Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
File: UmTy3QuYerdeN5-Bd6QXajCGAGg.mft (raw, json)
Hash identifier: nENo7mXvhIZQsOonP2+gaH5ZY+n6A+0gP+W3urnnngA=
Subject key identifier: 2D:E3:E8:11:D3:41:F7:E3:01:F8:A9:5E:37:3E:35:46:4F:0C:E7:BC
Authority key identifier: 52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
Certificate issuer: /CN=5264f2dd0b987ab75e379f8177a4176a30860068
Certificate serial: 01A0D237B39E17A20DCB01ECA2AD63A17286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
Manifest number: 06A9
Signing time: Thu 24 Sep 2026 07:01:00 +0000
Manifest this update: Thu 24 Sep 2026 07:01:00 +0000
Manifest next update: Fri 25 Sep 2026 07:01:00 +0000
Files and hashes: 1: SjTVfgx1YmDzVlw-a0V5KmMIKRE.roa (hash: FiCGGz46S1/JlpdVCTYWxDtKkfziWJdtEEF1Tk4QjOQ=)
2: UmTy3QuYerdeN5-Bd6QXajCGAGg.crl (hash: 74J3OR3ajNc7MOMXPWmGnCBiA5UuUcVgJLCG9lG+jgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:b3:9e:17:a2:0d:cb:01:ec:a2:ad:63:a1:72:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5264f2dd0b987ab75e379f8177a4176a30860068
Validity
Not Before: Sep 24 07:01:00 2026 GMT
Not After : Sep 25 07:01:00 2026 GMT
Subject: CN=2de3e811d341f7e301f8a95e373e35464f0ce7bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:41:9c:07:6c:05:69:49:68:89:7f:cf:32:cc:
c9:21:a6:18:0b:15:06:b9:a4:af:9a:44:c3:57:c3:
0c:ba:b6:e8:79:59:dd:2d:7c:8e:9c:62:e4:dc:ab:
8b:39:b4:57:f6:2c:17:c4:fb:e9:a7:85:f8:e4:6d:
cb:e5:79:ae:0a:9b:1b:27:e3:1b:85:36:fb:c7:50:
40:28:aa:82:85:60:84:07:2c:9e:f1:70:ba:f7:59:
4d:4c:34:bc:54:fc:d6:17:7a:4c:a5:88:11:e0:d8:
7f:6e:f8:26:09:1d:25:56:2d:d9:e7:42:d4:bd:6d:
e3:60:63:a0:b1:a9:49:b3:0b:26:e1:95:bf:58:aa:
4a:28:b3:73:2a:eb:da:c3:46:dc:ff:4b:35:8a:85:
b7:45:f8:82:6c:84:a5:e7:06:8e:b1:61:a4:a7:fc:
ee:88:1e:d9:d3:07:b3:fb:a6:80:dd:30:1a:c6:ee:
4b:ec:4a:74:31:bd:2e:ac:55:b5:c9:99:d1:80:db:
65:b1:3a:cc:fd:4f:b4:bf:35:c2:12:fb:f1:0c:1f:
1a:9e:c2:f4:ea:fa:04:df:aa:76:f8:73:ab:24:bb:
fd:d5:13:9c:c9:99:93:1b:87:36:3a:aa:a5:3c:29:
58:72:f4:43:b4:28:3f:db:a7:6b:34:78:3c:d5:dc:
f7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E3:E8:11:D3:41:F7:E3:01:F8:A9:5E:37:3E:35:46:4F:0C:E7:BC
X509v3 Authority Key Identifier:
keyid:52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:eb:71:60:5f:e3:fc:8c:cd:4c:4c:d1:9d:1b:8a:d6:43:c1:
ab:19:78:75:2a:78:34:9c:b6:80:f3:be:2d:c9:a6:5e:74:17:
a6:77:fd:c7:f2:3e:52:82:e3:b4:09:b4:d7:fe:b7:b0:90:71:
de:d8:a4:1d:8a:ef:d7:b9:2d:1f:e1:fd:68:96:94:00:9c:72:
8c:2a:cb:2f:d0:cc:64:5f:46:d6:61:60:93:94:2e:26:e4:00:
cb:82:5b:0c:31:6e:60:81:0e:81:ec:e0:87:1c:74:f5:49:c8:
d2:d1:e3:f6:83:6a:9f:2e:67:db:99:af:30:74:b2:68:a7:2b:
2f:b3:8b:f2:78:b3:99:de:30:94:1a:3e:fb:cb:de:b8:60:e4:
37:4d:9d:10:8d:16:4e:aa:41:dd:0e:d1:69:5e:e3:2c:e9:0a:
9a:cc:38:e9:5a:9e:8b:c4:2f:9e:bd:7b:26:0a:7e:ea:ac:9a:
82:cf:06:b2:d1:fe:7c:e7:85:b9:1a:c4:91:a9:9f:27:f6:1e:
c3:59:a3:e5:dc:3b:19:bf:35:6b:7c:29:a4:7a:93:80:75:31:
bd:c5:56:b6:98:0e:c6:1a:88:1f:a8:83:87:03:41:9c:f8:fb:
ff:fe:a2:4c:88:18:cb:18:44:ab:98:71:f0:3a:9f:c2:92:8f:
3a:36:81:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:41:52 2026 by rpki-client