:54:08:86:ab:bc:16:32:9b:21:
5e:16:3b:fa:36:46:b5:b2:88:dc:fc:08:99:35:e9:24:4a:11:
9e:fb:d2:2d:05:a6:82:a9:c5:b5:09:89:2f:94:9e:26:f4:4d:
1e:89:d4:c5:64:da:7e:ab:b6:42:f8:04:e0:85:f3:e2:83:b4:
d0:61:13:10:58:29:ed:f0:5a:2c:aa:a1:2c:36:e7:a3:81:6c:
d6:2f:2a:8b:21:01:52:9e:2f:21:42:69:66:b0:f7:af:79:df:
68:5c:6b:b4:83:6c:b0:ec:1a:60:89:48:30:19:97:b6:1c:5e:
68:65:14:52:e0:a7:79:ec:06:da:c6:4c:03:97:e5:15:8b:21:
b0:f9:55:48:1c:23:b9:48:53:49:e3:32:f3:a8:cb:17:03:b1:
77:2f:8e:06:12:f5:30:a1:6f:f7:41:ce:fc:96:18:3f:bb:a6:
e5:45:2e:f6:6a:c2:57:54:34:1a:a9:b8:1f:18:20:1b:1f:14:
f9:75:19:28:5c:31:5a:0b:d8:37:8d:7a:b5:3a:c8:30:59:28:
ef:ef:76:53:73:b1:06:87:73:7b:b4:50:82:38:8c:95:1a:26:
26:ad:e8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:38:15 2026 by rpki-client