Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/945b53-d788-487b-a982-0903ee7c1902/1/bUmIt5OIS3moT-NFY9A581RsGF8.mft
File: bUmIt5OIS3moT-NFY9A581RsGF8.mft (raw, json)
Hash identifier: Z/OScSYw00lR0sBSSGFxhVOdFwg6cRG/wLKV9RsjARY=
Subject key identifier: 5F:F8:57:8D:E1:DA:0C:53:17:76:BB:98:39:18:40:1A:C1:D8:80:E1
Authority key identifier: 6D:49:88:B7:93:88:4B:79:A8:4F:E3:45:63:D0:39:F3:54:6C:18:5F
Certificate issuer: /CN=6d4988b793884b79a84fe34563d039f3546c185f
Certificate serial: 01A1DB01A62DECB5CA04897CBC13B679BC4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bUmIt5OIS3moT-NFY9A581RsGF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/945b53-d788-487b-a982-0903ee7c1902/1/bUmIt5OIS3moT-NFY9A581RsGF8.mft
Manifest number: 04BC
Signing time: Sat 14 Nov 2026 17:01:20 +0000
Manifest this update: Sat 14 Nov 2026 17:01:20 +0000
Manifest next update: Sun 15 Nov 2026 17:01:20 +0000
Files and hashes: 1: bUmIt5OIS3moT-NFY9A581RsGF8.crl (hash: hf0ZZ34hO28fJt5oZAoV/+Ievt0+TYxn8394rmFm+Zo=)
2: uwtH6XSMIlNNvLETWa2zBCtCv54.asa (hash: PZz6lUyUjmeDMW0cN5tom+AMwKUKSuKpAQKvZ9tNaSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/945b53-d788-487b-a982-0903ee7c1902/1/bUmIt5OIS3moT-NFY9A581RsGF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/945b53-d788-487b-a982-0903ee7c1902/1/bUmIt5OIS3moT-NFY9A581RsGF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bUmIt5OIS3moT-NFY9A581RsGF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:01:a6:2d:ec:b5:ca:04:89:7c:bc:13:b6:79:bc:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d4988b793884b79a84fe34563d039f3546c185f
Validity
Not Before: Nov 14 17:01:20 2026 GMT
Not After : Nov 15 17:01:20 2026 GMT
Subject: CN=5ff8578de1da0c531776bb983918401ac1d880e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9a:70:2a:db:de:40:e7:9c:6c:35:ca:b3:d6:
80:91:79:f7:cc:d6:8b:e8:58:0e:ed:a3:8c:4a:3f:
6b:72:14:6f:83:18:24:fe:d7:87:43:23:83:c8:5e:
36:32:44:07:35:22:92:ef:ca:48:ff:36:7d:7d:eb:
52:ff:b6:b1:12:8d:df:8a:49:55:87:48:36:3a:aa:
ed:ae:2c:c2:8e:4e:f1:09:d8:20:ec:71:2f:ea:d9:
87:23:ea:6f:e8:f4:d8:42:e3:97:3a:6b:af:a3:05:
74:52:44:f2:e7:fa:b1:6c:17:f0:d9:18:ac:ef:49:
ad:e6:53:f0:46:c2:9c:2e:01:c0:b0:b8:fa:fd:1b:
31:2f:a1:91:3a:86:0f:01:7f:91:59:52:e6:c1:11:
d7:aa:27:88:2d:d4:6b:0f:7a:d0:8f:88:4f:7b:ec:
03:0b:fe:ea:9c:b6:50:2d:1f:31:61:79:5d:66:bf:
c5:4a:79:5a:85:21:4b:8d:a9:99:c1:80:57:f5:13:
ae:64:fb:0b:7a:60:92:7c:4b:53:0f:3f:e7:92:29:
e9:f7:39:b2:fd:56:bf:0e:b8:b5:67:86:1a:d0:4d:
a1:7c:9c:5a:0f:e3:65:a5:25:73:f7:08:17:6a:c4:
ce:e2:6e:57:28:df:e3:bd:58:57:57:01:1b:6d:63:
77:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F8:57:8D:E1:DA:0C:53:17:76:BB:98:39:18:40:1A:C1:D8:80:E1
X509v3 Authority Key Identifier:
keyid:6D:49:88:B7:93:88:4B:79:A8:4F:E3:45:63:D0:39:F3:54:6C:18:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bUmIt5OIS3moT-NFY9A581RsGF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/945b53-d788-487b-a982-0903ee7c1902/1/bUmIt5OIS3moT-NFY9A581RsGF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/945b53-d788-487b-a982-0903ee7c1902/1/bUmIt5OIS3moT-NFY9A581RsGF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:62:50:e1:36:54:5b:c6:4c:6b:d5:1a:80:d7:7b:2d:a4:9c:
af:09:f8:9f:80:5e:65:ba:78:54:2a:7e:d5:ca:8a:24:a7:a7:
8a:d7:85:cf:d4:50:a3:38:63:09:1b:54:40:85:3f:03:6c:69:
7b:47:4d:8a:06:06:34:94:04:d8:c9:4c:c8:8e:dd:9d:97:c5:
2a:43:a1:bc:06:c7:73:2f:c1:b2:c9:b9:11:cc:8b:59:eb:3f:
75:e2:63:33:46:1f:33:cc:14:b4:51:43:96:95:64:ca:4d:1a:
f0:37:07:20:c0:ff:a8:0d:25:7e:ae:e6:ef:ea:2f:23:03:8b:
8d:a2:61:7f:f8:6e:fb:46:09:93:a2:f8:c7:bc:4a:39:40:5f:
a7:4e:5f:99:b5:bc:44:28:8d:3f:94:83:d8:9f:7b:a2:b7:3a:
f7:f0:b7:1e:97:95:a5:46:cc:35:db:1c:f3:7d:68:2f:fd:02:
6c:aa:fa:59:c8:fc:8a:e7:63:c2:e9:77:56:7e:2e:fe:3f:5c:
af:2e:b4:33:92:7a:1f:df:9b:7c:dc:58:53:ae:3a:06:7a:d3:
0f:2d:11:61:7e:7c:3f:22:10:c1:3f:5d:97:2f:78:e6:df:6b:
9d:31:05:55:46:9e:f4:b6:09:fc:01:ea:33:ed:f8:e9:b0:3d:
40:ff:ab:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:52:14 2026 by rpki-client