Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
File: um1Gt2v9bUK71XXi8m_OE2ubam0.mft (raw, json)
Hash identifier: 2cbrt66Gms4EZeVdcXc/4rJ5k4nLbAuxNbyPI922acs=
Subject key identifier: 12:D1:36:AA:6C:F8:E3:2C:19:B8:F2:22:46:C6:7A:BF:01:92:65:24
Authority key identifier: BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D
Certificate issuer: /CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d
Certificate serial: 019F85D6FB6320B2899FF097F2D738754485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
Manifest number: 19C2
Signing time: Tue 21 Jul 2026 18:01:26 +0000
Manifest this update: Tue 21 Jul 2026 18:01:26 +0000
Manifest next update: Wed 22 Jul 2026 18:01:26 +0000
Files and hashes: 1: Bm7KXTZG-GzrmHMle85VbaK0lEc.roa (hash: eP4Z4Xyrl9duYpmeFr1kOXcCCxjk6AkZ57/buELWekE=)
2: YkorEnKm6LzRmwWsxcFNFH1cULo.roa (hash: r2RXMf3T6ozI4KhQ/ydf8YGQ149Sw8bA5XoNMW2hS0A=)
3: fpbZgKklTRGbUlBw5VfG2XolpT4.roa (hash: VEiVSo2qKOGnxDIsrhNTfOH5xMpm4xzV14ZuiE7aVXQ=)
4: fwb4YpE_ObhkPJOOtInq4VZSkFQ.roa (hash: ejLh2AtjPL3jxNb43Lf5+3Lqqs/Okt+3XnJA445dp+0=)
5: um1Gt2v9bUK71XXi8m_OE2ubam0.crl (hash: wZZLZy7BxDijuOSAmnB+Oxy4YgZitRaio8XDbiiYLnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:fb:63:20:b2:89:9f:f0:97:f2:d7:38:75:44:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d
Validity
Not Before: Jul 21 18:01:26 2026 GMT
Not After : Jul 22 18:01:26 2026 GMT
Subject: CN=12d136aa6cf8e32c19b8f22246c67abf01926524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c7:80:60:3c:39:7a:2b:f1:a9:37:15:77:5d:
8a:11:13:a5:17:4d:f0:5f:98:92:ab:e1:a5:00:4e:
47:8c:82:10:f5:ba:3f:d6:f8:3b:c0:25:dd:b3:45:
56:8c:50:97:8e:c2:85:44:14:d0:00:32:18:0e:fa:
74:fb:68:a8:dc:f6:1d:23:80:e1:ae:7f:5c:8d:3c:
c0:7d:61:0c:01:3c:fa:54:c5:2e:dd:fe:8b:27:14:
6c:ca:20:fc:cc:e8:10:c8:84:23:3d:97:6d:50:83:
fa:68:e7:23:ef:ad:08:15:6d:5b:68:9d:58:b6:6d:
58:b4:a1:47:20:c3:cf:30:2d:92:1a:53:4b:84:a3:
25:87:ba:7d:7c:d7:df:d1:d4:6f:5b:c2:52:0c:c1:
ed:61:9e:a2:9a:ad:54:de:bf:8a:c0:e0:1c:9d:0f:
d7:9f:ff:73:86:90:8f:56:78:91:c8:2e:11:4d:48:
16:ea:f3:f7:f1:8a:d6:d5:76:16:6f:7a:0e:88:bd:
47:b2:e0:9f:26:65:6c:76:df:ba:c9:26:d4:de:00:
51:d2:23:37:c8:f9:32:4b:07:be:d2:44:a1:fc:3d:
ff:20:95:0f:f6:99:f9:d1:c8:b3:d5:96:3e:98:56:
e1:2d:b0:fa:e6:5f:6e:73:94:f1:c9:e4:e0:4a:cc:
e6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D1:36:AA:6C:F8:E3:2C:19:B8:F2:22:46:C6:7A:BF:01:92:65:24
X509v3 Authority Key Identifier:
