Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft
File: uMiqGHMPSoPihSxWklUau1se5-o.mft (raw, json)
Hash identifier: 1qR/drbInVYgwas3KGv6JQpKVC+tT47dRAqqcrO30WM=
Subject key identifier: 04:10:7E:A9:28:F8:4B:6D:7F:34:CF:46:37:7A:D1:03:5B:84:16:10
Authority key identifier: B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
Certificate issuer: /CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Certificate serial: 01A1721381C98EED05310E7A883D8AB9EFE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft
Manifest number: 1ACF
Signing time: Sun 25 Oct 2026 08:00:43 +0000
Manifest this update: Sun 25 Oct 2026 08:00:43 +0000
Manifest next update: Mon 26 Oct 2026 08:00:43 +0000
Files and hashes: 1: 1-FwXe7PZZn8pbfNoA5f3LaxA9Z4.roa (hash: VNrmRdyCEMk5sVsUYPMlRs6jibn3G+c48bYYZcPJruY=)
2: 1v0gzSVrdpHJ1kxvOwfKSyYCpL8.roa (hash: cmDo8iK0CyxoS3TeSJaKn0b54YS7ZfZ1R+BFgSwd9T4=)
3: BeOlGfd4kyL56CFBTNlFeg1iQCc.roa (hash: 6DQD4VPy7IHhfQDtQNtD6rCp0/TWA+VmwTvJtNQ72aQ=)
4: etyrPt1aZEu7O63zljCUb1u_zQU.roa (hash: hrkIclXJJEK/pVdQYztmKRJMv7stBIcGF3RpANQ6FpQ=)
5: nmL9EQqvDKrR3Hs40Iu8m1-vIzY.roa (hash: DWKdYwXjR7CbcwQ5T5LM5T6YAURcXQrAsUonMFFVa8s=)
6: uMiqGHMPSoPihSxWklUau1se5-o.crl (hash: f+t2oy25YsjxVgRMTUxa/9C0GFeG4ktRNxAzCVkWg2k=)
7: uyDd6_WnW5b42bW_ImjP5ZvDqpc.roa (hash: OGUiJNuUA+4RM8D8fSwbQDp/GrlNdWNfd8TIRpipQ6E=)
8: yP46kIpWtOqNANJHH7Ze_2pu2vw.roa (hash: oclUAkD+j2AdtktvuOa/dXAYpExh9g3kYwl48UqmTJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:13:81:c9:8e:ed:05:31:0e:7a:88:3d:8a:b9:ef:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Validity
Not Before: Oct 25 08:00:43 2026 GMT
Not After : Oct 26 08:00:43 2026 GMT
Subject: CN=04107ea928f84b6d7f34cf46377ad1035b841610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:da:e2:8b:ca:73:85:20:ac:f8:f0:2d:5d:54:
b5:ba:ef:ae:2b:8c:98:a9:e6:8e:a1:c4:f1:1f:6c:
10:bf:79:c6:56:a2:b2:48:7a:e9:4a:85:67:c3:1e:
dc:1a:58:d3:a8:40:96:3f:78:56:07:c0:70:10:03:
0c:44:9b:4f:60:36:26:86:49:45:0c:9d:53:98:52:
e5:0b:52:9e:c7:b8:66:8e:c4:ba:42:5b:9f:9d:9e:
87:e9:27:c0:81:7f:8a:e6:90:51:e3:20:8a:57:88:
0c:96:23:3e:4f:35:ed:48:eb:87:a5:72:28:57:1e:
18:21:02:04:8e:a8:6b:a2:1c:6a:3e:18:aa:a5:51:
d8:2a:75:76:e7:a8:52:98:4e:42:ca:4e:89:91:49:
cd:8c:b0:67:9c:cf:65:29:8d:74:50:fc:55:f3:71:
2a:db:91:22:cc:16:92:48:08:0e:95:1b:48:5f:d8:
7f:1c:f5:9e:dd:ad:bd:09:6d:da:be:c7:37:5b:9b:
f3:5f:91:52:09:cc:36:bc:56:e3:a2:af:ac:c5:64:
2f:e9:7a:2d:94:84:07:ad:f1:28:ec:34:59:b8:19:
6d:04:f4:94:19:30:85:ec:23:15:d1:41:94:5d:3f:
9a:d1:c1:52:92:6b:ee:32:17:3e:08:2c:ed:04:c9:
17:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:10:7E:A9:28:F8:4B:6D:7F:34:CF:46:37:7A:D1:03:5B:84:16:10
X509v3 Authority Key Identifier:
keyid:B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:60:87:82:2f:73:c2:66:a6:13:25:e6:56:2f:8d:e3:a7:95:
e1:b0:01:f4:52:7a:d2:72:d1:b5:6d:6b:b6:73:b2:20:83:90:
e3:2c:15:d9:0c:35:17:f4:1e:74:c2:60:cd:ba:0e:d7:e2:63:
ab:e4:99:1a:d7:b7:8d:91:90:f5:05:67:4a:01:05:aa:43:9e:
ad:44:97:b5:aa:2d:44:3a:21:67:1b:a3:23:ea:e1:b4:34:6d:
3f:a7:e9:e2:3c:e5:c8:d3:c2:47:12:e8:93:42:55:14:09:06:
13:bf:15:bd:c4:2a:4a:70:3a:37:90:af:1b:e2:ba:d5:a1:5e:
ed:07:1b:a8:0f:7f:d7:19:5b:30:ae:3b:bd:cd:c4:8d:2a:d6:
94:72:6a:60:47:4b:26:72:f9:af:71:1a:a0:b1:0d:70:29:ff:
72:2b:c8:23:24:09:1d:39:dc:4a:bc:2f:bd:9e:5b:26:4c:6b:
53:11:d8:84:92:d8:52:a6:20:18:f1:5e:6c:f1:f8:b8:42:09:
6f:99:4e:24:b4:f0:e9:b9:0f:ca:ee:81:2f:a0:a3:2b:b5:f4:
81:f8:e6:8b:1f:f2:0e:2b:fe:dd:d2:42:db:d0:d0:6d:29:b4:
6a:7b:05:4e:67:22:1f:ce:7f:e6:77:5b:1c:3b:70:b7:92:63:
a2:2f:07:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:02:53 2026 by rpki-client