Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5974d6-6c67-442b-993a-7ae5987bee62/1/UmLT8nzAW-WSS7e9iQ9-be_7SX0.mft
File: UmLT8nzAW-WSS7e9iQ9-be_7SX0.mft (raw, json)
Hash identifier: m7ZESrII5fwwe+8Iyu8ERj/ULEXBWgBrir2AYtppFCQ=
Subject key identifier: C8:C2:2D:9D:70:7F:DA:B4:E9:A1:99:3E:A7:9E:31:79:98:1E:2D:EC
Authority key identifier: 52:62:D3:F2:7C:C0:5B:E5:92:4B:B7:BD:89:0F:7E:6D:EF:FB:49:7D
Certificate issuer: /CN=5262d3f27cc05be5924bb7bd890f7e6deffb497d
Certificate serial: 019D29CDD9D6F03FA62B75775803844F8983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmLT8nzAW-WSS7e9iQ9-be_7SX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5974d6-6c67-442b-993a-7ae5987bee62/1/UmLT8nzAW-WSS7e9iQ9-be_7SX0.mft
Manifest number: 17E5
Signing time: Thu 26 Mar 2026 11:00:49 +0000
Manifest this update: Thu 26 Mar 2026 11:00:49 +0000
Manifest next update: Fri 27 Mar 2026 11:00:49 +0000
Files and hashes: 1: UmLT8nzAW-WSS7e9iQ9-be_7SX0.crl (hash: B+BuIbaCtZnwVqG6PMDM3zRXMkuoV/WA2YgtKAlW96o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5974d6-6c67-442b-993a-7ae5987bee62/1/UmLT8nzAW-WSS7e9iQ9-be_7SX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5974d6-6c67-442b-993a-7ae5987bee62/1/UmLT8nzAW-WSS7e9iQ9-be_7SX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmLT8nzAW-WSS7e9iQ9-be_7SX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:d9:d6:f0:3f:a6:2b:75:77:58:03:84:4f:89:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5262d3f27cc05be5924bb7bd890f7e6deffb497d
Validity
Not Before: Mar 26 11:00:49 2026 GMT
Not After : Mar 27 11:00:49 2026 GMT
Subject: CN=c8c22d9d707fdab4e9a1993ea79e3179981e2dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e9:3b:6e:91:e5:09:e5:e7:80:55:44:bb:0f:
ac:fa:fd:b3:bc:b0:9e:12:09:77:bd:6d:39:96:e6:
25:d7:47:40:f6:1a:76:38:53:14:44:5b:4b:88:c7:
80:76:21:69:ed:54:94:50:3e:de:ca:af:21:ae:d9:
0c:52:4a:fe:18:d6:69:25:5d:02:d6:95:d5:29:c5:
41:25:b1:9c:5d:7f:42:bb:8b:cc:a7:82:03:82:40:
48:7f:ad:89:dd:1d:65:97:57:6c:33:9a:d7:05:5f:
8b:5a:2f:ad:6e:a2:e8:69:83:e5:4f:99:b2:bb:1d:
77:80:dd:1a:7f:cc:55:0d:a6:6a:21:9c:f8:d2:51:
39:ef:3a:bf:00:9b:2c:ca:45:cf:34:41:3f:37:04:
35:c7:e8:98:e7:09:9b:fc:d5:54:02:23:78:3b:22:
ce:06:f6:91:a8:23:71:50:7a:eb:18:6d:c6:d9:e1:
5f:ba:a0:a0:ed:5f:82:7b:fe:02:3a:ca:16:04:b6:
f3:1b:b1:d4:87:d2:dc:38:ec:ab:38:a3:c7:1e:d1:
bf:8e:ff:d0:b4:35:2a:19:1c:99:b8:52:71:b9:63:
43:c2:e4:d0:fc:9f:a4:7f:39:c7:d7:0f:21:3a:c6:
ec:aa:2e:c2:36:55:fc:bd:1a:c1:9c:39:d4:a6:d5:
14:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C2:2D:9D:70:7F:DA:B4:E9:A1:99:3E:A7:9E:31:79:98:1E:2D:EC
X509v3 Authority Key Identifier:
keyid:52:62:D3:F2:7C:C0:5B:E5:92:4B:B7:BD:89:0F:7E:6D:EF:FB:49:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmLT8nzAW-WSS7e9iQ9-be_7SX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5974d6-6c67-442b-993a-7ae5987bee62/1/UmLT8nzAW-WSS7e9iQ9-be_7SX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5974d6-6c67-442b-993a-7ae5987bee62/1/UmLT8nzAW-WSS7e9iQ9-be_7SX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:32:60:d0:e0:a6:d3:09:ad:e2:28:98:12:ba:97:e8:53:61:
41:65:d2:07:e7:45:28:77:2e:a3:31:ed:0f:03:8b:17:5f:af:
2c:f8:66:e0:b4:67:61:bf:65:24:d7:72:fe:4c:e2:c9:85:a6:
78:3d:74:a1:aa:9c:13:3c:27:55:85:68:75:70:1c:cb:70:85:
86:0b:80:ee:01:9d:78:ee:15:17:1e:86:58:36:ef:d5:1a:bf:
7c:44:65:0c:1e:1d:72:d3:a2:c8:0c:9c:bc:bc:b9:7e:89:a2:
ec:f7:4a:ce:1d:ad:45:6b:ff:87:ba:4c:d9:f6:c6:29:a4:4c:
39:44:46:6a:08:c7:38:6d:f5:02:5b:c7:7d:18:8f:8f:4c:37:
4a:03:4a:d6:ec:98:2d:6d:d2:98:23:97:94:3c:30:fe:03:62:
a5:d4:1a:8c:85:ce:18:95:84:b4:3f:1a:c0:64:e0:2c:85:ea:
61:3c:a0:0f:b9:5b:de:ad:2f:cc:b5:bd:e0:05:a0:6a:95:94:
fa:99:3a:a7:56:7a:69:2e:df:e1:3b:e7:e3:7c:25:d3:9e:15:
91:6d:e9:00:7a:2d:d3:bc:38:92:1a:ef:13:85:69:5c:af:fc:
90:46:bf:28:82:49:cc:d0:1f:c3:b5:37:57:22:f5:bc:c6:19:
b5:f7:a8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:53:58 2026 by rpki-client