Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
File: ume_97rR64OEtYXfe-8SBvfxn34.mft (raw, json)
Hash identifier: eqXuZEv86GNcY4zMMaKV9y2nfk6wrORGVKR8+fYUKbg=
Subject key identifier: 6B:22:F9:FA:B5:18:B5:70:FD:DA:86:2F:EC:D0:3E:71:D3:94:BB:6E
Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
Certificate issuer: /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Certificate serial: 019DA0776205495846D1DB8A73A7BDEDB587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
Manifest number: 1074
Signing time: Sat 18 Apr 2026 12:01:11 +0000
Manifest this update: Sat 18 Apr 2026 12:01:11 +0000
Manifest next update: Sun 19 Apr 2026 12:01:11 +0000
Files and hashes: 1: BDT11QF-TtgdWALp45xoyYelUsM.roa (hash: mujOfcZnyEUoIqlubLK7erXRFeA189kfqWm71HEHJLA=)
2: DlL96hxxwcy8Kwd8DQrZphzJ2xQ.roa (hash: douTIG2rpH9W5IASQHZjad+O9ORB6/ZQHqnsPcQDa1Y=)
3: EVJm44_qM79rFFxjaBYVRCtqVwc.roa (hash: nQKe6AiCZP429Q5zEhReB+qr5inljkvblMvj0QyfEAw=)
4: EZ3QYuO1aqPZJjLHT0YYVGkNCoQ.roa (hash: VhRxVbInTPM1O+Ldm/7obKGqKOZ2+6LZ1EZrcIQqOtM=)
5: GTk4_xkEVcCortfUUwlKNErPXJ8.roa (hash: uEhgRh2xa40WAcBKwOTkS5sGlJsngCqmoIk1TCwsS1s=)
6: SM6e5UqBHogNbgt0o12BmkZX2DY.roa (hash: U4nFBrr+xudjO3gD5UENImDfwahddAJuHGHpyaSej5k=)
7: fMPPEhoc1eJ7TtYJwhoTEBEj3u0.roa (hash: TFEzfDo3Zwa4HL59NImWxFGsVixNQrbjisILgLkXLHY=)
8: ume_97rR64OEtYXfe-8SBvfxn34.crl (hash: 2Kg+qHi/zlowHFRQqcWDwxTXYTZRT0Q0eQbus0vboEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a0:77:62:05:49:58:46:d1:db:8a:73:a7:bd:ed:b5:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Validity
Not Before: Apr 18 12:01:11 2026 GMT
Not After : Apr 19 12:01:11 2026 GMT
Subject: CN=6b22f9fab518b570fdda862fecd03e71d394bb6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:8e:b6:d1:33:22:16:73:8f:4c:9b:dd:03:14:
92:20:d9:63:69:98:48:1a:b8:7d:5f:51:02:e3:1c:
70:b7:55:b4:85:61:c2:20:01:e9:21:25:5b:9c:4b:
f9:cd:53:c3:b9:5e:85:c7:c9:b7:55:01:22:b8:3c:
75:6e:d2:94:08:b8:bd:2f:82:d1:cd:c3:44:54:7a:
c6:7b:31:6a:9e:11:6c:2e:19:1c:ed:1f:0e:70:85:
c9:9b:ec:94:c7:61:ee:87:ef:38:35:4b:a4:14:1c:
89:42:45:df:90:25:32:be:30:20:4f:6b:cd:88:02:
7a:e1:ac:42:d5:d5:bf:27:b2:10:ed:a4:6f:45:dc:
e5:2c:47:9d:87:de:75:18:5f:30:19:eb:cb:3e:69:
8b:90:dc:d3:08:e6:f9:0a:a9:33:be:d5:82:7c:23:
78:f1:41:ac:c4:f1:52:0a:95:09:4c:e6:64:e6:67:
45:16:66:8b:2b:85:66:46:0f:83:61:fc:e3:2f:33:
66:4a:33:c2:4b:d0:4b:75:e3:4e:02:c9:e0:72:f2:
3d:fe:c9:92:ef:5e:b1:11:e2:da:43:b3:ce:bd:f4:
8c:63:c0:e9:d4:1a:13:48:5a:b8:df:7c:3b:64:fc:
ec:f6:88:68:91:91:12:2b:4f:03:08:1b:1c:96:5b:
e2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:22:F9:FA:B5:18:B5:70:FD:DA:86:2F:EC:D0:3E:71:D3:94:BB:6E
X509v3 Authority Key Identifier:
keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:91:41:08:db:64:c6:d5:5a:44:2a:27:b6:df:0a:e8:e4:d5:
55:aa:a2:13:a7:33:ad:f4:26:29:77:68:83:7b:a6:c7:4d:95:
67:19:fa:11:fd:e6:f6:a8:cd:37:d7:46:d9:51:01:fe:ff:20:
d0:a4:e8:73:70:8e:29:36:57:ad:b0:71:35:fd:c9:f0:a8:d2:
2c:36:7e:d1:03:91:d0:91:33:74:e4:58:16:0b:48:4c:bf:8b:
14:00:dc:2c:37:5a:16:92:36:40:61:11:f9:7e:d8:4c:52:da:
f4:22:1d:d7:25:ce:a9:a1:0a:dc:79:6a:76:89:cf:cc:6e:3a:
c4:f7:1c:af:fd:30:b6:99:0a:d2:14:32:09:ae:5d:5a:f6:8f:
13:23:67:95:02:d7:e4:9c:62:b8:b7:03:1f:c6:b8:c6:ae:07:
18:7e:9f:e8:23:0b:fb:23:7e:70:9b:03:4c:5f:9d:0e:61:27:
96:17:d1:19:2c:ab:45:97:e7:2a:c9:2f:f7:ba:e5:96:d2:b5:
95:cb:96:39:65:a8:c4:8f:50:4b:4e:62:2c:20:e5:6d:8b:c2:
cd:92:14:cd:71:0b:2f:cd:b4:d5:83:ed:80:ff:53:ad:5b:89:
f7:e6:db:88:6d:d5:ac:83:6c:78:d6:20:74:13:f5:db:65:85:
3d:bc:e3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 19:43:58 2026 by rpki-client