Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
File: um1Gt2v9bUK71XXi8m_OE2ubam0.mft (raw, json)
Hash identifier: lgdEyOXW3YLH84Ej97CDFSewI9vkWn1ZYrSoNcHcBcE=
Subject key identifier: 87:99:45:EA:B6:8F:F0:6C:D8:9A:DE:CC:1D:80:C2:32:82:2D:60:8F
Authority key identifier: BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D
Certificate issuer: /CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d
Certificate serial: 019DB27D1CC96DD67E3CEF35EA6A9155E07E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
Manifest number: 18D0
Signing time: Wed 22 Apr 2026 00:00:36 +0000
Manifest this update: Wed 22 Apr 2026 00:00:36 +0000
Manifest next update: Thu 23 Apr 2026 00:00:36 +0000
Files and hashes: 1: Bm7KXTZG-GzrmHMle85VbaK0lEc.roa (hash: eP4Z4Xyrl9duYpmeFr1kOXcCCxjk6AkZ57/buELWekE=)
2: YkorEnKm6LzRmwWsxcFNFH1cULo.roa (hash: r2RXMf3T6ozI4KhQ/ydf8YGQ149Sw8bA5XoNMW2hS0A=)
3: fpbZgKklTRGbUlBw5VfG2XolpT4.roa (hash: VEiVSo2qKOGnxDIsrhNTfOH5xMpm4xzV14ZuiE7aVXQ=)
4: fwb4YpE_ObhkPJOOtInq4VZSkFQ.roa (hash: ejLh2AtjPL3jxNb43Lf5+3Lqqs/Okt+3XnJA445dp+0=)
5: um1Gt2v9bUK71XXi8m_OE2ubam0.crl (hash: l5gA7YLwOJfQpWmNrZAOuGn0rDCv1qeymmOrffeNzrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:7d:1c:c9:6d:d6:7e:3c:ef:35:ea:6a:91:55:e0:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d
Validity
Not Before: Apr 22 00:00:36 2026 GMT
Not After : Apr 23 00:00:36 2026 GMT
Subject: CN=879945eab68ff06cd89adecc1d80c232822d608f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:53:f6:d3:0e:1c:66:5c:89:71:f3:6d:bb:b0:
0e:11:36:da:66:b6:ae:78:1e:41:b0:8e:16:63:84:
9d:78:a3:52:9b:78:87:ae:52:e3:c2:5f:d8:66:76:
5c:1e:1c:8f:a8:11:bf:e1:db:b7:89:33:9e:7d:7f:
c2:35:cd:1d:5b:3d:e8:de:e0:87:c7:13:fc:66:10:
c8:20:85:09:28:2f:9c:c2:a1:35:29:d5:bf:03:3b:
f6:27:77:f1:dd:65:52:7f:f5:9c:2a:40:7d:18:36:
23:87:e1:95:4d:c8:cb:27:4e:8f:94:07:08:fd:cd:
7c:47:95:00:08:af:8b:6d:5f:f0:3b:33:6f:f2:6c:
c1:89:de:5b:d6:bb:89:63:45:14:c6:5c:89:2f:83:
2f:48:dd:7b:89:76:1d:81:e1:f4:f1:37:76:7e:27:
68:f3:cc:bf:2d:02:4e:2f:fc:78:ae:61:9f:d8:51:
e7:f5:b6:47:a1:3b:65:63:25:81:4f:c1:6a:7f:ea:
21:22:4d:3f:10:b1:c4:50:5d:66:c7:d4:12:c4:ce:
e6:b3:5d:79:17:bf:32:83:86:49:57:5c:46:d0:92:
7a:96:19:5b:53:82:22:dd:bf:58:6f:da:f1:a4:a9:
8f:89:29:59:9c:c9:ae:cc:e4:6c:00:c5:08:fd:17:
87:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:99:45:EA:B6:8F:F0:6C:D8:9A:DE:CC:1D:80:C2:32:82:2D:60:8F
X509v3 Authority Key Identifier:
