Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
File: UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft (raw, json)
Hash identifier: VmOAcXgTP3ibWtENgQe97Ya8DrdKPhNLc1WHFLaS8h4=
Subject key identifier: BF:A8:95:8F:09:99:A8:FC:77:AC:FD:6F:42:40:9D:6E:10:87:54:2F
Authority key identifier: 50:C0:06:D6:40:1E:F4:2F:A5:0E:24:09:55:00:B2:FD:AF:AD:5B:AA
Certificate issuer: /CN=50c006d6401ef42fa50e24095500b2fdafad5baa
Certificate serial: 01A1DE39872F09F3D9362CE9074357BFF751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
Manifest number: 1988
Signing time: Sun 15 Nov 2026 08:01:14 +0000
Manifest this update: Sun 15 Nov 2026 08:01:14 +0000
Manifest next update: Mon 16 Nov 2026 08:01:14 +0000
Files and hashes: 1: Rx6_2dFGC_byik0IQci9SEzvGuI.roa (hash: HsI4o34Z5wlmbwp0oeAuMzNNb5shkpIEpxzJkNhrxZk=)
2: UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl (hash: N5sqBomYFCqt5s6fH4Sxa/nbjthcf35bNqIvtHv4fus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:87:2f:09:f3:d9:36:2c:e9:07:43:57:bf:f7:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c006d6401ef42fa50e24095500b2fdafad5baa
Validity
Not Before: Nov 15 08:01:14 2026 GMT
Not After : Nov 16 08:01:14 2026 GMT
Subject: CN=bfa8958f0999a8fc77acfd6f42409d6e1087542f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:98:ad:5e:ad:5d:85:48:ee:3e:96:ca:b4:c4:
3e:b9:1b:35:59:fb:a7:e0:51:fa:28:fa:9d:15:7c:
df:ec:86:4e:f1:be:e2:19:b6:0b:72:b3:0d:5f:48:
7c:a3:51:bb:33:07:d7:72:92:3e:49:0b:9b:36:41:
2c:4c:4f:12:7f:71:6c:44:0d:3a:71:6d:ba:49:a2:
31:18:35:01:f3:26:76:77:b0:68:80:45:37:e4:d2:
b2:c2:de:81:c4:07:db:49:ab:50:13:3c:17:f6:01:
47:dd:87:68:a1:96:d4:a2:7f:8c:12:7c:ad:ec:4a:
28:82:8d:3f:b1:23:d7:69:a0:31:62:74:0c:4e:e4:
cb:ac:a6:3b:19:ef:0e:13:99:78:0d:2a:46:92:fb:
a8:25:f4:00:a4:46:f6:50:d0:71:c1:60:96:6f:93:
ee:04:e2:24:f2:d0:34:5d:a5:8a:44:d4:34:f2:5f:
0d:a6:a1:f9:6f:78:58:6a:38:f5:1c:0b:00:8d:db:
97:04:ea:15:33:39:8a:b0:81:20:2f:b6:fc:4c:55:
00:6a:51:51:71:23:08:bf:1a:b8:f1:ec:60:79:93:
51:da:17:45:0e:72:26:a3:d6:8f:38:b9:a3:3b:24:
10:6f:98:b4:29:26:62:73:ed:22:c4:d1:f0:96:92:
e8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A8:95:8F:09:99:A8:FC:77:AC:FD:6F:42:40:9D:6E:10:87:54:2F
X509v3 Authority Key Identifier:
keyid:50:C0:06:D6:40:1E:F4:2F:A5:0E:24:09:55:00:B2:FD:AF:AD:5B:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:fe:47:e4:52:cf:8d:ba:b4:13:55:b7:d9:81:c1:3b:3f:13:
