Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/945b53-d788-487b-a982-0903ee7c1902/1/bUmIt5OIS3moT-NFY9A581RsGF8.mft
File: bUmIt5OIS3moT-NFY9A581RsGF8.mft (raw, json)
Hash identifier: HfUcXZ1Bk6r1hlx1H/ncR5HriBD7F5cLhIAKxqDQpXI=
Subject key identifier: 26:9D:02:C4:51:86:C6:8A:FF:CC:D9:D1:32:96:92:DD:41:E4:19:F2
Authority key identifier: 6D:49:88:B7:93:88:4B:79:A8:4F:E3:45:63:D0:39:F3:54:6C:18:5F
Certificate issuer: /CN=6d4988b793884b79a84fe34563d039f3546c185f
Certificate serial: 01A0E99BFC7D712559A02B01F1B4258B647C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bUmIt5OIS3moT-NFY9A581RsGF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/945b53-d788-487b-a982-0903ee7c1902/1/bUmIt5OIS3moT-NFY9A581RsGF8.mft
Manifest number: 043F
Signing time: Mon 28 Sep 2026 20:01:49 +0000
Manifest this update: Mon 28 Sep 2026 20:01:49 +0000
Manifest next update: Tue 29 Sep 2026 20:01:49 +0000
Files and hashes: 1: bUmIt5OIS3moT-NFY9A581RsGF8.crl (hash: jrfaV2xfcpkyBhriLgJjCSAu8FV/rBEN3EG93n2+9Zg=)
2: uwtH6XSMIlNNvLETWa2zBCtCv54.asa (hash: PZz6lUyUjmeDMW0cN5tom+AMwKUKSuKpAQKvZ9tNaSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/945b53-d788-487b-a982-0903ee7c1902/1/bUmIt5OIS3moT-NFY9A581RsGF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/945b53-d788-487b-a982-0903ee7c1902/1/bUmIt5OIS3moT-NFY9A581RsGF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bUmIt5OIS3moT-NFY9A581RsGF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:9b:fc:7d:71:25:59:a0:2b:01:f1:b4:25:8b:64:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d4988b793884b79a84fe34563d039f3546c185f
Validity
Not Before: Sep 28 20:01:49 2026 GMT
Not After : Sep 29 20:01:49 2026 GMT
Subject: CN=269d02c45186c68affccd9d1329692dd41e419f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0d:df:25:3b:72:0d:3f:4f:33:dd:60:6c:a7:
fc:a3:ec:e5:9b:42:ad:01:aa:80:b0:77:09:57:a1:
c4:1f:79:01:08:35:d6:b8:ed:bf:57:96:08:95:08:
df:21:02:d1:6c:d1:49:8c:2b:53:5b:1e:7a:b1:a1:
01:ff:4d:d9:7d:8c:f4:d2:18:a3:b3:4a:a3:09:47:
30:c6:f5:6c:31:97:c2:d4:aa:1f:05:51:04:74:17:
3c:e3:d6:50:20:19:cd:9e:7e:ab:03:86:57:fc:da:
64:4e:0a:c9:af:92:bc:3d:7c:ae:2e:47:c5:48:49:
f1:88:56:55:39:0c:31:18:90:13:55:3e:fa:13:30:
5a:dc:ed:0f:a0:9b:91:c4:63:7b:3f:ae:4a:eb:cb:
2c:b2:16:0e:9d:e4:9f:ff:88:fd:9f:e5:3b:6d:78:
25:4f:8c:a6:6a:5a:39:29:61:2c:1a:77:11:0b:a4:
ad:93:6b:cf:55:e4:27:ef:fb:bb:3c:b0:18:2c:f4:
12:91:72:30:c8:22:a5:28:bb:75:af:fc:45:87:28:
c8:a2:dd:c2:59:e1:50:f3:df:96:d3:bb:92:79:39:
5e:96:55:6f:5b:58:ee:af:a6:ea:0c:10:f0:da:6b:
d6:1e:a8:f5:0d:f9:76:df:a3:7b:d2:86:0d:f4:eb:
3b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9D:02:C4:51:86:C6:8A:FF:CC:D9:D1:32:96:92:DD:41:E4:19:F2
X509v3 Authority Key Identifier:
keyid:6D:49:88:B7:93:88:4B:79:A8:4F:E3:45:63:D0:39:F3:54:6C:18:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bUmIt5OIS3moT-NFY9A581RsGF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/945b53-d788-487b-a982-0903ee7c1902/1/bUmIt5OIS3moT-NFY9A581RsGF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/945b53-d788-487b-a982-0903ee7c1902/1/bUmIt5OIS3moT-NFY9A581RsGF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:2b:db:a0:9a:4a:54:2a:44:e5:23:d0:91:2e:27:1c:eb:99:
eb:2a:47:e7:c3:05:20:84:65:58:95:79:19:26:21:41:27:1d:
7b:b1:77:f9:f3:e5:59:f0:92:f7:01:b2:ac:99:ad:56:e8:57:
81:d7:69:19:34:e6:47:ce:2d:43:81:fd:90:a9:07:91:cb:02:
74:ec:52:94:3f:a9:96:42:ba:be:f9:92:4a:a9:41:37:4b:9a:
2d:6f:a8:b3:e0:e9:bf:cb:1e:b2:06:64:f9:7a:c0:08:b8:48:
f7:e0:76:fe:f0:dd:92:f2:37:7b:08:14:6d:b9:6f:88:27:db:
43:5c:fb:42:df:99:14:20:e6:22:75:d2:25:c3:0e:0c:04:ea:
bf:06:62:9a:50:43:f4:69:3b:63:f0:fc:a5:89:a1:be:94:7b:
fe:0b:d0:ad:5c:b9:58:c4:90:f9:41:9d:ff:56:f5:b8:53:e7:
68:f0:41:ed:05:1f:e3:14:ee:cc:4a:de:d7:9e:b8:c1:9a:eb:
40:d0:94:c2:2a:bb:d3:c4:76:f9:00:0a:f8:83:37:e2:75:93:
e8:72:2f:24:6f:d5:b7:81:a1:59:85:5a:9a:08:01:37:42:9a:
5c:d5:3e:ba:09:8c:5c:dc:a5:17:2e:91:3e:f1:df:45:28:9b:
de:29:e5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 03:07:50 2026 by rpki-client