Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft
File: umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft (raw, json)
Hash identifier: eBIvxAj+Y1Iit1J+pHAbPGhWFQtMDd7ySijvZa+TXww=
Subject key identifier: 79:E1:6C:95:72:34:35:78:49:17:27:74:EB:9C:88:E0:69:64:55:88
Authority key identifier: BA:68:59:59:97:90:0D:ED:30:0E:99:25:70:9D:A6:27:E9:3F:36:3A
Certificate issuer: /CN=ba68595997900ded300e9925709da627e93f363a
Certificate serial: 019F93C89E8E7E33DB45BD48404A87FB7874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/umhZWZeQDe0wDpklcJ2mJ-k_Njo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft
Manifest number: 1265
Signing time: Fri 24 Jul 2026 11:00:26 +0000
Manifest this update: Fri 24 Jul 2026 11:00:26 +0000
Manifest next update: Sat 25 Jul 2026 11:00:26 +0000
Files and hashes: 1: 6Lv0ELrWKZzM2WUhjrrfSxrLv5I.roa (hash: b+tPMLvT0wTQ8KNZFO7LFZXenP25HBtSk8cAgN48xuk=)
2: umhZWZeQDe0wDpklcJ2mJ-k_Njo.crl (hash: i5FpQ/WIrP944ZMjn14DpGp83tloUhnp74VV/ULpXfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft
rsync://rpki.ripe.net/repository/DEFAULT/umhZWZeQDe0wDpklcJ2mJ-k_Njo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:9e:8e:7e:33:db:45:bd:48:40:4a:87:fb:78:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba68595997900ded300e9925709da627e93f363a
Validity
Not Before: Jul 24 11:00:26 2026 GMT
Not After : Jul 25 11:00:26 2026 GMT
Subject: CN=79e16c957234357849172774eb9c88e069645588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5c:8d:8b:86:79:55:f0:1f:67:11:40:8a:d3:
c0:39:c1:e1:11:4f:b6:90:34:24:1c:32:4d:66:16:
b1:f5:0e:18:62:d8:3d:1a:0b:d8:b1:2f:58:7c:d6:
85:b9:bf:a2:2d:86:11:ce:45:65:a5:ab:c4:14:80:
9c:2b:22:43:0b:3b:87:bc:c2:07:cd:ce:72:71:5e:
1e:2b:6a:0b:ae:2e:4a:92:fd:58:7e:9f:ba:d6:73:
5d:4e:d3:e4:ce:08:6c:63:c1:1f:bf:6b:d4:72:85:
8e:56:dd:b4:34:8f:bb:12:9a:f5:ce:5a:96:34:90:
7b:3e:0f:67:7f:b0:56:61:40:1a:eb:08:7f:72:c3:
27:00:f9:2c:07:9f:d4:7e:ae:63:da:4d:e9:d8:5a:
36:27:11:f0:18:ae:e6:12:bc:51:7a:e2:0b:a4:78:
10:ba:47:58:75:76:8e:2c:a3:56:1c:a0:1b:dd:99:
8e:22:96:14:6a:6a:74:65:f0:3b:02:76:eb:5f:50:
e0:94:91:ee:ed:c7:74:9a:e5:e0:d6:e4:21:56:09:
7e:8f:99:83:e0:ef:6c:e0:e1:5d:ef:a4:03:22:16:
21:4e:50:ae:29:36:2a:14:59:1d:ef:a1:c0:09:75:
56:c1:97:bd:44:f3:71:5c:b7:9e:ef:7a:f6:c8:f1:
c0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E1:6C:95:72:34:35:78:49:17:27:74:EB:9C:88:E0:69:64:55:88
X509v3 Authority Key Identifier:
