
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
File: ume_97rR64OEtYXfe-8SBvfxn34.mft (raw, json)
Hash identifier: PyBzvojfQYSs/L11u3pF47KRO+SrcUX28DzcoGFV7N0=
Subject key identifier: D7:25:AD:5A:D9:73:91:9A:08:69:3B:BC:D7:2B:8C:96:F9:C8:01:41
Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
Certificate issuer: /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Certificate serial: 019F72183328CF1A460F9A719DCD244A3679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
Manifest number: 1171
Signing time: Fri 17 Jul 2026 22:00:16 +0000
Manifest this update: Fri 17 Jul 2026 22:00:16 +0000
Manifest next update: Sat 18 Jul 2026 22:00:16 +0000
Files and hashes: 1: 33gU1W_UI1Ae18rle6T32Am_ap0.roa (hash: CtHyr3lbVK0nM4M5V+efOeDGbhPQI4ZIEpY0w9de2vw=)
2: 7d0P9doBZNnco0Uk-uyE95zYsRU.roa (hash: C0smtXlBUg5wv9v0wIvA4FN2yM+ZFAWopSk3eOTxr4A=)
3: BDT11QF-TtgdWALp45xoyYelUsM.roa (hash: mujOfcZnyEUoIqlubLK7erXRFeA189kfqWm71HEHJLA=)
4: EZ3QYuO1aqPZJjLHT0YYVGkNCoQ.roa (hash: VhRxVbInTPM1O+Ldm/7obKGqKOZ2+6LZ1EZrcIQqOtM=)
5: LE0LYSRlSHBlwqkbBS3d-4jQXVI.roa (hash: qNI5ryb9dP4ZDLAtMIMap6nbp3+t9sAW2t3qbIFwYZE=)
6: Rq_6E29y9FzzDAL1ZxfTgVmFkZs.asa (hash: yI85oGl8VeF8e1P6DlU+1YJp0A0saEK2LwjW5ZnVXF8=)
7: SM6e5UqBHogNbgt0o12BmkZX2DY.roa (hash: U4nFBrr+xudjO3gD5UENImDfwahddAJuHGHpyaSej5k=)
8: VZOyRy0tzJ2sfmNYjeH9siUXpok.roa (hash: hg8jPOLxAFpxHffAZVtykZM6KfjDO72SPntESUbpkNs=)
9: eO9gFOF2DFVAaSQC-qU8Cc5tUvk.asa (hash: oREm2BU1au2wLbubTl/7hfGGiO50t8g7O52UFNL9Yd4=)
10: fMPPEhoc1eJ7TtYJwhoTEBEj3u0.roa (hash: TFEzfDo3Zwa4HL59NImWxFGsVixNQrbjisILgLkXLHY=)
11: sPWdnd-6eDj5X9yNO4z9PSISSlQ.roa (hash: agHieGTKdf4veiuZ5e0ZnuSvZ/4cBqOGV3qPQeuYVLw=)
12: uDj2Yyjz9Osyu9dJCu_3OQFz4uA.roa (hash: 3im4Wph6tBomBtiDPxXDGzF9rSSihCEjyLDoawI+nsw=)
13: ume_97rR64OEtYXfe-8SBvfxn34.crl (hash: T2GzkLFmhDC4Pow29L+6s5rPc3fieiJirwqGYuN017c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:72:18:33:28:cf:1a:46:0f:9a:71:9d:cd:24:4a:36:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Validity
Not Before: Jul 17 22:00:16 2026 GMT
Not After : Jul 18 22:00:16 2026 GMT
Subject: CN=d725ad5ad973919a08693bbcd72b8c96f9c80141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:27:d3:55:6f:1f:26:ae:9b:8b:5e:80:bf:72:
63:d9:6b:fd:9b:46:89:87:52:c1:b2:b7:05:68:a7:
f8:ad:08:9f:ab:5c:ba:f3:ff:ac:13:c1:66:9b:b6:
52:b5:f3:a8:18:ae:7f:e0:46:99:5e:91:92:c7:ac:
61:d6:ec:27:fb:27:0c:00:d0:8d:42:39:47:f8:cd:
c0:d8:b3:34:91:6a:94:43:5c:5a:4e:58:36:45:c0:
9b:0f:b2:59:e2:e2:01:d5:d9:b7:e9:1d:64:f1:7f:
64:b6:92:cb:f0:ad:fe:f5:9e:1d:43:91:ee:2c:5d:
bf:de:a2:99:68:83:9a:20:49:a6:81:1e:89:cf:b6:
61:0a:38:59:74:a0:f8:eb:b9:84:05:3c:d5:1b:09:
e5:82:71:71:e9:a1:db:d6:66:0b:97:9b:dd:bd:02:
70:0a:47:68:c0:01:7f:1b:08:a7:f3:f5:90:65:86:
15:51:50:f0:11:ea:f6:02:4d:b2:13:a9:39:63:94:
13:24:c8:26:e9:2a:24:5f:16:16:55:b4:c2:c2:61:
1c:1f:48:e6:27:91:04:64:fb:50:ce:37:9d:ab:1c:
15:9a:c5:89:22:13:04:6d:60:b2:45:d1:17:da:14:
aa:05:59:29:e1:00:c9:88:fb:b0:2f:30:8a:45:fb:
bf:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:25:AD:5A:D9:73:91:9A:08:69:3B:BC:D7:2B:8C:96:F9:C8:01:41
X509v3 Authority Key Identifier:
keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:a9:f0:1c:04:e9:4c:eb:c3:34:c0:20:5c:e5:12:7f:93:3c:
c5:d3:3e:db:bd:bd:5e:83:b9:bb:ad:61:49:5c:da:2e:b1:37:
72:8e:f0:12:f2:58:f7:56:75:da:81:b4:af:9e:a5:45:e9:9e:
a2:c8:99:32:95:44:21:a7:54:d4:98:a1:2b:69:1c:fa:37:28:
e6:fc:9e:a6:65:36:12:59:c7:2c:7d:52:23:cb:d6:98:91:76:
47:a8:6c:7c:ec:45:c4:70:d4:16:28:13:c1:6c:8b:c8:e1:08:
b0:45:42:6c:97:55:1e:28:c4:bf:a0:34:d7:54:fe:f2:9a:43:
f1:f5:c0:59:39:d5:d6:a0:9b:f5:a6:37:37:84:92:8e:f5:1b:
86:90:c9:73:11:c5:82:e9:9d:99:2b:fa:f2:a0:c5:12:ac:7b:
5f:b3:32:86:a7:58:9a:25:87:48:88:65:cc:7a:05:02:a9:13:
74:d7:e2:c6:be:cf:ae:9f:6e:85:be:59:01:a9:7e:01:51:d8:
1b:e1:26:c7:4a:f5:69:7a:ad:ca:23:ed:aa:7f:72:fe:9c:bf:
e4:29:35:55:c4:46:f6:a4:13:8a:74:c5:2b:33:6a:72:e3:40:
b8:e8:86:55:09:ab:26:52:aa:01:94:c5:a1:db:b6:36:cd:e4:
50:73:48:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:19:03 2026 by rpki-client