Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
File: UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft (raw, json)
Hash identifier: JHmE6sq3GSNDQ9TcO0FF4U4C1rpfTaetrqBcjz5kZDw=
Subject key identifier: DF:18:95:94:9D:32:24:EB:EF:60:54:38:03:CC:70:E5:FA:9E:96:D4
Authority key identifier: 50:C0:06:D6:40:1E:F4:2F:A5:0E:24:09:55:00:B2:FD:AF:AD:5B:AA
Certificate issuer: /CN=50c006d6401ef42fa50e24095500b2fdafad5baa
Certificate serial: 019D389C28BC056B01EA59098403B3F18197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
Manifest number: 1720
Signing time: Sun 29 Mar 2026 08:00:51 +0000
Manifest this update: Sun 29 Mar 2026 08:00:51 +0000
Manifest next update: Mon 30 Mar 2026 08:00:51 +0000
Files and hashes: 1: Rx6_2dFGC_byik0IQci9SEzvGuI.roa (hash: HsI4o34Z5wlmbwp0oeAuMzNNb5shkpIEpxzJkNhrxZk=)
2: UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl (hash: GyfRIJixviHxit+th2jl/ZsWhmvYRmrG5lKCULiV0EE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:28:bc:05:6b:01:ea:59:09:84:03:b3:f1:81:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c006d6401ef42fa50e24095500b2fdafad5baa
Validity
Not Before: Mar 29 08:00:51 2026 GMT
Not After : Mar 30 08:00:51 2026 GMT
Subject: CN=df1895949d3224ebef60543803cc70e5fa9e96d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1a:9b:01:bb:9c:55:41:1b:4e:ea:ee:6d:b1:
32:75:3f:61:34:cb:f6:19:b0:43:ce:ff:45:4a:7d:
2e:70:9b:dc:84:f5:87:ff:6a:e6:d0:1a:ac:07:85:
93:83:a8:c2:b9:11:6b:5b:e5:34:c9:98:d0:c3:45:
6a:74:42:4e:f2:18:c8:f2:06:d3:fa:0b:82:b7:83:
bd:86:b7:ed:09:be:7d:d5:12:7d:79:10:96:f8:1e:
9a:e3:de:ae:49:f9:b4:9c:37:4c:81:de:ce:46:ce:
9e:85:31:00:f6:9f:87:83:8e:d6:2f:07:d8:84:f5:
b1:74:a1:fe:3e:3b:30:a6:25:5f:9f:6a:bc:c3:16:
d5:4f:7e:cf:06:06:91:c4:85:9e:e5:32:d5:e7:6d:
8e:42:4f:3d:89:66:40:ef:cb:78:7d:b5:18:e5:d6:
c7:89:0f:89:eb:59:fa:32:21:46:60:3c:02:38:74:
f0:c9:66:ec:39:79:cf:ba:82:c2:47:49:58:11:54:
98:89:94:65:03:51:63:82:4d:e2:d6:ba:6b:3b:96:
fb:6a:6c:57:4e:d9:ce:d1:3f:4c:0f:9b:ac:d2:ca:
2a:4c:b8:de:fc:c7:c3:98:33:96:fa:1e:9b:63:b4:
d0:c1:22:28:91:06:bd:c4:2a:eb:6b:25:2c:8e:4b:
52:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:18:95:94:9D:32:24:EB:EF:60:54:38:03:CC:70:E5:FA:9E:96:D4
X509v3 Authority Key Identifier:
keyid:50:C0:06:D6:40:1E:F4:2F:A5:0E:24:09:55:00:B2:FD:AF:AD:5B:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:5c:7f:0e:06:cb:87:db:b1:69:2e:2f:7e:ef:d9:25:e9:a0:
a1:bc:01:3a:7a:c8:0c:d8:26:c9:8a:01:2d:e6:ec:ff:32:21:
04:65:5b:06:e3:2d:e2:06:46:4f:af:95:e5:6e:e0:66:99:b2:
06:86:c9:68:ea:7d:e7:81:6b:6c:5b:f6:12:aa:a9:51:b5:5c:
33:b6:c6:c7:9b:0a:1c:c7:c7:51:87:af:1f:96:b4:2c:dc:55:
8c:8b:54:a1:8f:f6:6d:8f:9c:46:2f:79:53:94:1f:5c:7c:27:
dc:d0:e1:1b:82:c4:86:f4:5b:db:2f:9a:2e:ac:84:79:b1:e4:
59:cf:6e:33:b2:d0:01:23:1a:90:df:65:d4:8c:ed:85:b7:28:
ec:fa:66:45:4f:b9:16:dd:de:d8:69:a0:1e:1b:96:39:8b:e2:
aa:05:3f:ea:f4:b3:23:31:00:b0:fe:77:8e:9b:b4:2b:1f:dc:
bc:74:fd:bd:ff:27:a6:ec:2b:6e:a4:c6:80:39:06:36:5a:86:
4f:95:7e:83:c4:c1:59:80:18:73:af:6e:ea:53:99:a5:c1:1a:
78:82:6f:2a:e5:65:58:d6:b5:cb:f9:28:87:d4:aa:5b:20:b9:
0d:de:13:c2:f5:aa:e5:ce:c7:e6:e8:5a:38:4f:59:7d:1f:cc:
a1:a2:8e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:43 2026 by rpki-client