
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
File: um1Gt2v9bUK71XXi8m_OE2ubam0.mft (raw, json)
Hash identifier: FPfYhl7I0Yv0Ext32xPxvVeR38Ip41v9jx9Wc4wC6yQ=
Subject key identifier: 40:47:2E:B1:01:F1:22:22:5D:D3:0F:F0:CA:41:23:E8:8D:C1:3B:C6
Authority key identifier: BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D
Certificate issuer: /CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d
Certificate serial: 019CC8D0D6F88C644D45ABB7514C1825E5DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
Manifest number: 1857
Signing time: Sat 07 Mar 2026 15:00:55 +0000
Manifest this update: Sat 07 Mar 2026 15:00:55 +0000
Manifest next update: Sun 08 Mar 2026 15:00:55 +0000
Files and hashes: 1: Bm7KXTZG-GzrmHMle85VbaK0lEc.roa (hash: eP4Z4Xyrl9duYpmeFr1kOXcCCxjk6AkZ57/buELWekE=)
2: YkorEnKm6LzRmwWsxcFNFH1cULo.roa (hash: r2RXMf3T6ozI4KhQ/ydf8YGQ149Sw8bA5XoNMW2hS0A=)
3: fpbZgKklTRGbUlBw5VfG2XolpT4.roa (hash: VEiVSo2qKOGnxDIsrhNTfOH5xMpm4xzV14ZuiE7aVXQ=)
4: fwb4YpE_ObhkPJOOtInq4VZSkFQ.roa (hash: ejLh2AtjPL3jxNb43Lf5+3Lqqs/Okt+3XnJA445dp+0=)
5: um1Gt2v9bUK71XXi8m_OE2ubam0.crl (hash: Okx898tDHHH5bXt+Mel7v2OMoXvsvy7pnHoxnEdI2gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c8:d0:d6:f8:8c:64:4d:45:ab:b7:51:4c:18:25:e5:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d
Validity
Not Before: Mar 7 15:00:55 2026 GMT
Not After : Mar 8 15:00:55 2026 GMT
Subject: CN=40472eb101f122225dd30ff0ca4123e88dc13bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:af:ba:2c:53:09:0c:28:bf:17:eb:8c:1d:61:
38:19:68:39:bc:ba:9c:7a:d5:83:82:bf:62:5c:1c:
4a:a0:02:41:09:e9:fa:00:02:56:04:84:ed:8a:ce:
5e:d9:e2:5d:9a:ac:0c:a5:08:e9:48:a5:cc:61:42:
1b:2a:85:00:c9:fc:a0:dd:0b:fe:1d:4b:3b:7a:5c:
6e:1f:ce:41:60:bc:72:77:8d:f8:c4:5d:d9:0a:6f:
0a:f3:7e:c4:cc:35:a7:e7:24:b9:ee:bd:60:ad:52:
1b:53:3c:b5:cd:39:78:c4:54:41:20:e7:23:df:79:
8f:8d:bc:40:a0:83:b6:6c:33:87:c8:64:d0:07:8a:
f7:e2:b8:34:b8:a9:91:36:b3:74:0a:cf:28:e4:34:
0f:39:ea:a3:05:f6:c8:18:55:32:bb:8e:7f:e3:66:
b7:3b:b5:fd:2b:1f:0f:57:7d:b9:da:e8:cc:34:86:
3e:4a:7d:c4:43:ff:14:dc:3b:c5:cc:7d:11:d0:32:
5a:1f:2b:15:13:4f:58:66:18:e1:b5:5c:9b:f4:c5:
3a:0b:23:93:6b:cb:dc:6e:f2:d8:a2:f1:e6:54:45:
4b:48:55:61:28:00:be:1c:17:6b:27:39:97:dc:86:
b2:84:0c:e5:cd:87:d5:8c:6b:b7:de:44:a2:e5:12:
0f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:47:2E:B1:01:F1:22:22:5D:D3:0F:F0:CA:41:23:E8:8D:C1:3B:C6
X509v3 Authority Key Identifier:
keyid:BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:28:34:5e:11:6c:7d:ed:3e:b0:28:2e:63:50:5f:87:dc:1c:
51:86:0d:f2:2c:0e:3a:63:b9:47:20:d7:07:d9:de:4f:46:9a:
8f:99:15:2f:26:10:5a:bb:e8:72:c5:5a:fe:71:4c:a1:1e:73:
72:73:6d:a1:56:60:d4:df:ed:01:2c:7b:9e:70:ba:15:a4:59:
f0:ad:67:78:8b:f5:07:48:1e:01:e3:63:d9:1f:7c:cd:59:c0:
cd:fc:ae:a2:68:ed:5a:32:1f:81:a1:a8:3d:a0:00:e7:bd:7b:
19:a0:2e:47:72:98:60:02:df:8c:96:6c:21:3a:8a:2b:73:80:
0e:cc:79:c2:37:09:95:f3:c0:5b:d1:aa:13:fb:4e:cf:f5:af:
af:e2:79:70:22:66:f1:35:3f:7c:dc:a8:41:fe:43:2c:20:93:
47:ce:38:e2:50:c0:1c:5b:24:9c:24:f4:c9:71:4b:7f:c2:80:
68:d9:d5:67:cf:93:ec:d9:c5:c5:57:83:1c:df:d1:5c:20:4a:
07:a6:57:94:d8:0f:d6:ad:a3:28:b3:8f:a0:c4:59:34:18:26:
f1:7b:12:e4:fd:0d:b6:95:4d:d9:77:21:5e:bf:71:6e:4e:70:
2b:ce:39:c0:47:89:5f:c7:33:79:0a:0e:a9:19:ce:36:03:0c:
6a:61:17:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:02:04 2026 by rpki-client