Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.mft
File: uMxZ2ZSshg5bJeCVddmflDcOkcs.mft (raw, json)
Hash identifier: qEX3mDrHUelYryPuj0nZZqP2fboZ2hdx0oQVz8nTdCw=
Subject key identifier: 3A:BD:63:0A:73:27:0E:D2:49:33:D9:A6:3F:17:96:1A:6F:26:52:85
Authority key identifier: B8:CC:59:D9:94:AC:86:0E:5B:25:E0:95:75:D9:9F:94:37:0E:91:CB
Certificate issuer: /CN=b8cc59d994ac860e5b25e09575d99f94370e91cb
Certificate serial: 01A0F78E6888220289204ECACA79A6FC1993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMxZ2ZSshg5bJeCVddmflDcOkcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.mft
Manifest number: 0E29
Signing time: Thu 01 Oct 2026 13:01:40 +0000
Manifest this update: Thu 01 Oct 2026 13:01:40 +0000
Manifest next update: Fri 02 Oct 2026 13:01:40 +0000
Files and hashes: 1: msj-QCorJnXKr4kvj6gncmTacwY.roa (hash: 9SrsATf3LBoprWf5FN/vM5cjeV8i1QEYJtsGy50JnIY=)
2: uMxZ2ZSshg5bJeCVddmflDcOkcs.crl (hash: XYhPu9VZbQpt8L1y/a+de2FmZq5uRZt9CKSxQR0BfBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMxZ2ZSshg5bJeCVddmflDcOkcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 13:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:8e:68:88:22:02:89:20:4e:ca:ca:79:a6:fc:19:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8cc59d994ac860e5b25e09575d99f94370e91cb
Validity
Not Before: Oct 1 13:01:40 2026 GMT
Not After : Oct 2 13:01:40 2026 GMT
Subject: CN=3abd630a73270ed24933d9a63f17961a6f265285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d1:62:2c:ed:f1:40:96:8e:b7:6f:f2:b6:60:
54:24:92:86:03:69:50:52:d6:4c:68:a1:a4:6d:82:
85:16:f7:ca:49:d7:3c:b3:6e:00:05:67:72:c6:9e:
5f:c3:64:02:3b:5d:21:c7:f1:91:63:90:83:01:2c:
a7:9a:bc:ec:ca:83:0b:51:6b:10:98:2e:76:16:59:
2c:02:64:91:5c:f5:84:f7:dc:bf:55:c2:34:0b:bf:
e4:55:5e:76:cf:aa:d0:bc:e5:ed:31:a0:92:fa:0a:
f5:eb:a8:98:57:a9:d1:8e:7b:7e:7c:4b:02:c5:5c:
e6:4d:59:9b:44:e4:4d:68:86:e3:81:1d:92:0d:97:
4c:63:e5:f4:9e:7f:41:e6:b9:12:94:04:19:01:a4:
e5:bd:1d:c6:7d:26:9e:73:df:25:d7:d8:dd:6b:46:
ca:18:70:fc:e2:41:6e:a3:bb:3b:e1:d3:39:13:99:
37:b6:8e:01:a8:b4:6d:9b:13:33:05:f0:a3:dd:69:
9a:f8:ff:63:e1:6c:ab:2e:ed:83:77:bd:94:d1:03:
53:15:71:90:a3:90:e4:cb:40:ed:2b:47:25:dd:d9:
94:6c:9a:e8:29:b3:f9:fe:fd:89:91:16:d4:9b:07:
8d:c4:43:85:08:15:fd:0c:8b:71:a6:f7:d8:de:8d:
53:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:BD:63:0A:73:27:0E:D2:49:33:D9:A6:3F:17:96:1A:6F:26:52:85
X509v3 Authority Key Identifier:
keyid:B8:CC:59:D9:94:AC:86:0E:5B:25:E0:95:75:D9:9F:94:37:0E:91:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMxZ2ZSshg5bJeCVddmflDcOkcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:57:e5:90:87:5f:55:d5:f5:23:27:0b:d8:cd:dc:95:e7:f3:
07:56:f9:ed:24:29:a1:2b:b6:f5:1d:dc:65:e6:52:c5:93:cb:
bb:c0:8a:68:3f:5d:d6:7d:6d:9d:36:24:26:ac:d0:0c:24:13:
e1:d6:6f:80:af:45:27:31:c2:e5:d3:9a:e0:75:cd:91:e4:c3:
4b:24:cf:3d:23:9a:03:a3:2c:4e:30:3a:13:be:13:80:61:d8:
80:82:25:4b:d6:fb:d3:18:cc:6b:25:5b:b1:73:ab:0f:e0:2c:
bb:d8:bd:c6:54:8c:21:01:9b:d1:bc:66:eb:e6:d9:bd:ff:fd:
ed:4f:e3:d4:c0:a0:1d:84:ee:d7:63:2d:c1:0c:19:78:ac:8c:
d8:96:f4:84:38:3b:b9:94:68:92:6f:60:2d:fc:fd:f4:5d:29:
95:40:2e:58:11:a7:57:c3:d7:dc:4c:76:07:82:ed:0f:2c:9a:
4d:27:ea:7a:22:dc:09:eb:e9:51:b4:66:24:7e:08:5c:a5:8f:
d7:72:2f:00:08:ba:c5:41:cc:cc:24:b1:e1:6c:b0:8f:ed:3d:
3c:25:14:86:e8:9e:0f:ef:f5:f3:39:3a:71:2e:43:67:ea:de:
25:4b:75:21:ad:d9:f0:7a:bb:41:aa:49:b7:0a:2b:f3:e5:c6:
3d:f4:9a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 23:24:04 2026 by rpki-client