Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/945b53-d788-487b-a982-0903ee7c1902/1/bUmIt5OIS3moT-NFY9A581RsGF8.mft
File: bUmIt5OIS3moT-NFY9A581RsGF8.mft (raw, json)
Hash identifier: SgZZT1ovbCKycrNZ2XEFufmxrbzljUAnGjMFBefXTK0=
Subject key identifier: 7B:C4:A2:D9:E8:59:15:B9:68:C4:F1:10:B8:23:6B:7F:FE:B4:D9:66
Authority key identifier: 6D:49:88:B7:93:88:4B:79:A8:4F:E3:45:63:D0:39:F3:54:6C:18:5F
Certificate issuer: /CN=6d4988b793884b79a84fe34563d039f3546c185f
Certificate serial: 01A0CCA34FCF35C400A114FCB3C08F4A20E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bUmIt5OIS3moT-NFY9A581RsGF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/945b53-d788-487b-a982-0903ee7c1902/1/bUmIt5OIS3moT-NFY9A581RsGF8.mft
Manifest number: 0430
Signing time: Wed 23 Sep 2026 05:00:49 +0000
Manifest this update: Wed 23 Sep 2026 05:00:49 +0000
Manifest next update: Thu 24 Sep 2026 05:00:49 +0000
Files and hashes: 1: bUmIt5OIS3moT-NFY9A581RsGF8.crl (hash: gcakePy5QiHhicGXWUnHS9oQw1Ugq1j9usYozdACrJk=)
2: uwtH6XSMIlNNvLETWa2zBCtCv54.asa (hash: PZz6lUyUjmeDMW0cN5tom+AMwKUKSuKpAQKvZ9tNaSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/945b53-d788-487b-a982-0903ee7c1902/1/bUmIt5OIS3moT-NFY9A581RsGF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/945b53-d788-487b-a982-0903ee7c1902/1/bUmIt5OIS3moT-NFY9A581RsGF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bUmIt5OIS3moT-NFY9A581RsGF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:4f:cf:35:c4:00:a1:14:fc:b3:c0:8f:4a:20:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d4988b793884b79a84fe34563d039f3546c185f
Validity
Not Before: Sep 23 05:00:49 2026 GMT
Not After : Sep 24 05:00:49 2026 GMT
Subject: CN=7bc4a2d9e85915b968c4f110b8236b7ffeb4d966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:51:1f:55:19:f5:e6:0c:94:ea:9a:5d:1e:67:
f5:f6:f9:06:9c:4e:22:e0:ab:ca:fb:11:06:30:3d:
60:e4:73:a2:4b:be:7c:5d:80:01:85:41:f4:c2:e2:
e7:ca:f4:a4:fd:ba:e6:18:6c:a8:51:33:89:bd:5c:
f2:12:6e:68:66:02:2f:1b:3d:af:0d:b1:c0:8b:56:
63:67:d8:ec:48:0f:b4:73:88:15:9d:8e:0d:86:ed:
85:81:0c:f1:a2:2f:c5:6c:9d:40:f3:ca:b0:9c:df:
9f:49:fe:7d:45:ff:2a:10:1c:12:c7:73:a2:ef:cb:
b6:aa:a3:0b:d2:cd:96:6b:1d:33:54:80:a6:e3:bb:
aa:b7:a5:5d:03:87:9e:f8:49:5a:69:76:a9:3f:21:
f8:1a:ae:0e:e9:9f:bf:a3:ee:e8:79:a7:71:5e:53:
a2:11:82:b7:e0:80:65:aa:0f:78:54:a1:63:41:86:
24:2b:91:43:58:b3:7d:21:54:09:9a:54:d2:0e:5b:
1f:b6:82:88:31:70:21:73:fb:4e:6c:ae:ef:8f:01:
cb:8a:50:d9:65:c6:1f:5b:66:88:52:ad:c4:02:89:
71:e5:cd:96:dd:5a:57:e8:bc:88:ab:fe:82:bd:d2:
30:83:bf:b9:74:97:89:58:8d:c7:3b:34:d8:80:ff:
7f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C4:A2:D9:E8:59:15:B9:68:C4:F1:10:B8:23:6B:7F:FE:B4:D9:66
X509v3 Authority Key Identifier:
keyid:6D:49:88:B7:93:88:4B:79:A8:4F:E3:45:63:D0:39:F3:54:6C:18:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bUmIt5OIS3moT-NFY9A581RsGF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/945b53-d788-487b-a982-0903ee7c1902/1/bUmIt5OIS3moT-NFY9A581RsGF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/945b53-d788-487b-a982-0903ee7c1902/1/bUmIt5OIS3moT-NFY9A581RsGF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:99:04:c7:a1:00:76:4d:8f:07:97:b0:1f:dc:e5:ab:0c:32:
ff:a0:77:e0:f3:7f:d6:f1:1f:4a:6b:2e:6b:fd:a3:ed:fa:22:
ec:ec:89:f0:bc:a6:95:28:23:3f:bb:d7:73:d2:cf:92:84:0f:
ec:1c:4e:6d:ba:cd:23:38:c1:af:2b:21:17:a8:1e:93:c0:f8:
69:76:05:ea:79:f0:25:1b:8c:35:bb:d1:a7:58:76:68:50:f1:
1d:75:b7:ff:d5:fe:e7:32:94:0d:16:fe:b8:13:a9:ba:00:70:
6c:52:3e:a9:dc:4a:a2:f1:80:1e:72:cb:7c:a0:29:2e:d6:4c:
94:69:32:ac:aa:78:35:7a:a8:df:96:b5:9d:4e:c2:59:40:ed:
36:9d:0e:d1:ae:95:8d:7b:e5:5e:35:da:98:1c:09:36:eb:57:
46:e6:4f:9d:e8:42:cb:86:da:e3:78:8a:0a:41:b5:46:e3:16:
e7:ef:79:1e:6c:ce:41:e8:4b:57:2c:8a:23:0f:46:06:ce:31:
9b:27:08:a5:b4:3f:70:6d:93:32:06:46:f3:f9:42:d8:bd:43:
dc:f4:91:f7:be:f6:8b:70:50:88:e6:e2:24:68:37:c7:b6:79:
a7:9e:ab:2f:85:cc:06:c2:68:dd:1d:d8:c4:6f:c3:63:80:3a:
42:af:19:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:27:43 2026 by rpki-client