Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/945b53-d788-487b-a982-0903ee7c1902/1/bUmIt5OIS3moT-NFY9A581RsGF8.mft
File: bUmIt5OIS3moT-NFY9A581RsGF8.mft (raw, json)
Hash identifier: /QkOyC7XU5K+PeBlFk+2qEf2OLearXTUIc/JdeH9nV0=
Subject key identifier: 72:6F:4A:42:9E:F2:78:70:3D:A5:18:0E:E0:7B:2B:D4:EA:41:42:A4
Authority key identifier: 6D:49:88:B7:93:88:4B:79:A8:4F:E3:45:63:D0:39:F3:54:6C:18:5F
Certificate issuer: /CN=6d4988b793884b79a84fe34563d039f3546c185f
Certificate serial: 019FEEFB54923C255DB7B89289443F7A77A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bUmIt5OIS3moT-NFY9A581RsGF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/945b53-d788-487b-a982-0903ee7c1902/1/bUmIt5OIS3moT-NFY9A581RsGF8.mft
Manifest number: 03BC
Signing time: Tue 11 Aug 2026 04:01:16 +0000
Manifest this update: Tue 11 Aug 2026 04:01:16 +0000
Manifest next update: Wed 12 Aug 2026 04:01:16 +0000
Files and hashes: 1: bUmIt5OIS3moT-NFY9A581RsGF8.crl (hash: EQvfQot7x9S/VaMiJzZ7XXNwj+taWV7lACj9KNS8qM4=)
2: psWuXOUw0ojni_7k22i_GF7yDBU.asa (hash: WF2QGwQ+VSJ5i6bTL2xspTCsv2yV3RXed798tZMpPBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/945b53-d788-487b-a982-0903ee7c1902/1/bUmIt5OIS3moT-NFY9A581RsGF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/945b53-d788-487b-a982-0903ee7c1902/1/bUmIt5OIS3moT-NFY9A581RsGF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bUmIt5OIS3moT-NFY9A581RsGF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Aug 2026 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ee:fb:54:92:3c:25:5d:b7:b8:92:89:44:3f:7a:77:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d4988b793884b79a84fe34563d039f3546c185f
Validity
Not Before: Aug 11 04:01:16 2026 GMT
Not After : Aug 12 04:01:16 2026 GMT
Subject: CN=726f4a429ef278703da5180ee07b2bd4ea4142a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4d:34:a3:83:b7:cd:09:99:5a:0c:49:64:cc:
c3:d7:cb:b9:50:e0:f1:4d:15:3a:3a:91:31:32:51:
c9:35:89:32:fb:c5:5c:68:2b:ea:1f:dc:8f:6a:de:
a4:46:a5:fa:49:9e:dd:d9:5d:43:c3:e6:e9:41:50:
9a:48:b8:f6:af:5f:30:a7:45:ad:2e:57:bb:3c:bb:
e5:0f:29:b3:f5:f2:7b:95:a8:d9:91:e1:5b:50:01:
26:24:58:8d:f9:b9:00:8b:5a:2a:fe:f4:af:25:cd:
e1:e3:10:e7:91:53:07:9a:15:1c:3b:c3:b0:29:d5:
98:13:53:05:5c:4e:11:fe:a5:83:45:17:39:36:70:
97:df:df:17:f2:28:55:d9:1e:cb:98:b1:35:ee:00:
75:84:95:82:ed:d1:f5:97:70:99:8e:28:46:5e:79:
dc:e7:99:7b:e1:69:d8:02:2a:c3:96:72:8b:99:fe:
15:81:97:44:1c:2a:e3:e3:ea:0c:74:37:1b:44:25:
84:a2:5e:4d:a0:31:dc:da:b7:36:2e:e0:23:86:cf:
3e:82:38:59:ed:17:2a:9d:7c:ce:97:1f:6e:b4:ad:
3f:0e:b4:70:39:36:23:55:90:5f:85:95:3e:eb:7b:
a4:2f:1f:b1:4a:e9:05:02:05:8b:b1:52:ca:c3:5c:
fa:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6F:4A:42:9E:F2:78:70:3D:A5:18:0E:E0:7B:2B:D4:EA:41:42:A4
X509v3 Authority Key Identifier:
keyid:6D:49:88:B7:93:88:4B:79:A8:4F:E3:45:63:D0:39:F3:54:6C:18:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bUmIt5OIS3moT-NFY9A581RsGF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/945b53-d788-487b-a982-0903ee7c1902/1/bUmIt5OIS3moT-NFY9A581RsGF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/945b53-d788-487b-a982-0903ee7c1902/1/bUmIt5OIS3moT-NFY9A581RsGF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:28:f9:66:6c:24:77:0b:b6:88:58:b7:95:0a:ca:1e:b1:36:
e8:6f:12:1a:35:88:7e:7d:57:81:1f:9a:19:85:15:59:d5:a6:
a3:7b:2b:35:8e:95:87:ce:2e:99:7d:60:35:59:c1:cc:fb:63:
fc:7e:75:be:b9:4e:c9:6b:85:cf:c2:d0:5f:67:f4:05:b8:c6:
60:ad:5b:15:a6:3d:99:57:f2:30:98:28:8c:1c:7a:b9:43:c3:
72:e2:a8:b3:5c:c8:be:5c:b6:73:35:a7:14:fd:53:01:de:1b:
bb:37:87:b6:cf:b4:2b:a3:ed:a0:e6:24:06:fe:0c:e8:06:81:
f1:e0:fa:07:66:e6:f2:73:1b:fb:86:5b:0f:f1:ee:31:36:db:
0b:9e:21:51:51:1a:c6:4b:16:4f:f1:83:f4:f5:c4:25:13:54:
3a:62:f2:54:14:b3:be:34:46:45:9e:d9:39:dd:58:47:09:23:
fe:a3:25:6b:44:58:53:d9:a0:bf:e8:16:b5:e5:75:c0:a0:b0:
18:31:0f:85:cb:bd:a4:10:f2:96:ea:ce:6e:70:97:eb:d0:5f:
01:34:07:ba:45:54:c5:07:fd:cf:35:77:ae:6e:be:68:e9:36:
6e:90:7a:b3:0e:72:b3:41:44:62:9c:f1:4a:3a:9d:1a:32:0e:
2e:d7:43:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 11 12:59:21 2026 by rpki-client