keyid:BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:94:0a:c7:0b:36:a5:b5:98:04:8a:d7:1c:f8:c1:10:25:27:
87:aa:31:c2:5d:31:88:5e:15:5f:9d:0e:6a:2a:7b:56:e2:ff:
1e:c1:86:7b:ae:d7:cb:22:ec:bf:e8:52:e9:18:41:60:cc:5c:
04:c4:77:9d:91:e3:46:e4:bd:9d:04:35:20:c4:ca:31:4c:a6:
1b:ab:6f:15:bb:9b:61:cb:f5:21:4b:70:7f:85:8c:00:ec:51:
3b:72:fe:95:08:62:81:64:91:ac:35:3b:ad:40:a5:2b:0c:f7:
e4:0e:0d:81:4b:b3:e2:12:75:d2:9c:30:08:4d:bc:80:3a:b6:
81:20:7f:fd:87:e8:29:81:7b:9b:41:fa:aa:00:8f:52:de:98:
f7:fc:8b:04:f5:ee:dc:7b:1b:2f:a2:f6:a9:9b:8d:22:9c:3e:
11:18:de:dc:4c:30:3a:07:b4:7a:a1:13:37:40:c6:97:3c:72:
02:0e:4d:f6:fb:81:cb:95:cb:1b:1e:02:8b:14:0d:d1:99:92:
84:7a:44:d9:83:3b:ed:87:80:8a:e0:ce:50:9e:eb:d6:6c:c1:
fc:26:e9:b5:69:ab:7a:05:9f:9a:32:1b:00:4c:14:f6:02:44:
bd:a1:37:f7:64:2e:87:40:9d:35:da:1e:c4:3f:9b:e9:4b:bb:
9b:c0:cb:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+F1vtjILKJn/CX8tc4dUSFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNmQ0NmI3NmJmZDZkNDJiYmQ1NzVlMmYyNmZjZTEzNmI5
YjZhNmQwHhcNMjYwNzIxMTgwMTI2WhcNMjYwNzIyMTgwMTI2WjAzMTEwLwYDVQQD
EygxMmQxMzZhYTZjZjhlMzJjMTliOGYyMjI0NmM2N2FiZjAxOTI2NTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtseAYDw5eivxqTcVd12KEROlF03w
X5iSq+GlAE5HjIIQ9bo/1vg7wCXds0VWjFCXjsKFRBTQADIYDvp0+2io3PYdI4Dh
rn9cjTzAfWEMATz6VMUu3f6LJxRsyiD8zOgQyIQjPZdtUIP6aOcj760IFW1baJ1Y
tm1YtKFHIMPPMC2SGlNLhKMlh7p9fNff0dRvW8JSDMHtYZ6imq1U3r+KwOAcnQ/X
n/9zhpCPVniRyC4RTUgW6vP38YrW1XYWb3oOiL1HsuCfJmVsdt+6ySbU3gBR0iM3
yPkySwe+0kSh/D3/IJUP9pn50ciz1ZY+mFbhLbD65l9uc5TxyeTgSszmYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLRNqps+OMsGbjyIkbGer8BkmUkMB8GA1UdIwQY
MBaAFLptRrdr/W1Cu9V14vJvzhNrm2ptMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW0xR3QydjliVUs3MVhYaThtX09FMnViYW0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lOGJlMGUtYTgwZC00YTRmLWI1MmYt
ZGZmMWNmZmI3YjE4LzEvdW0xR3QydjliVUs3MVhYaThtX09FMnViYW0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9lOGJlMGUtYTgwZC00YTRmLWI1MmYtZGZmMWNmZmI3YjE4
LzEvdW0xR3QydjliVUs3MVhYaThtX09FMnViYW0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKJQKxws2
pbWYBIrXHPjBECUnh6oxwl0xiF4VX50Oaip7VuL/HsGGe67XyyLsv+hS6RhBYMxc
BMR3nZHjRuS9nQQ1IMTKMUymG6tvFbubYcv1IUtwf4WMAOxRO3L+lQhigWSRrDU7
rUClKwz35A4NgUuz4hJ10pwwCE28gDq2gSB//YfoKYF7m0H6qgCPUt6Y9/yLBPXu
3HsbL6L2qZuNIpw+ERje3EwwOge0eqETN0DGlzxyAg5N9vuBy5XLGx4CixQN0ZmS
hHpE2YM77YeAiuDOUJ7r1mzB/CbptWmregWfmjIbAEwU9gJEvaE392Quh0CdNdoe
xD+b6Uu7m8DLRQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:48:14 2026 by rpki-client