Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft
File: umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft (raw, json)
Hash identifier: 5mVQfzbZd22+glvxgaGRSDrJni4lRWkB8aw0QlRIgkc=
Subject key identifier: 02:E6:A4:B3:2C:49:82:FD:0A:2F:32:06:99:77:88:96:C5:ED:F6:77
Authority key identifier: BA:68:59:59:97:90:0D:ED:30:0E:99:25:70:9D:A6:27:E9:3F:36:3A
Certificate issuer: /CN=ba68595997900ded300e9925709da627e93f363a
Certificate serial: 01A11229EDC75FAD143187A89FBE7C4CC404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/umhZWZeQDe0wDpklcJ2mJ-k_Njo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft
Manifest number: 132B
Signing time: Tue 06 Oct 2026 17:01:40 +0000
Manifest this update: Tue 06 Oct 2026 17:01:40 +0000
Manifest next update: Wed 07 Oct 2026 17:01:40 +0000
Files and hashes: 1: 6Lv0ELrWKZzM2WUhjrrfSxrLv5I.roa (hash: b+tPMLvT0wTQ8KNZFO7LFZXenP25HBtSk8cAgN48xuk=)
2: umhZWZeQDe0wDpklcJ2mJ-k_Njo.crl (hash: +sNjFiJR+pbYfDSRRMVwmjBPs94+b7zJ/xrqtWYBLrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft
rsync://rpki.ripe.net/repository/DEFAULT/umhZWZeQDe0wDpklcJ2mJ-k_Njo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:12:29:ed:c7:5f:ad:14:31:87:a8:9f:be:7c:4c:c4:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba68595997900ded300e9925709da627e93f363a
Validity
Not Before: Oct 6 17:01:40 2026 GMT
Not After : Oct 7 17:01:40 2026 GMT
Subject: CN=02e6a4b32c4982fd0a2f320699778896c5edf677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5a:8e:36:aa:bd:48:8b:01:86:82:08:a7:35:
31:0c:9f:f0:90:e3:b0:15:c1:79:02:cd:14:13:cd:
74:20:80:23:f4:7b:09:30:67:07:a4:03:cb:d7:7e:
11:cb:d6:97:e7:35:ae:97:e2:ba:86:d3:a6:a4:e1:
85:29:28:0a:e0:c0:4a:1a:e1:14:a5:f1:ac:5a:6b:
14:0e:b9:66:ac:1a:77:58:e3:fe:b9:f7:c8:ff:de:
99:cb:d2:20:44:ed:c3:a2:8f:de:80:f4:5d:98:23:
89:df:e3:05:9b:f1:85:57:8d:6b:7e:3a:a1:52:4c:
1e:75:1d:d3:2a:a9:54:11:cd:f4:74:60:8c:22:3e:
cf:7e:af:d6:ab:7e:ef:ce:15:66:a3:af:d5:8b:a2:
c5:38:cc:60:3c:e8:46:0e:1f:54:cf:fb:6e:e2:b5:
4e:20:ee:44:a0:d0:90:f0:62:d0:35:66:e9:8e:13:
8d:70:4b:43:d5:39:7a:ef:d5:f7:eb:87:f7:2c:25:
27:c7:76:eb:33:34:af:e0:b0:1d:57:54:ca:ee:2e:
39:19:ad:94:0c:54:80:bd:44:97:63:4a:2f:01:cb:
55:c7:c1:77:cd:fc:fe:89:2c:e6:16:9c:f2:51:e4:
2c:0a:77:b4:f9:a4:d7:4a:77:d7:96:56:7d:87:74:
cb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E6:A4:B3:2C:49:82:FD:0A:2F:32:06:99:77:88:96:C5:ED:F6:77
X509v3 Authority Key Identifier:
keyid:BA:68:59:59:97:90:0D:ED:30:0E:99:25:70:9D:A6:27:E9:3F:36:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/umhZWZeQDe0wDpklcJ2mJ-k_Njo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:37:3f:f1:6d:fc:e7:68:4d:35:80:1b:0a:b2:1f:e5:fc:3d:
8f:be:5d:59:4a:00:8c:8e:e2:4c:f3:20:10:4c:3f:d5:bd:04:
9a:f6:71:c5:cd:4b:82:64:87:4b:10:bf:3b:c6:bd:a7:35:1a:
29:61:ad:06:82:2c:9a:7a:a9:5b:c1:f1:3b:7f:24:2f:f2:d1:
f3:ee:52:2e:05:a7:8c:c8:a7:10:22:57:4e:34:3c:ad:2b:7d:
a8:cf:35:67:25:1d:83:0a:13:24:39:8d:89:28:d2:a5:56:f4:
f5:ff:fd:bb:4b:74:79:f2:e2:ff:22:87:97:c3:a7:2a:59:fe:
01:ce:7d:0b:aa:b8:30:2c:5e:98:48:c4:40:e9:de:15:9a:bf:
67:9c:64:14:77:f1:9b:60:63:1d:41:29:5e:81:dd:e7:e8:0a:
f3:f6:bf:87:e3:63:5b:9e:40:49:a5:cd:88:33:00:57:37:d2:
4d:3f:25:86:09:5f:96:0a:1a:4e:a7:e1:0d:28:72:fa:1d:5d:
4b:c6:b9:3d:dc:db:3d:7d:5e:30:eb:f1:83:53:b4:91:f1:0d:
c1:47:82:5e:d6:27:cf:f9:74:b4:54:28:23:dd:77:9a:cb:6c:
87:2c:7a:88:c0:73:93:5d:bc:c5:63:43:64:89:aa:23:71:26:
e8:56:ec:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:39:15 2026 by rpki-client