Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
File: UmTy3QuYerdeN5-Bd6QXajCGAGg.mft (raw, json)
Hash identifier: 3gghgjtModjbEPJLAKdI1Oydmfjl9BMUcLpTXNOsgCQ=
Subject key identifier: 14:78:9B:BA:CE:B6:55:05:D0:72:42:47:66:39:73:39:7A:61:ED:12
Authority key identifier: 52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
Certificate issuer: /CN=5264f2dd0b987ab75e379f8177a4176a30860068
Certificate serial: 019F927F4A6E0DC8C9B56DDAB0E35EA8D44C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
Manifest number: 0603
Signing time: Fri 24 Jul 2026 05:00:43 +0000
Manifest this update: Fri 24 Jul 2026 05:00:43 +0000
Manifest next update: Sat 25 Jul 2026 05:00:43 +0000
Files and hashes: 1: UmTy3QuYerdeN5-Bd6QXajCGAGg.crl (hash: 56sAudy8C71JzYq0RQp+A3CBJnW7jP1uWHEOaxcT1GY=)
2: h7aUOqQIAGVx29wKcHsmI73SdWI.roa (hash: nXej1/AfJF2/TdKlqz14CbVM6VY7sIDvsNtbQhZWQmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:4a:6e:0d:c8:c9:b5:6d:da:b0:e3:5e:a8:d4:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5264f2dd0b987ab75e379f8177a4176a30860068
Validity
Not Before: Jul 24 05:00:43 2026 GMT
Not After : Jul 25 05:00:43 2026 GMT
Subject: CN=14789bbaceb65505d0724247663973397a61ed12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c8:73:4e:0c:d2:e5:79:0d:6a:8e:95:2d:ac:
fa:87:c6:a3:fd:55:af:ec:b1:1d:9d:84:6d:fb:85:
96:ca:cb:f5:a3:1d:e8:b4:ca:4b:74:e6:2e:4f:e6:
39:b8:27:37:5b:7d:6c:f1:55:39:06:99:dd:ed:1a:
4c:f9:39:2d:61:6f:d8:d9:c8:c0:49:f7:d5:8f:50:
29:ab:3f:b7:9a:c4:1d:dd:e1:2b:97:69:40:4d:ce:
ef:84:31:fd:7a:59:4d:cc:c3:cc:e6:a9:94:ba:d2:
8c:6a:f6:7b:1d:da:b8:8e:6d:a2:5f:6e:ec:e0:2b:
af:b7:c7:b9:dd:08:11:58:ca:4d:d1:ff:c3:e2:3b:
4a:b1:aa:df:20:41:41:af:7b:fa:5a:99:f7:07:d1:
0e:1c:d2:2e:16:f5:4b:c1:d3:5b:3c:2d:37:24:bd:
fa:c1:aa:c0:b1:7a:fb:2c:9f:89:de:59:87:9c:04:
43:99:0b:87:8d:93:89:8c:0b:ff:8c:4a:03:e3:ad:
26:4b:2b:ed:d7:07:47:1b:0b:8e:ee:2a:83:22:64:
4a:0e:22:64:e2:9e:d2:74:f9:f8:04:7c:78:a7:e2:
8c:e8:2e:84:7b:97:a4:62:45:1d:a5:7b:5d:dc:d6:
78:09:20:cc:af:50:c3:13:e8:b0:07:60:5c:ff:18:
83:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:78:9B:BA:CE:B6:55:05:D0:72:42:47:66:39:73:39:7A:61:ED:12
X509v3 Authority Key Identifier:
keyid:52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:75:d0:ff:41:93:b0:39:d9:a0:78:04:31:93:85:d5:c1:f4:
12:3a:97:f9:ee:c0:6b:e0:82:31:e7:1d:9e:e1:5e:f9:a1:6d:
51:e3:9e:cf:05:fd:73:54:c0:51:54:50:9c:a8:a7:fe:16:56:
48:06:a6:61:91:e1:e8:ca:b5:9d:b5:97:f4:05:af:25:5b:a4:
7f:cc:fc:27:57:4b:64:f5:04:c9:d1:cc:d9:d4:87:e0:1d:cc:
16:81:75:f2:70:58:57:9e:f5:3d:da:30:ad:1d:3a:4b:cd:bf:
88:36:4c:d2:07:1c:d6:29:f9:52:30:c5:17:6b:32:99:cb:d8:
4a:7c:d3:bd:91:74:74:27:f8:14:13:0f:e7:b8:37:1f:72:5c:
88:ce:1a:e3:87:19:ea:10:5b:16:e7:85:15:88:5e:e4:53:d7:
cf:fe:8b:9b:9e:4e:7c:0f:fc:cd:1d:a9:b6:d5:78:95:a2:f8:
fd:93:b0:00:0f:90:3a:c2:cb:6d:54:23:b5:58:fa:ee:00:7c:
67:b7:9d:6a:c9:2b:fd:8d:86:f6:e5:14:72:89:f1:87:bc:92:
e5:70:ad:c4:bc:b1:4d:41:d1:c2:4e:8f:d5:6f:11:d9:dc:11:
12:51:7e:c9:c7:09:32:51:0f:62:29:16:f1:a9:58:87:e2:24:
bb:07:70:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:17:31 2026 by rpki-client