Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
File: um1Gt2v9bUK71XXi8m_OE2ubam0.mft (raw, json)
Hash identifier: cd5DWnIAqCr8EXuQGQfE4LDq6dZRTbc4OnNqlLLd9eI=
Subject key identifier: 1E:CF:14:DB:64:E8:4C:DB:D1:FD:89:08:57:82:B8:2A:C8:81:36:D6
Authority key identifier: BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D
Certificate issuer: /CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d
Certificate serial: 019D2772741F67870BDFE49FD0BFAE14DBE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 00:01:45 +0000
Manifest this update: Thu 26 Mar 2026 00:01:45 +0000
Manifest next update: Fri 27 Mar 2026 00:01:45 +0000
Files and hashes: 1: Bm7KXTZG-GzrmHMle85VbaK0lEc.roa (hash: eP4Z4Xyrl9duYpmeFr1kOXcCCxjk6AkZ57/buELWekE=)
2: YkorEnKm6LzRmwWsxcFNFH1cULo.roa (hash: r2RXMf3T6ozI4KhQ/ydf8YGQ149Sw8bA5XoNMW2hS0A=)
3: fpbZgKklTRGbUlBw5VfG2XolpT4.roa (hash: VEiVSo2qKOGnxDIsrhNTfOH5xMpm4xzV14ZuiE7aVXQ=)
4: fwb4YpE_ObhkPJOOtInq4VZSkFQ.roa (hash: ejLh2AtjPL3jxNb43Lf5+3Lqqs/Okt+3XnJA445dp+0=)
5: um1Gt2v9bUK71XXi8m_OE2ubam0.crl (hash: QijFXZIqlGHHG8f1Sw8/FA53DHLNX+6EmYKCu1Vcmj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:74:1f:67:87:0b:df:e4:9f:d0:bf:ae:14:db:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d
Validity
Not Before: Mar 26 00:01:45 2026 GMT
Not After : Mar 27 00:01:45 2026 GMT
Subject: CN=1ecf14db64e84cdbd1fd89085782b82ac88136d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:df:95:38:17:17:5b:00:79:90:29:b6:46:0c:
94:62:ea:92:01:1b:eb:1f:12:55:ea:1a:af:30:32:
53:bd:7d:d4:40:73:dc:30:60:0c:04:dc:b0:15:88:
59:6f:90:08:87:16:59:53:fa:1b:ac:8e:70:cb:56:
45:df:34:e2:57:95:4d:36:24:04:2b:1a:70:73:2b:
69:e6:c2:e0:71:64:4a:6f:7f:d2:f3:ca:af:b1:81:
b2:07:08:12:88:e0:91:3a:fd:3e:67:4a:17:12:dc:
7e:8e:98:ea:06:cd:ec:48:01:17:0f:a8:09:77:c9:
48:3f:8f:90:3c:db:d6:c3:27:d7:10:99:da:26:e2:
36:18:39:9e:76:2b:65:68:f2:c1:27:b7:86:de:8a:
ab:27:ca:11:dd:8d:a6:29:0a:4d:df:2d:2f:a9:60:
0a:f0:c9:eb:7a:5b:0f:6c:15:40:1d:b8:ce:15:01:
1e:4c:f3:63:cc:a3:ba:de:46:80:58:22:a4:80:d6:
92:b0:16:09:3e:ef:51:7d:47:3b:fd:ea:a1:e7:04:
ad:29:ef:5b:a8:8f:78:94:45:65:e0:24:f3:41:1b:
28:7a:5c:0b:47:ab:a4:e4:9c:72:83:30:9f:d0:84:
94:a5:6b:4b:7c:38:63:44:ca:20:60:3d:9d:56:87:
4e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CF:14:DB:64:E8:4C:DB:D1:FD:89:08:57:82:B8:2A:C8:81:36:D6
X509v3 Authority Key Identifier:
keyid:BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:0c:bc:ef:e5:5d:d8:fb:9f:9b:f1:5f:e1:62:a3:19:c9:b7:
3f:03:7f:b8:61:53:b3:2a:3a:0f:df:89:9d:43:13:3e:cb:4d:
87:9e:67:73:2c:51:08:19:c1:7d:ae:42:f6:91:3e:fa:7d:22:
84:31:e6:5a:6d:18:0e:a3:d5:49:a3:e1:53:f7:df:c7:a8:2d:
3f:3f:8f:63:6a:87:ae:51:b2:dc:76:25:ad:22:7f:a0:12:a7:
4a:03:a6:e0:5b:8d:86:6b:3a:30:43:99:a5:a1:0e:b2:18:34:
66:3a:39:de:ef:06:d9:5c:90:71:04:94:e8:a4:37:42:ad:94:
35:8a:ca:4e:12:6e:56:c8:28:1c:07:34:14:b0:42:11:76:a1:
32:e8:ea:e3:a1:69:93:3c:d0:24:e4:ba:e9:6b:75:a1:29:4f:
3c:9c:be:85:7f:4a:cd:1b:4c:a7:1d:34:e6:5d:b4:e5:54:df:
aa:76:48:b8:0d:73:40:9a:dd:c9:02:90:ab:93:4b:d5:94:a4:
c9:0b:28:84:69:4c:d9:3e:7a:8a:ca:d9:22:1c:44:2f:dc:de:
cb:9e:8c:05:f4:5a:fd:55:78:51:ee:a6:2e:a1:3e:20:84:e0:
28:86:59:a2:d3:02:0f:a4:49:21:3a:4c:d5:c5:cc:d6:7d:c1:
fa:48:3b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:48:37 2026 by rpki-client