Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft
File: umCk2HTZYByBQsNS-AxWpDJ2zUc.mft (raw, json)
Hash identifier: U4heSHEFxabF9F7RtffXPip99Q3od0odAWwmE4cNJaM=
Subject key identifier: 9F:4B:4D:DC:54:68:98:DE:E2:E9:82:EA:F3:A3:5A:A4:87:DA:13:D4
Authority key identifier: BA:60:A4:D8:74:D9:60:1C:81:42:C3:52:F8:0C:56:A4:32:76:CD:47
Certificate issuer: /CN=ba60a4d874d9601c8142c352f80c56a43276cd47
Certificate serial: 01A1DB015DE7AAE51549C129C957D6A40F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft
Manifest number: 1B06
Signing time: Sat 14 Nov 2026 17:01:02 +0000
Manifest this update: Sat 14 Nov 2026 17:01:02 +0000
Manifest next update: Sun 15 Nov 2026 17:01:02 +0000
Files and hashes: 1: NH6Kxbw3owXkcn71mMgtvz0Y0hk.roa (hash: 9K/OKUGyyv+EkjvXSN956FdqTIF+oPfgyQZUcSZZM2w=)
2: WoQJ2osYoFuYoWIyHvgo9Cec_t4.roa (hash: wB9N0PcZkOcrh3O/SmhX92RwWwOtgRdO/TEPN7XWM+M=)
3: _Tm2JxUvXUUwS72Udu0m-0BuZ-0.roa (hash: 1aBi4zXI+QFcwyGnxOISG2CE4CmnOOCxmThNKagGEBI=)
4: f52WTL9GGOhNAMMc7rBjnwIaWTc.roa (hash: 5tjbY4JIpfmV2gm3hhjE23Rvphjz0c3k2ZjG+/otkGI=)
5: p32AqgICpWGV5IUX6fmyer79QMY.roa (hash: Qp7WxCFuaih23zF/G1VCAMMPnZC5xDFs0GhMuipzmtk=)
6: qVb5PhcWzp2jSjoiwq3ZVNNlrxY.roa (hash: uqKfbYVlW5hlUaluGy9iii/BrL+kIfu3455zS2T6GtM=)
7: sSAJGD3q9WywlcJzJJU8b9wkNnI.roa (hash: GScXqHaLC/DvIVFv4LbVlGQC4NvQYCtdCncZDyaINVM=)
8: umCk2HTZYByBQsNS-AxWpDJ2zUc.crl (hash: L3OnIlfAS0732KsbjZ6W8gFluTEhl8OS3nkttIkLPzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 17:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:01:5d:e7:aa:e5:15:49:c1:29:c9:57:d6:a4:0f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba60a4d874d9601c8142c352f80c56a43276cd47
Validity
Not Before: Nov 14 17:01:02 2026 GMT
Not After : Nov 15 17:01:02 2026 GMT
Subject: CN=9f4b4ddc546898dee2e982eaf3a35aa487da13d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:31:02:67:b3:86:62:31:34:86:4f:e9:b9:35:
89:0a:fa:07:01:3d:1e:e4:75:7e:c7:54:5a:8e:c2:
73:e8:f3:45:2b:48:2f:5c:74:1c:60:aa:2a:3e:05:
80:5d:34:54:94:4b:7a:c5:73:c2:8d:f7:66:0e:1a:
f4:df:4c:6b:0e:99:0f:98:64:9d:fb:6f:c5:80:7f:
4c:46:12:d6:de:56:0a:9b:12:57:0d:2b:84:2e:ee:
24:0a:70:ee:6b:d9:a9:d3:90:05:f3:7b:ce:06:fd:
0c:55:9d:71:bd:83:68:40:37:8c:9c:92:92:54:e2:
a4:58:9b:c2:3d:63:d6:32:d6:a4:27:66:49:75:f9:
c7:7f:88:6c:7f:36:18:59:32:7e:a3:61:50:78:81:
67:5d:6c:a6:40:15:54:65:e1:89:bf:70:fb:24:8b:
66:ed:62:d1:07:25:ba:3d:96:b3:4d:de:08:bb:7e:
f4:df:64:81:b5:98:de:f7:eb:c8:45:86:cf:4a:2f:
0f:f5:5c:e6:4a:3e:00:7f:e4:e8:ca:ed:d0:89:1c:
02:61:8e:26:5f:4c:7f:60:a2:b3:00:e3:7a:9e:27:
15:0c:2e:64:39:60:8b:64:22:5a:e8:6c:8c:c7:74:
35:26:00:1a:d1:c2:6c:28:5e:a5:1f:e1:4f:1c:77:
4f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4B:4D:DC:54:68:98:DE:E2:E9:82:EA:F3:A3:5A:A4:87:DA:13:D4
X509v3 Authority Key Identifier:
keyid:BA:60:A4:D8:74:D9:60:1C:81:42:C3:52:F8:0C:56:A4:32:76:CD:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ab:9b:e7:e6:6d:bf:f4:bb:90:18:2b:8e:fa:a7:67:1c:47:
d7:85:cb:e2:a6:93:5c:21:e5:58:b2:79:47:16:08:92:cd:f6:
5a:ed:b0:34:63:de:c3:ef:2a:34:ac:5c:55:e4:f0:23:ca:0f:
f8:3b:ec:40:9c:92:bd:2b:d7:81:62:52:34:38:ab:66:13:81:
6f:a5:74:50:5b:62:89:08:5f:76:53:8c:a8:92:50:c2:ab:7f:
2c:f9:9e:60:a1:20:88:10:39:a6:b2:70:a6:69:dc:b0:37:e0:
5d:f6:9f:dc:a0:f7:2c:9f:cf:6c:03:0f:de:fc:d4:37:27:90:
69:bb:41:95:6f:47:f7:a2:da:a1:18:60:a4:5d:29:fb:74:13:
85:30:c8:60:ed:54:42:e7:e5:81:04:26:06:84:59:cf:30:27:
f4:57:1a:f5:20:04:cd:03:65:7a:90:63:e4:3c:6b:6d:f1:99:
5e:8c:fd:7a:7f:5c:48:16:15:0a:45:79:90:cb:06:d2:9e:16:
c2:36:3a:22:2c:42:ef:82:b7:af:a9:36:7f:1a:29:0d:3c:69:
46:80:e3:a3:d5:52:1b:d2:9e:5d:a3:82:8d:57:3f:59:94:f3:
13:a2:69:9e:30:c3:60:55:36:09:de:40:57:e7:dd:9f:0d:e3:
01:42:2b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:09:13 2026 by rpki-client