Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
File: um1Gt2v9bUK71XXi8m_OE2ubam0.mft (raw, json)
Hash identifier: tlh0Cd5kXxra8u0IHyqlsF22gcpE6TiU9qiel/Tm8a4=
Subject key identifier: 5B:BB:D0:DD:87:A8:2C:0F:EB:C5:26:9C:B6:A0:7A:5A:22:CF:0D:F3
Authority key identifier: BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D
Certificate issuer: /CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d
Certificate serial: 01A1DA93CE3DA9DC40AAA2B38D4AAF58BF5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
Manifest number: 1AF7
Signing time: Sat 14 Nov 2026 15:01:21 +0000
Manifest this update: Sat 14 Nov 2026 15:01:21 +0000
Manifest next update: Sun 15 Nov 2026 15:01:21 +0000
Files and hashes: 1: Bm7KXTZG-GzrmHMle85VbaK0lEc.roa (hash: eP4Z4Xyrl9duYpmeFr1kOXcCCxjk6AkZ57/buELWekE=)
2: YkorEnKm6LzRmwWsxcFNFH1cULo.roa (hash: r2RXMf3T6ozI4KhQ/ydf8YGQ149Sw8bA5XoNMW2hS0A=)
3: fpbZgKklTRGbUlBw5VfG2XolpT4.roa (hash: VEiVSo2qKOGnxDIsrhNTfOH5xMpm4xzV14ZuiE7aVXQ=)
4: fwb4YpE_ObhkPJOOtInq4VZSkFQ.roa (hash: ejLh2AtjPL3jxNb43Lf5+3Lqqs/Okt+3XnJA445dp+0=)
5: um1Gt2v9bUK71XXi8m_OE2ubam0.crl (hash: VawFq96wCFa+gyLrbDvoohHVK+OJEko6rLL7ArFK250=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 15:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:93:ce:3d:a9:dc:40:aa:a2:b3:8d:4a:af:58:bf:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d
Validity
Not Before: Nov 14 15:01:21 2026 GMT
Not After : Nov 15 15:01:21 2026 GMT
Subject: CN=5bbbd0dd87a82c0febc5269cb6a07a5a22cf0df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e5:21:33:16:22:05:00:2e:fa:2d:f4:69:d9:
2b:9b:13:cf:a1:25:b3:78:60:6e:19:49:da:d9:0b:
78:1e:93:b3:25:c4:14:e4:82:54:ad:c9:ab:e5:09:
1c:0a:66:3b:cb:a0:e2:25:2e:e9:46:67:d4:12:b6:
37:05:64:34:48:6f:1d:85:d8:b2:92:3e:18:e6:54:
2f:8c:21:b8:c9:a9:4a:06:a1:44:a2:eb:e5:99:69:
92:d6:1c:a3:ff:2d:62:05:f8:46:ff:d4:4b:e6:9b:
4f:83:8d:81:22:73:1f:e5:25:29:a2:e0:bc:4a:af:
f1:13:65:ff:5d:8a:45:28:ae:27:ae:7e:24:96:10:
62:cf:7d:f2:f2:d0:49:8e:50:3b:43:26:d9:8e:0f:
d2:dc:df:7d:08:b9:a3:f8:7a:88:5a:49:45:84:58:
ad:0e:31:ca:6e:d1:4e:30:aa:d4:8f:75:0b:3f:80:
d3:f7:7c:eb:25:eb:10:56:a2:c2:83:ed:6d:da:07:
2d:75:0f:b9:1b:d6:48:b0:1b:cb:2a:ba:44:b6:6e:
3b:bd:fa:04:33:a6:20:96:6d:ae:c0:7f:75:7c:7c:
72:a6:c4:1e:53:3a:59:21:de:a0:c3:f6:5a:f0:a1:
e2:76:ce:0d:74:83:e3:db:ba:83:08:35:49:a5:2d:
16:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BB:D0:DD:87:A8:2C:0F:EB:C5:26:9C:B6:A0:7A:5A:22:CF:0D:F3
X509v3 Authority Key Identifier:
keyid:BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:c1:ef:7c:24:ff:73:d3:4a:96:a2:80:18:13:7f:b6:51:59:
41:f4:53:7a:41:8a:02:c2:6b:b9:71:5f:b8:cf:aa:69:6e:f1:
54:a5:e2:c9:9e:c5:18:68:ed:bf:1c:85:f4:54:11:33:70:17:
a3:63:35:51:5e:2f:45:f4:36:ed:c3:49:77:fc:0f:ea:da:3f:
07:19:39:77:77:1a:65:07:27:9f:5d:ad:0e:c0:87:38:ee:2d:
66:c8:56:e5:b0:3b:5c:57:ab:2d:29:11:6f:a6:f8:02:b2:56:
bc:6f:65:33:11:31:4f:f7:02:08:53:9a:8d:4a:8e:5c:f7:21:
9c:a0:ca:c1:16:89:89:99:4b:89:d9:aa:03:25:27:3b:4b:94:
b9:eb:5a:97:c1:32:6c:35:e5:17:52:cf:13:02:53:24:d4:a3:
58:a7:b4:ec:74:18:ab:f8:32:88:7f:20:e4:95:d2:f6:4b:4e:
75:9a:51:b0:c1:ff:f7:65:00:19:28:da:39:74:c9:30:13:5b:
7e:37:46:02:21:9a:2d:e6:b2:74:bf:70:ca:1d:ab:b3:2a:73:
84:b7:27:c8:59:0f:55:fd:a5:ac:f1:31:00:bf:75:7c:ba:48:
c1:4d:0d:8b:dc:c8:ed:6a:92:01:fe:ac:6e:51:31:d5:a9:64:
67:52:4b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 02:42:28 2026 by rpki-client