Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft
File: UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft (raw, json)
Hash identifier: woiGGXB5iDQDx8MAtq3w8ICIloJM8l8+jNC+6megHV4=
Subject key identifier: 75:99:29:37:71:FD:1C:49:84:C6:25:C8:89:45:C7:64:13:80:77:95
Authority key identifier: 50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
Certificate issuer: /CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Certificate serial: 019D2772A072B2424296ACBD2D588C7B679A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft
Manifest number: 18A5
Signing time: Thu 26 Mar 2026 00:01:56 +0000
Manifest this update: Thu 26 Mar 2026 00:01:56 +0000
Manifest next update: Fri 27 Mar 2026 00:01:56 +0000
Files and hashes: 1: 1TMkY76y_V6mPJpsV1naKX6HlYE.roa (hash: 7g6t4h4bRD3CQ+x9cEpMvRx7n8nsWpYU3/XxpEQtDK8=)
2: 4Ffdv4KtJfFvxZLjqWGkVv74nAQ.roa (hash: sdhLpSw3Nqp2sJtnjs2/xgyKEd+7ky/DZNBPyzQg5go=)
3: 53B8FRI7nRRNBbxhMzXE9n-mCys.roa (hash: wLJkzwgPSg2ecFqsLih9Nw7Px9kiK752n9vZL4ROi5o=)
4: Iz81YeF4Yaopqn4t0LL3OA1IuQs.roa (hash: U7q18MGaToAHycayT/bTwS2UUHwaN8gc3zIyXx5SQn4=)
5: UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl (hash: mzfHGDLCaWiwpX4Re2EPly/wPIHANFSXmr7mH/oCRMc=)
6: VQiElCspYygojHZx1e_d787gq8M.roa (hash: cYsGyxOGTSDbkK7Bo8Dcbyj6xyiZ7rpceD54Wi9Pnvo=)
7: XonmnFu_hl5fLd1NFTkRdlszSzs.roa (hash: nis1JSWNkVlYV4JdLmei0R+V1a6IX6+JXGHy2zIU2ZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:a0:72:b2:42:42:96:ac:bd:2d:58:8c:7b:67:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Validity
Not Before: Mar 26 00:01:56 2026 GMT
Not After : Mar 27 00:01:56 2026 GMT
Subject: CN=7599293771fd1c4984c625c88945c76413807795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2c:d6:60:c3:7f:b5:18:4e:d8:24:c2:99:08:
30:ac:15:a9:d3:78:86:a2:86:e0:18:bd:8b:37:3f:
73:83:da:21:50:68:62:e8:f1:9b:1d:86:19:f9:c6:
58:d0:5c:1f:c1:fc:f9:18:38:39:57:a2:6e:ea:fa:
5d:eb:5b:04:6b:b3:9e:a3:2a:2a:f0:1f:0d:1a:5e:
b9:cf:d5:b4:ec:9c:28:00:a0:bd:4e:14:9e:8d:60:
00:fc:ff:5a:5f:07:83:e4:ab:a2:bc:86:b0:d6:8a:
75:34:6d:b5:1c:8b:eb:8d:d1:84:94:40:59:eb:17:
9a:15:08:87:d8:54:41:23:b7:55:14:0d:db:03:25:
3c:ca:ce:1e:52:20:58:62:b6:54:e4:12:9e:62:fd:
88:3b:cd:f3:af:56:22:6b:47:07:30:01:57:78:93:
92:ac:ec:e8:5f:9d:33:d8:26:32:4e:9e:5d:ab:0d:
ec:f5:df:bf:be:59:e3:76:6f:f4:27:62:6f:d9:9d:
80:db:77:a2:66:13:7d:90:b0:68:e4:e3:5c:c1:d6:
78:af:d0:4b:48:fa:23:92:e5:79:8b:06:90:f7:82:
a2:11:0c:bf:9d:40:7f:98:10:64:61:ba:44:10:36:
1c:ee:e5:37:99:ad:4b:b4:80:52:82:ee:a9:69:c9:
55:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:99:29:37:71:FD:1C:49:84:C6:25:C8:89:45:C7:64:13:80:77:95
X509v3 Authority Key Identifier:
keyid:50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:a8:b6:28:81:8c:f7:8f:af:2a:9a:c9:b1:97:ae:40:82:5b:
75:27:84:4f:06:55:31:1d:34:16:4b:b4:9b:f1:f2:3f:d6:d3:
a7:67:ae:a2:d2:eb:20:48:c2:cc:64:01:67:b3:4d:7a:a2:fa:
ea:88:8e:d5:e6:36:c7:ee:66:97:ba:2a:72:46:e8:94:87:57:
3e:27:29:91:11:73:52:7c:1e:bf:87:6b:9b:c0:21:6d:44:0d:
1c:51:9c:eb:c2:31:e7:32:57:e7:de:15:d0:c9:fe:7a:8c:c3:
0d:a0:36:1f:65:a8:81:1e:68:e0:be:6b:c1:e9:44:09:b8:c2:
3a:9d:88:25:ca:96:b4:1a:f2:a8:28:32:35:89:7f:cc:ec:d7:
d6:9d:a6:04:cd:2e:e6:a4:e8:3a:e2:b4:98:62:6e:0a:33:60:
3f:c4:1e:78:93:c3:f3:b9:6b:96:c5:57:d4:95:ad:03:0b:6d:
4b:dc:d5:30:63:bb:17:7f:07:78:7a:61:d6:22:22:21:94:68:
13:9d:f1:1a:02:0c:db:f9:29:ac:2c:34:de:44:8e:84:7c:e1:
40:92:3d:9a:4b:19:91:9f:ef:6a:dc:d3:f6:8a:94:84:f3:47:
69:2c:8a:f7:a3:39:28:ce:03:2b:b9:fc:45:e7:36:d9:aa:2f:
0a:f6:20:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:31:37 2026 by rpki-client