keyid:BA:68:59:59:97:90:0D:ED:30:0E:99:25:70:9D:A6:27:E9:3F:36:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/umhZWZeQDe0wDpklcJ2mJ-k_Njo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:ac:0f:24:e2:be:01:15:78:b6:2c:01:8f:4c:0e:c4:5a:54:
8c:a4:49:f1:67:b7:c4:49:18:58:b6:a1:88:ee:65:a9:59:54:
99:45:01:72:96:4f:d1:2e:56:33:45:6e:69:dd:73:5a:57:0c:
a6:fe:77:54:8e:28:42:61:6b:03:60:13:bc:d3:09:2b:ed:8e:
b1:e3:46:56:23:c8:e9:74:71:4f:02:2c:a4:b8:15:a1:6a:8d:
76:ce:98:b4:38:7c:c5:aa:97:0b:2e:04:e9:db:09:d9:2c:1a:
fc:d9:9e:82:7a:eb:b7:46:42:03:00:cb:df:9b:81:1a:cb:25:
de:79:f7:05:43:47:df:f3:15:39:7c:31:2b:a6:7d:62:65:c1:
a5:d2:e3:09:48:6d:e1:91:98:52:f0:1c:56:9b:2a:8a:27:4c:
d0:bc:74:be:be:64:65:ca:3d:d3:d3:64:30:13:75:f5:44:d0:
28:97:55:d2:2d:26:f6:88:ec:f0:d0:70:dc:35:2f:54:1d:18:
03:d1:84:f8:8a:42:67:5f:87:cc:fa:a4:82:bf:09:14:2c:af:
14:12:b2:5e:3b:31:d4:d7:21:0b:20:fe:d3:5b:dc:37:25:5e:
4d:56:e7:b0:20:11:59:60:65:66:56:a8:4a:b4:b1:03:e5:2d:
40:06:cb:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TyJ6OfjPbRb1IQEqH+3h0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNjg1OTU5OTc5MDBkZWQzMDBlOTkyNTcwOWRhNjI3ZTkz
ZjM2M2EwHhcNMjYwNzI0MTEwMDI2WhcNMjYwNzI1MTEwMDI2WjAzMTEwLwYDVQQD
Eyg3OWUxNmM5NTcyMzQzNTc4NDkxNzI3NzRlYjljODhlMDY5NjQ1NTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVyNi4Z5VfAfZxFAitPAOcHhEU+2
kDQkHDJNZhax9Q4YYtg9GgvYsS9YfNaFub+iLYYRzkVlpavEFICcKyJDCzuHvMIH
zc5ycV4eK2oLri5Kkv1Yfp+61nNdTtPkzghsY8Efv2vUcoWOVt20NI+7Epr1zlqW
NJB7Pg9nf7BWYUAa6wh/csMnAPksB5/Ufq5j2k3p2Fo2JxHwGK7mErxReuILpHgQ
ukdYdXaOLKNWHKAb3ZmOIpYUamp0ZfA7AnbrX1DglJHu7cd0muXg1uQhVgl+j5mD
4O9s4OFd76QDIhYhTlCuKTYqFFkd76HACXVWwZe9RPNxXLee73r2yPHAlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnhbJVyNDV4SRcndOuciOBpZFWIMB8GA1UdIwQY
MBaAFLpoWVmXkA3tMA6ZJXCdpifpPzY6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW1oWldaZVFEZTB3RHBrbGNKMm1KLWtfTmpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS80NzJhNGQtZmNhZS00NDU0LTk5Njct
MDJkZWQ5YjJlMGM5LzEvdW1oWldaZVFEZTB3RHBrbGNKMm1KLWtfTmpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS80NzJhNGQtZmNhZS00NDU0LTk5NjctMDJkZWQ5YjJlMGM5
LzEvdW1oWldaZVFEZTB3RHBrbGNKMm1KLWtfTmpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtKwPJOK+
ARV4tiwBj0wOxFpUjKRJ8We3xEkYWLahiO5lqVlUmUUBcpZP0S5WM0Vuad1zWlcM
pv53VI4oQmFrA2ATvNMJK+2OseNGViPI6XRxTwIspLgVoWqNds6YtDh8xaqXCy4E
6dsJ2Swa/Nmegnrrt0ZCAwDL35uBGssl3nn3BUNH3/MVOXwxK6Z9YmXBpdLjCUht
4ZGYUvAcVpsqiidM0Lx0vr5kZco909NkMBN19UTQKJdV0i0m9ojs8NBw3DUvVB0Y
A9GE+IpCZ1+HzPqkgr8JFCyvFBKyXjsx1NchCyD+01vcNyVeTVbnsCARWWBlZlao
SrSxA+UtQAbLwg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:16:10 2026 by rpki-client