Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
File: ume_97rR64OEtYXfe-8SBvfxn34.mft (raw, json)
Hash identifier: LMwnySCAcdvBGfziKh5Xla1pLWSr6Q8sgZjAreD1imk=
Subject key identifier: 42:CB:58:04:75:17:0A:C7:48:EF:43:81:9D:9A:DB:B0:42:37:1E:ED
Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
Certificate issuer: /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Certificate serial: 019D2AE0B73C12A9514B914081ED0865237A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
Manifest number: 1035
Signing time: Thu 26 Mar 2026 16:01:03 +0000
Manifest this update: Thu 26 Mar 2026 16:01:03 +0000
Manifest next update: Fri 27 Mar 2026 16:01:03 +0000
Files and hashes: 1: EZ3QYuO1aqPZJjLHT0YYVGkNCoQ.roa (hash: VhRxVbInTPM1O+Ldm/7obKGqKOZ2+6LZ1EZrcIQqOtM=)
2: GTk4_xkEVcCortfUUwlKNErPXJ8.roa (hash: uEhgRh2xa40WAcBKwOTkS5sGlJsngCqmoIk1TCwsS1s=)
3: SM6e5UqBHogNbgt0o12BmkZX2DY.roa (hash: U4nFBrr+xudjO3gD5UENImDfwahddAJuHGHpyaSej5k=)
4: fMPPEhoc1eJ7TtYJwhoTEBEj3u0.roa (hash: TFEzfDo3Zwa4HL59NImWxFGsVixNQrbjisILgLkXLHY=)
5: h_2qOElNrBzAnf1LUZW2aWng-XM.roa (hash: rICSl+rZfnDOtpaXQ1fWuEhsduvsyeMqtvQvV1DpKH8=)
6: ume_97rR64OEtYXfe-8SBvfxn34.crl (hash: V98RiuPC0KymHG/kaW49D4ioo4q/ACaRo3CR1I8pHJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:b7:3c:12:a9:51:4b:91:40:81:ed:08:65:23:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Validity
Not Before: Mar 26 16:01:03 2026 GMT
Not After : Mar 27 16:01:03 2026 GMT
Subject: CN=42cb580475170ac748ef43819d9adbb042371eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e0:44:d8:40:22:bc:46:96:8c:6f:2f:a4:36:
95:6c:56:5a:bf:f1:8a:7d:a6:0b:47:4a:71:a5:14:
5d:d8:06:9d:d8:a9:8b:08:e4:56:6e:25:3d:cb:3a:
0a:fb:65:b2:ef:9b:da:ef:eb:30:11:f0:08:8b:13:
16:00:98:90:0d:7e:3e:65:d2:37:d8:dc:32:85:b7:
bc:0b:9f:83:9c:41:57:b1:71:9c:85:79:7b:2e:0c:
cd:3d:43:64:f6:ba:56:9f:76:24:e0:ec:04:fe:67:
b8:fa:28:02:1a:0c:fe:13:51:96:d5:fa:83:61:a3:
39:73:91:f1:4e:12:69:c6:51:e5:30:64:87:c1:4b:
98:69:84:4d:a0:a5:cf:2f:7e:7a:4a:08:ec:fd:51:
dd:6f:ae:21:c4:19:8f:49:e5:f0:6a:f7:e7:5a:5b:
36:fd:af:f8:82:7e:fd:16:b1:c4:4b:a5:1f:27:41:
4c:f1:bd:c5:35:4c:6e:4e:87:8b:00:72:c6:ed:82:
a7:48:ce:f4:e3:eb:95:e0:ec:9a:08:75:c9:0e:be:
7b:81:db:b5:76:6f:c2:d2:eb:01:e9:e8:37:c8:01:
7c:95:45:58:da:a1:73:ce:1f:18:79:cb:2c:78:e2:
ff:05:67:13:07:a6:97:6e:b6:f4:c2:79:dd:a0:d3:
c6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CB:58:04:75:17:0A:C7:48:EF:43:81:9D:9A:DB:B0:42:37:1E:ED
X509v3 Authority Key Identifier:
keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a0:6b:41:34:66:4f:3c:3f:99:56:6a:05:b0:83:7b:9a:93:
ea:e5:f0:31:61:15:26:0c:3f:85:44:79:7f:f0:35:0b:9f:14:
32:03:0c:3a:ee:4e:b5:1b:68:3a:e0:b9:60:c2:c3:b8:52:27:
07:e5:53:d6:db:8e:f1:a9:34:0e:55:fe:a8:2b:45:2b:2e:14:
f8:c9:e6:2e:96:c2:bc:c8:3b:54:12:1f:26:f8:ca:d7:b1:8b:
1e:fc:ba:73:65:b4:39:6a:6b:fc:55:f4:68:9f:99:9e:97:7d:
c0:82:c3:7d:8e:b2:3a:1b:14:ab:0b:fb:ba:84:bf:d7:98:43:
3d:00:17:68:2e:00:26:84:e1:ba:04:27:ce:e6:0a:87:0b:a5:
0b:a1:5f:8c:7a:df:40:22:c4:36:c0:33:db:30:75:dc:a5:79:
8e:a8:ba:4e:4f:69:43:8a:e8:16:56:e1:1e:82:af:e3:39:91:
11:4c:d7:56:f7:7e:31:c9:59:cc:cf:9e:31:92:39:2e:ed:65:
14:23:aa:7c:b3:5f:77:3a:8d:5b:f5:3f:46:74:db:6e:38:7a:
c2:d7:2b:4b:36:a7:9f:49:db:a1:8e:1d:f2:d5:f8:2f:77:f6:
ad:81:2d:5a:e4:b9:d7:cd:b7:fd:cc:38:2f:45:9c:42:b5:e4:
ac:19:d8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:31:07 2026 by rpki-client