
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft
File: umCk2HTZYByBQsNS-AxWpDJ2zUc.mft (raw, json)
Hash identifier: zbwRh4LxflZdHfYj3+uS11YkPR9eR6WO0fhT1XadqTA=
Subject key identifier: AB:08:86:8E:21:FD:94:26:36:F5:D5:0A:71:71:A5:BC:93:53:74:59
Authority key identifier: BA:60:A4:D8:74:D9:60:1C:81:42:C3:52:F8:0C:56:A4:32:76:CD:47
Certificate issuer: /CN=ba60a4d874d9601c8142c352f80c56a43276cd47
Certificate serial: 01A0DD97BD79C15022FBEFA0FFD69E92E2DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft
Manifest number: 1A82
Signing time: Sat 26 Sep 2026 12:01:44 +0000
Manifest this update: Sat 26 Sep 2026 12:01:44 +0000
Manifest next update: Sun 27 Sep 2026 12:01:44 +0000
Files and hashes: 1: WoQJ2osYoFuYoWIyHvgo9Cec_t4.roa (hash: wB9N0PcZkOcrh3O/SmhX92RwWwOtgRdO/TEPN7XWM+M=)
2: _Tm2JxUvXUUwS72Udu0m-0BuZ-0.roa (hash: 1aBi4zXI+QFcwyGnxOISG2CE4CmnOOCxmThNKagGEBI=)
3: f52WTL9GGOhNAMMc7rBjnwIaWTc.roa (hash: 5tjbY4JIpfmV2gm3hhjE23Rvphjz0c3k2ZjG+/otkGI=)
4: p32AqgICpWGV5IUX6fmyer79QMY.roa (hash: Qp7WxCFuaih23zF/G1VCAMMPnZC5xDFs0GhMuipzmtk=)
5: qVb5PhcWzp2jSjoiwq3ZVNNlrxY.roa (hash: uqKfbYVlW5hlUaluGy9iii/BrL+kIfu3455zS2T6GtM=)
6: sSAJGD3q9WywlcJzJJU8b9wkNnI.roa (hash: GScXqHaLC/DvIVFv4LbVlGQC4NvQYCtdCncZDyaINVM=)
7: umCk2HTZYByBQsNS-AxWpDJ2zUc.crl (hash: Sr2o7zm7HGxiLTxK0rcGY+GtgNp4nnSm9K7TPTCceP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:bd:79:c1:50:22:fb:ef:a0:ff:d6:9e:92:e2:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba60a4d874d9601c8142c352f80c56a43276cd47
Validity
Not Before: Sep 26 12:01:44 2026 GMT
Not After : Sep 27 12:01:44 2026 GMT
Subject: CN=ab08868e21fd942636f5d50a7171a5bc93537459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:96:92:ae:eb:65:2f:a6:8e:be:2f:cf:59:b6:
44:f6:11:c0:d9:7e:7b:bc:7f:47:50:63:d3:ad:8d:
ce:77:02:94:8b:58:d5:8a:eb:98:3c:cc:50:43:f8:
d3:e0:4d:23:4d:14:f8:a1:6d:d6:41:3f:f7:dc:cf:
2a:09:5c:bc:59:d9:47:1f:6c:4d:c6:1b:4e:4c:34:
e0:f4:7d:69:34:59:6c:e1:a4:1f:2e:29:3d:fa:1b:
24:a1:83:5c:f5:cf:f5:b5:45:1e:ad:b5:a7:ad:b0:
3c:72:83:96:b9:f0:b9:0e:1a:a4:b6:65:cc:fa:13:
dd:d3:3f:0f:7b:a1:7b:34:56:42:f7:5f:a9:7c:38:
90:00:1a:fd:31:38:b9:15:bd:04:37:9a:3d:d5:40:
3b:fc:52:7e:98:b7:1f:bf:70:bc:08:d2:94:ca:79:
e4:9f:8c:fb:2a:09:8b:3b:ad:58:1d:7a:ef:81:94:
97:63:21:86:2b:cf:4a:bc:b3:01:c9:83:2c:9c:ac:
92:f9:b4:97:4d:62:bb:4d:2b:9c:9b:1b:21:b6:6b:
f7:0b:4f:37:d1:48:75:c9:0c:6b:82:f4:04:b8:1a:
13:d5:c0:00:4f:74:9f:6c:be:eb:39:70:f2:6a:cb:
30:31:5b:48:dc:99:b5:6c:d8:5f:bd:7c:f3:38:1e:
e0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:08:86:8E:21:FD:94:26:36:F5:D5:0A:71:71:A5:BC:93:53:74:59
X509v3 Authority Key Identifier:
keyid:BA:60:A4:D8:74:D9:60:1C:81:42:C3:52:F8:0C:56:A4:32:76:CD:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ff:1f:6d:31:a3:90:52:cf:a4:57:ed:18:5c:2f:b6:bf:2f:
e0:87:37:81:11:f0:a3:7b:8e:2b:82:1b:88:50:26:b8:74:12:
a8:2c:79:44:82:8c:6d:2d:f2:11:cd:f7:23:4c:a6:75:2f:c7:
43:b1:dd:2c:d2:6b:ad:4f:34:bd:10:56:8d:3c:0f:a9:38:a7:
09:2d:9d:b7:46:7c:1a:fd:17:15:fc:e5:56:1f:11:85:f0:75:
f5:f3:00:81:d6:24:09:ac:5e:38:e3:0d:0a:30:f2:9c:64:f0:
c6:0d:bc:6d:96:2d:c3:2e:cc:0a:72:ff:38:15:ed:ec:f9:12:
45:45:51:5f:65:7c:54:af:91:0d:8e:94:5c:9e:b8:be:dc:91:
18:d9:c0:5b:03:b3:f1:91:34:09:04:8a:d3:f8:1e:2b:c3:d4:
f9:cd:25:26:f4:4e:50:45:89:c0:ac:a8:ba:3b:6a:ef:aa:5b:
b9:46:b2:db:9e:98:9d:21:0a:7c:89:97:8e:0e:24:f5:c8:79:
38:d9:2a:c9:b7:b0:f0:d9:14:5d:67:7f:90:60:97:24:4a:78:
3c:66:c4:c2:af:19:e5:bc:8b:fe:91:13:94:97:a8:a0:15:ea:
b6:12:80:03:71:67:98:a2:11:a1:9f:87:26:cc:20:93:24:32:
2b:4f:f6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:46:51 2026 by rpki-client