Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
File: UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft (raw, json)
Hash identifier: ddEqAvPOTEjNeNubsavRqLc6c+5kw81Tpy9LfWipN3U=
Subject key identifier: DA:72:AB:06:9C:98:21:C4:10:33:88:7F:97:51:30:BE:4C:13:9D:B2
Authority key identifier: 50:C0:06:D6:40:1E:F4:2F:A5:0E:24:09:55:00:B2:FD:AF:AD:5B:AA
Certificate issuer: /CN=50c006d6401ef42fa50e24095500b2fdafad5baa
Certificate serial: 01A177DE3E529082491E50ECF34C631DFE9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
Manifest number: 1953
Signing time: Mon 26 Oct 2026 11:00:16 +0000
Manifest this update: Mon 26 Oct 2026 11:00:16 +0000
Manifest next update: Tue 27 Oct 2026 11:00:16 +0000
Files and hashes: 1: Rx6_2dFGC_byik0IQci9SEzvGuI.roa (hash: HsI4o34Z5wlmbwp0oeAuMzNNb5shkpIEpxzJkNhrxZk=)
2: UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl (hash: vk1tN45aY0FRGONl7dgxJ4d6rLxglEF+YnysBU/O3oQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:de:3e:52:90:82:49:1e:50:ec:f3:4c:63:1d:fe:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c006d6401ef42fa50e24095500b2fdafad5baa
Validity
Not Before: Oct 26 11:00:16 2026 GMT
Not After : Oct 27 11:00:16 2026 GMT
Subject: CN=da72ab069c9821c41033887f975130be4c139db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:49:c6:08:ff:e7:e2:0c:ca:cb:34:58:6c:c2:
84:34:e4:50:4e:2e:e6:2e:f7:9c:cf:ed:68:62:27:
2c:dd:1a:d1:76:6b:a3:59:15:bd:42:be:97:c1:26:
25:55:29:22:7c:6c:2f:b2:90:05:64:d1:05:70:12:
2d:47:2a:01:55:5b:64:a7:c0:1a:76:db:11:47:e7:
de:d4:d9:21:e4:2b:58:e1:82:16:58:f0:e1:da:63:
ca:fb:e9:82:24:68:5e:fb:17:1f:a3:bb:51:e0:60:
73:ee:10:95:b5:08:df:2c:37:7f:53:10:8d:d9:53:
7c:7d:5f:6d:87:bd:5b:37:0f:f9:83:1a:68:5b:0c:
ae:f2:e4:5a:69:33:05:b7:dc:24:82:88:66:8a:b9:
26:5e:40:32:ed:92:8e:85:68:05:e5:8c:f5:d3:94:
34:e4:16:10:1e:c8:b4:f3:93:d1:e6:ec:df:f4:86:
d5:43:64:6f:a7:c2:15:e4:81:04:bf:91:c2:62:5a:
3b:69:37:87:c4:b1:4b:32:87:42:47:f2:62:7b:a1:
f9:42:8c:4a:02:34:33:72:45:c9:3b:6e:4d:a1:72:
87:f1:71:f4:a0:4d:dd:99:39:78:ae:7d:53:74:6d:
fd:e2:3e:b2:08:71:e7:89:51:bd:6f:dc:90:b0:50:
bc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:72:AB:06:9C:98:21:C4:10:33:88:7F:97:51:30:BE:4C:13:9D:B2
X509v3 Authority Key Identifier:
keyid:50:C0:06:D6:40:1E:F4:2F:A5:0E:24:09:55:00:B2:FD:AF:AD:5B:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:5f:22:03:d3:88:38:ec:14:cc:9b:06:d3:02:89:8d:1e:05:
