
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
File: UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft (raw, json)
Hash identifier: L5lDaRUu2mWGeK3SsTeSgkS4kkyDu9SGQgqnOu+c5oI=
Subject key identifier: 2A:68:AE:E8:09:D7:47:05:E5:4D:C9:8B:7C:40:9D:32:BC:35:8B:DC
Authority key identifier: 50:C9:DA:14:83:FE:39:93:D1:98:52:60:61:97:35:C4:CF:D3:80:33
Certificate issuer: /CN=50c9da1483fe3993d1985260619735c4cfd38033
Certificate serial: 01A088D4C21D50AB361A16FB0B1B1EF8FC04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
Manifest number: 1A47
Signing time: Thu 10 Sep 2026 01:00:39 +0000
Manifest this update: Thu 10 Sep 2026 01:00:39 +0000
Manifest next update: Fri 11 Sep 2026 01:00:39 +0000
Files and hashes: 1: R5_iJAHMim0AgymJSQ6r4wQbiHw.roa (hash: EQeRHkG43biXk81xozYoB7VEoug0HoUQn327W+HkcVI=)
2: UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl (hash: pHHaPX2wUVQJ/197idF6+uQez1w6Q8oPZGlnoGzumPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:d4:c2:1d:50:ab:36:1a:16:fb:0b:1b:1e:f8:fc:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c9da1483fe3993d1985260619735c4cfd38033
Validity
Not Before: Sep 10 01:00:39 2026 GMT
Not After : Sep 11 01:00:39 2026 GMT
Subject: CN=2a68aee809d74705e54dc98b7c409d32bc358bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:77:0d:ed:47:e7:45:e9:46:6d:67:53:ce:90:
e8:37:eb:54:c6:07:c3:06:ed:63:5e:f9:77:3b:81:
90:0c:96:06:c0:1d:af:33:23:2d:ed:a9:24:fd:4c:
45:04:95:27:73:e5:16:28:0d:d4:1a:83:2f:a5:9b:
3d:0d:4f:1a:a7:bf:1e:9c:ce:ef:47:ed:5b:0d:f8:
e1:04:f3:64:81:e9:c9:f4:99:07:a6:df:b8:ee:bf:
76:1b:87:24:5e:cb:39:42:b7:5a:ae:ba:1e:85:51:
d8:b5:b0:21:53:ef:f4:ed:e9:25:c8:5f:e5:07:27:
73:b6:a7:e7:aa:7c:ad:b4:5a:f6:95:e7:e7:d5:85:
74:b5:f3:cb:7b:75:84:d7:a4:0d:fb:39:99:41:c5:
04:c7:8b:8e:97:0d:e9:5b:78:57:e2:fd:0b:a6:b6:
2e:60:b9:bb:e9:7c:19:53:0b:0c:e8:ad:71:c6:89:
14:de:88:6f:d8:47:0e:1d:f5:d9:d4:65:ca:f5:54:
fe:69:56:ad:92:64:ae:06:0a:cc:f2:39:d9:5a:b8:
09:af:0d:12:17:16:1f:b5:1a:ce:92:e1:ed:34:09:
6c:b4:f6:03:89:01:4e:b9:5d:4b:2a:5c:51:26:fe:
56:ac:16:61:3d:0f:b8:26:0c:b8:b4:3a:2f:b1:ef:
1d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:68:AE:E8:09:D7:47:05:E5:4D:C9:8B:7C:40:9D:32:BC:35:8B:DC
X509v3 Authority Key Identifier:
keyid:50:C9:DA:14:83:FE:39:93:D1:98:52:60:61:97:35:C4:CF:D3:80:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ab:63:c5:40:83:0c:5f:16:8b:48:5c:a2:0a:f5:e4:0e:fe:
53:7a:16:e9:b7:6d:41:82:5f:c6:bf:50:d5:1c:79:be:62:b2:
4d:5d:5a:de:f4:19:bb:14:26:8b:41:f5:4e:9d:af:e4:6d:69:
48:1f:e0:f0:82:bc:73:fb:c3:df:3f:37:f6:11:dc:b4:89:72:
4f:e4:96:12:82:77:17:a1:32:d4:cb:d2:c5:9c:37:35:fa:12:
f5:bc:42:e0:49:21:73:90:ac:25:59:aa:73:d4:5f:bf:ba:ca:
41:c5:fb:42:4d:52:43:97:9f:67:8e:4b:0f:5b:25:61:bd:63:
4d:36:ff:36:2c:d3:ad:17:d6:88:c2:fa:dd:da:7b:4d:c4:73:
1a:4a:7c:59:1c:25:81:4d:c4:e3:4e:91:6a:6d:22:87:28:c6:
6d:46:7d:9c:b5:d4:71:ca:97:b4:d0:bf:32:31:ba:6c:8c:2d:
ff:5f:58:61:44:61:fe:b7:82:ab:8b:5a:e2:40:4a:27:eb:6c:
2f:f4:b4:78:d8:d2:5a:d9:70:ff:39:e1:02:53:a8:94:8c:93:
f7:93:5f:8f:32:79:4d:7e:ad:a9:ba:1c:5d:3a:0e:59:2f:fc:
68:df:4e:90:4d:f0:b3:12:c7:f7:af:37:65:c4:e9:1a:e8:08:
69:ce:0f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:32:34 2026 by rpki-client