keyid:BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:92:e5:94:95:ea:cb:3b:08:1a:20:f2:73:7a:43:31:c7:75:
ad:c9:c4:0a:73:1d:21:80:97:f7:05:a8:43:ff:81:1e:a0:c1:
f4:7c:53:67:2e:b2:63:18:b2:0d:c9:e4:8f:8c:fb:db:c6:17:
a9:6c:d0:bd:18:d4:f5:17:7c:89:77:16:a1:e1:cf:fd:18:28:
4a:91:7c:a2:1b:d3:03:92:c7:5a:62:7d:c7:d3:f8:b3:b2:a6:
26:a0:d9:ed:8e:3a:01:00:7b:5c:2b:f6:e8:cf:fb:b3:8d:86:
da:fa:fb:10:e6:be:b8:29:84:34:eb:4f:1f:d4:fb:03:6b:e8:
28:1b:f5:fe:d8:d9:fc:1b:6e:55:a8:b2:db:3a:0f:bb:de:a8:
43:69:c3:9d:2a:c3:a5:b2:96:b6:b8:54:a6:23:5b:2a:5b:ce:
75:e1:a5:6a:6f:23:00:b2:90:a3:63:81:25:01:30:56:23:ed:
2d:30:b3:11:f9:16:e9:25:8e:5b:4d:27:fe:f0:b8:36:83:9d:
85:ec:7a:a0:43:11:7f:a5:d9:e4:08:ef:a8:0c:d3:83:67:c1:
73:a0:2b:b7:93:e5:f0:0d:32:69:80:10:99:d8:43:43:17:8e:
65:56:c1:36:33:09:45:48:ea:02:b3:0d:b1:6d:7c:cb:0d:22:
f4:24:93:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2yfRzJbdZ+PO816mqRVeB+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNmQ0NmI3NmJmZDZkNDJiYmQ1NzVlMmYyNmZjZTEzNmI5
YjZhNmQwHhcNMjYwNDIyMDAwMDM2WhcNMjYwNDIzMDAwMDM2WjAzMTEwLwYDVQQD
Eyg4Nzk5NDVlYWI2OGZmMDZjZDg5YWRlY2MxZDgwYzIzMjgyMmQ2MDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21P20w4cZlyJcfNtu7AOETbaZrau
eB5BsI4WY4SdeKNSm3iHrlLjwl/YZnZcHhyPqBG/4du3iTOefX/CNc0dWz3o3uCH
xxP8ZhDIIIUJKC+cwqE1KdW/Azv2J3fx3WVSf/WcKkB9GDYjh+GVTcjLJ06PlAcI
/c18R5UACK+LbV/wOzNv8mzBid5b1ruJY0UUxlyJL4MvSN17iXYdgeH08Td2fido
88y/LQJOL/x4rmGf2FHn9bZHoTtlYyWBT8Fqf+ohIk0/ELHEUF1mx9QSxM7ms115
F78yg4ZJV1xG0JJ6lhlbU4Ii3b9Yb9rxpKmPiSlZnMmuzORsAMUI/ReH5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIeZReq2j/Bs2JrezB2AwjKCLWCPMB8GA1UdIwQY
MBaAFLptRrdr/W1Cu9V14vJvzhNrm2ptMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW0xR3QydjliVUs3MVhYaThtX09FMnViYW0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lOGJlMGUtYTgwZC00YTRmLWI1MmYt
ZGZmMWNmZmI3YjE4LzEvdW0xR3QydjliVUs3MVhYaThtX09FMnViYW0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9lOGJlMGUtYTgwZC00YTRmLWI1MmYtZGZmMWNmZmI3YjE4
LzEvdW0xR3QydjliVUs3MVhYaThtX09FMnViYW0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg5LllJXq
yzsIGiDyc3pDMcd1rcnECnMdIYCX9wWoQ/+BHqDB9HxTZy6yYxiyDcnkj4z728YX
qWzQvRjU9Rd8iXcWoeHP/RgoSpF8ohvTA5LHWmJ9x9P4s7KmJqDZ7Y46AQB7XCv2
6M/7s42G2vr7EOa+uCmENOtPH9T7A2voKBv1/tjZ/BtuVaiy2zoPu96oQ2nDnSrD
pbKWtrhUpiNbKlvOdeGlam8jALKQo2OBJQEwViPtLTCzEfkW6SWOW00n/vC4NoOd
hex6oEMRf6XZ5AjvqAzTg2fBc6Art5Pl8A0yaYAQmdhDQxeOZVbBNjMJRUjqArMN
sW18yw0i9CST1w==
-----END CERTIFICATE-----
Generated at Wed Apr 22 02:56:32 2026 by rpki-client