c5:9b:d3:16:7d:71:9e:d1:b2:6e:ae:f7:6e:96:6a:7e:31:9d:
88:3b:7a:7d:64:d8:32:85:b9:d6:17:9d:f7:84:2b:d0:ea:ab:
9e:f7:a7:08:5e:27:84:cc:ef:d3:82:95:82:11:f6:63:4e:32:
5c:f4:2f:55:2c:90:da:0a:0a:f4:96:d6:af:ae:ef:a7:91:15:
1c:1b:7e:02:21:1d:ce:79:c5:18:d2:0f:ba:9b:c4:6a:33:85:
83:39:d9:a3:8e:83:ac:55:8c:df:26:e6:f3:c5:cd:c7:6f:2e:
f2:cc:52:46:32:b7:23:72:ac:83:b7:05:28:fa:97:00:80:be:
f8:a6:68:dc:e3:ef:57:ce:fd:f2:2e:b1:ae:78:59:3a:17:f0:
bc:93:f4:e4:b4:37:6a:a4:dd:01:4e:47:78:5b:45:f6:b7:79:
bd:39:bd:c3:c0:43:27:18:65:c5:c6:65:7c:05:f3:7b:6f:6c:
57:f2:82:af:7d:70:c9:15:45:0d:3b:c7:b3:0a:a6:23:b9:59:
93:fc:3a:02:35:1b:59:73:a0:c9:01:48:ca:1c:a8:6e:e8:b3:
87:01:cc:86:f7:86:67:49:e3:44:23:e1:cd:d1:e3:70:4d:25:
63:86:da:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF33j5SkIJJHlDs80xjHf6cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYzAwNmQ2NDAxZWY0MmZhNTBlMjQwOTU1MDBiMmZkYWZh
ZDViYWEwHhcNMjYxMDI2MTEwMDE2WhcNMjYxMDI3MTEwMDE2WjAzMTEwLwYDVQQD
EyhkYTcyYWIwNjljOTgyMWM0MTAzMzg4N2Y5NzUxMzBiZTRjMTM5ZGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjknGCP/n4gzKyzRYbMKENORQTi7m
Lvecz+1oYics3RrRdmujWRW9Qr6XwSYlVSkifGwvspAFZNEFcBItRyoBVVtkp8Aa
dtsRR+fe1Nkh5CtY4YIWWPDh2mPK++mCJGhe+xcfo7tR4GBz7hCVtQjfLDd/UxCN
2VN8fV9th71bNw/5gxpoWwyu8uRaaTMFt9wkgohmirkmXkAy7ZKOhWgF5Yz105Q0
5BYQHsi085PR5uzf9IbVQ2Rvp8IV5IEEv5HCYlo7aTeHxLFLModCR/Jie6H5QoxK
AjQzckXJO25NoXKH8XH0oE3dmTl4rn1TdG394j6yCHHniVG9b9yQsFC8LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNpyqwacmCHEEDOIf5dRML5ME52yMB8GA1UdIwQY
MBaAFFDABtZAHvQvpQ4kCVUAsv2vrVuqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU1BRzFrQWU5Qy1sRGlRSlZRQ3lfYS10VzZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9kZmFiMzYtNjU3Zi00ZTAyLTgzNjEt
YzJkY2RjODVlNTg0LzEvVU1BRzFrQWU5Qy1sRGlRSlZRQ3lfYS10VzZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9kZmFiMzYtNjU3Zi00ZTAyLTgzNjEtYzJkY2RjODVlNTg0
LzEvVU1BRzFrQWU5Qy1sRGlRSlZRQ3lfYS10VzZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZV8iA9OI
OOwUzJsG0wKJjR4FxZvTFn1xntGybq73bpZqfjGdiDt6fWTYMoW51hed94Qr0Oqr
nvenCF4nhMzv04KVghH2Y04yXPQvVSyQ2goK9JbWr67vp5EVHBt+AiEdznnFGNIP
upvEajOFgznZo46DrFWM3ybm88XNx28u8sxSRjK3I3Ksg7cFKPqXAIC++KZo3OPv
V8798i6xrnhZOhfwvJP05LQ3aqTdAU5HeFtF9rd5vTm9w8BDJxhlxcZlfAXze29s
V/KCr31wyRVFDTvHswqmI7lZk/w6AjUbWXOgyQFIyhyobuizhwHMhveGZ0njRCPh
zdHjcE0lY4bacA==
-----END CERTIFICATE-----
Generated at Mon Oct 26 20:35:05 2026 by rpki-client