Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a48585-7ca7-4195-8bff-502004240e1f/1/umRE3CHMvvATTXZD6u_X7I-pWLg.mft
File: umRE3CHMvvATTXZD6u_X7I-pWLg.mft (raw, json)
Hash identifier: wZcY0ZSTf2FDJqXYUGI98ogPbRtz5SljThKc58P3TyE=
Subject key identifier: F8:F8:52:1D:CB:17:F4:B8:06:84:5B:89:E4:4E:30:2E:34:5C:F8:F8
Authority key identifier: BA:64:44:DC:21:CC:BE:F0:13:4D:76:43:EA:EF:D7:EC:8F:A9:58:B8
Certificate issuer: /CN=ba6444dc21ccbef0134d7643eaefd7ec8fa958b8
Certificate serial: 019D39409AF50A8C8B7A029F06ADC5F37FAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/umRE3CHMvvATTXZD6u_X7I-pWLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a48585-7ca7-4195-8bff-502004240e1f/1/umRE3CHMvvATTXZD6u_X7I-pWLg.mft
Manifest number: 2D
Signing time: Sun 29 Mar 2026 11:00:28 +0000
Manifest this update: Sun 29 Mar 2026 11:00:28 +0000
Manifest next update: Mon 30 Mar 2026 11:00:28 +0000
Files and hashes: 1: NV7bonbzUdYDsES4VO4pRJ8bb0U.roa (hash: /TP4uRljbjgho85/nd4chEgZ45xnysDKS/rWil/Kvpw=)
2: umRE3CHMvvATTXZD6u_X7I-pWLg.crl (hash: NczsZj4gClSqGbP+Mfw8wJkLErWz/A5b2C3TWpKW5LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/a48585-7ca7-4195-8bff-502004240e1f/1/umRE3CHMvvATTXZD6u_X7I-pWLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/a48585-7ca7-4195-8bff-502004240e1f/1/umRE3CHMvvATTXZD6u_X7I-pWLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/umRE3CHMvvATTXZD6u_X7I-pWLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:9a:f5:0a:8c:8b:7a:02:9f:06:ad:c5:f3:7f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6444dc21ccbef0134d7643eaefd7ec8fa958b8
Validity
Not Before: Mar 29 11:00:28 2026 GMT
Not After : Mar 30 11:00:28 2026 GMT
Subject: CN=f8f8521dcb17f4b806845b89e44e302e345cf8f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:18:ad:1b:4c:4e:87:a8:33:25:cf:90:6e:f3:
da:19:f9:3c:74:d7:96:38:e9:2a:0e:1d:50:46:2c:
e6:7e:ee:8c:cf:d4:e0:72:00:18:d2:bd:6c:4c:66:
18:1d:90:32:6a:6d:eb:26:59:4f:6a:56:7d:a9:df:
bd:48:51:11:66:7f:c9:bc:7a:3b:6d:02:a3:33:6d:
3f:1c:c8:bc:e7:2e:7e:51:9f:89:e5:52:28:40:fe:
d6:65:c4:59:58:f4:17:48:92:50:af:9b:18:83:4c:
be:e3:c8:16:1b:33:ca:73:fc:19:c0:a1:9e:28:c9:
35:a2:49:54:f4:40:27:7b:50:45:37:00:3f:86:03:
e2:65:58:bd:50:f4:56:57:e6:03:e3:d2:2c:f0:92:
06:34:6b:4b:64:46:40:7e:e4:5e:19:e1:a4:a5:6b:
8d:b8:62:7c:b6:19:c7:8d:1f:31:54:48:e2:5e:23:
f2:d7:8e:d6:4b:fd:42:ac:fb:2a:1c:d0:96:dd:df:
d3:be:4f:cf:3a:70:b4:3c:9b:33:6c:63:60:32:e7:
5c:5c:50:4d:68:e1:98:4a:b7:43:37:6c:ef:a9:f2:
fa:19:ef:bd:87:b8:5d:da:59:2b:bb:b2:99:02:54:
17:85:3d:a1:17:29:31:e4:66:66:f5:c3:07:d5:d0:
a4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F8:52:1D:CB:17:F4:B8:06:84:5B:89:E4:4E:30:2E:34:5C:F8:F8
X509v3 Authority Key Identifier:
keyid:BA:64:44:DC:21:CC:BE:F0:13:4D:76:43:EA:EF:D7:EC:8F:A9:58:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/umRE3CHMvvATTXZD6u_X7I-pWLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a48585-7ca7-4195-8bff-502004240e1f/1/umRE3CHMvvATTXZD6u_X7I-pWLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a48585-7ca7-4195-8bff-502004240e1f/1/umRE3CHMvvATTXZD6u_X7I-pWLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:13:87:d1:f7:fc:73:d9:4b:5e:0f:81:72:39:5f:a8:f8:c9:
5f:2e:19:ad:ad:6b:e3:a5:cf:92:3d:c3:81:8e:71:d2:66:a5:
66:a5:20:2b:63:7b:bd:ac:36:61:8b:3f:38:62:2f:9d:d1:d0:
77:a6:29:41:ad:e7:14:52:2c:3b:3d:97:93:8e:e7:be:32:78:
17:a1:5e:ed:3f:cf:d3:5a:1a:f9:73:b6:8b:f4:df:b1:e2:39:
ec:17:8b:52:42:88:3c:3b:78:cc:d7:7c:ae:71:1a:47:22:18:
4f:4e:7d:da:34:8f:d0:49:ca:a1:13:60:65:89:8c:e8:e1:39:
d0:ac:8d:37:f3:42:04:87:26:30:7e:be:04:06:04:9e:b2:05:
10:a0:9a:59:8d:e7:ac:b9:ab:e1:4f:9d:65:ae:e8:75:aa:80:
8b:8d:09:1c:57:52:62:bb:b4:7b:20:60:bb:11:ad:d6:be:a3:
2c:b4:12:31:35:01:49:bf:8b:e0:df:a2:74:17:e6:ee:2e:28:
f8:69:5b:f1:24:2c:1f:0e:da:3b:a3:e3:e3:b0:f2:eb:cc:0c:
81:52:f5:70:4c:c4:ab:cf:f5:37:35:08:86:bb:ba:be:a7:6d:
0e:d5:5d:b3:5e:76:2a:25:89:93:50:75:b1:fd:31:05:57:0f:
38:f3:bd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:23 2026 by rpki-client