28:22:2c:87:ea:ad:1c:5d:03:fb:3c:f1:b2:00:7e:b1:a9:19:
15:6c:a0:46:ee:a0:75:58:15:6f:b0:6c:90:7b:19:36:60:08:
69:90:19:cf:f0:c0:64:ee:bb:27:60:5a:2f:c8:03:08:da:76:
d5:31:de:10:79:ef:6f:29:f5:cc:82:5b:98:5a:99:ba:1f:8a:
5e:65:1e:06:64:95:ca:d1:2e:9c:a1:9a:ac:37:b7:e0:85:c8:
c3:a8:78:47:13:78:4f:2e:99:ca:59:27:7b:a5:8a:cf:d2:14:
97:e2:fe:56:6f:8b:74:2f:a5:5b:2b:e8:87:dc:76:01:56:f0:
31:12:10:19:13:6d:e9:b0:71:4a:dd:81:20:a3:a6:52:6e:da:
55:39:05:0a:99:ca:13:0e:21:47:5b:e4:ee:4e:4c:40:67:30:
7b:15:21:b6:73:3d:aa:0b:75:96:05:f2:15:d1:14:a6:ab:27:
c5:48:6a:3d:4f:97:0b:d3:99:80:9e:7f:fc:5a:24:e7:17:9d:
3a:32:8f:2c:4d:a2:3d:72:80:19:a0:f6:f9:51:a5:a2:26:df:
90:cc:d1:cb:05:b8:9a:c9:74:fb:2b:3d:33:6b:ef:f1:9d:ea:
19:db:d2:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHeOYcvCfPZNizpB0NXv/dRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYzAwNmQ2NDAxZWY0MmZhNTBlMjQwOTU1MDBiMmZkYWZh
ZDViYWEwHhcNMjYxMTE1MDgwMTE0WhcNMjYxMTE2MDgwMTE0WjAzMTEwLwYDVQQD
EyhiZmE4OTU4ZjA5OTlhOGZjNzdhY2ZkNmY0MjQwOWQ2ZTEwODc1NDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15itXq1dhUjuPpbKtMQ+uRs1Wfun
4FH6KPqdFXzf7IZO8b7iGbYLcrMNX0h8o1G7MwfXcpI+SQubNkEsTE8Sf3FsRA06
cW26SaIxGDUB8yZ2d7BogEU35NKywt6BxAfbSatQEzwX9gFH3YdooZbUon+MEnyt
7Eoogo0/sSPXaaAxYnQMTuTLrKY7Ge8OE5l4DSpGkvuoJfQApEb2UNBxwWCWb5Pu
BOIk8tA0XaWKRNQ08l8NpqH5b3hYajj1HAsAjduXBOoVMzmKsIEgL7b8TFUAalFR
cSMIvxq48exgeZNR2hdFDnImo9aPOLmjOyQQb5i0KSZic+0ixNHwlpLo9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+olY8Jmaj8d6z9b0JAnW4Qh1QvMB8GA1UdIwQY
MBaAFFDABtZAHvQvpQ4kCVUAsv2vrVuqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU1BRzFrQWU5Qy1sRGlRSlZRQ3lfYS10VzZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9kZmFiMzYtNjU3Zi00ZTAyLTgzNjEt
YzJkY2RjODVlNTg0LzEvVU1BRzFrQWU5Qy1sRGlRSlZRQ3lfYS10VzZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9kZmFiMzYtNjU3Zi00ZTAyLTgzNjEtYzJkY2RjODVlNTg0
LzEvVU1BRzFrQWU5Qy1sRGlRSlZRQ3lfYS10VzZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANf5H5FLP
jbq0E1W32YHBOz8TKCIsh+qtHF0D+zzxsgB+sakZFWygRu6gdVgVb7BskHsZNmAI
aZAZz/DAZO67J2BaL8gDCNp21THeEHnvbyn1zIJbmFqZuh+KXmUeBmSVytEunKGa
rDe34IXIw6h4RxN4Ty6Zylkne6WKz9IUl+L+Vm+LdC+lWyvoh9x2AVbwMRIQGRNt
6bBxSt2BIKOmUm7aVTkFCpnKEw4hR1vk7k5MQGcwexUhtnM9qgt1lgXyFdEUpqsn
xUhqPU+XC9OZgJ5//Fok5xedOjKPLE2iPXKAGaD2+VGloibfkMzRywW4msl0+ys9
M2vv8Z3qGdvSSA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 13:01:09 2026 by rpki-client