Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
File: UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft (raw, json)
Hash identifier: yqL9GSZ8axdAv67VNWTLeb3CX1HjqT+yLUIQnIR2l7U=
Subject key identifier: F9:71:EB:7F:B9:C9:E1:98:AC:C6:94:57:C7:66:F3:F8:72:57:7D:EF
Authority key identifier: 50:C9:DA:14:83:FE:39:93:D1:98:52:60:61:97:35:C4:CF:D3:80:33
Certificate issuer: /CN=50c9da1483fe3993d1985260619735c4cfd38033
Certificate serial: 01A18006A24AFF8804671DC45D6B4716111A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
Manifest number: 1AC7
Signing time: Wed 28 Oct 2026 01:01:20 +0000
Manifest this update: Wed 28 Oct 2026 01:01:20 +0000
Manifest next update: Thu 29 Oct 2026 01:01:20 +0000
Files and hashes: 1: R5_iJAHMim0AgymJSQ6r4wQbiHw.roa (hash: EQeRHkG43biXk81xozYoB7VEoug0HoUQn327W+HkcVI=)
2: UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl (hash: 12IIgw2gC7V5dqivVw+fKZ2yle65zTB1Ugn/lOn8NmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:06:a2:4a:ff:88:04:67:1d:c4:5d:6b:47:16:11:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c9da1483fe3993d1985260619735c4cfd38033
Validity
Not Before: Oct 28 01:01:20 2026 GMT
Not After : Oct 29 01:01:20 2026 GMT
Subject: CN=f971eb7fb9c9e198acc69457c766f3f872577def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d8:38:ec:42:3f:74:78:0f:85:3f:b4:6d:95:
52:80:04:cb:67:43:3f:89:91:83:ea:8b:20:9e:39:
91:38:e9:d1:b7:a2:dc:cf:57:62:ff:4c:0a:7d:51:
16:9e:1f:3e:6c:b9:22:04:65:de:ff:bb:81:e8:b7:
a8:17:c7:4d:20:d1:45:6d:c1:12:0b:c3:89:d4:bb:
ab:f6:02:59:54:56:8f:6f:df:28:42:f7:05:05:cd:
a7:6b:32:68:3f:9f:bc:c6:88:82:5c:6a:c0:0a:7d:
48:af:49:56:ef:84:da:e8:7a:4e:10:ea:5d:08:8e:
ec:60:4a:cb:fd:60:fc:4f:62:c0:11:30:80:1b:b9:
af:7f:77:ee:30:13:b4:49:dc:2f:e4:0e:aa:6b:87:
6a:62:b0:5d:a3:22:e8:2e:e6:31:bc:ed:87:aa:78:
9f:85:67:56:2e:ab:3b:c3:d8:c6:69:0f:6c:63:90:
70:b1:74:f0:4c:19:76:f2:a6:68:31:8e:0e:34:76:
21:3d:ac:74:74:13:07:53:e0:47:6e:e8:b0:87:3f:
3c:94:43:a6:6a:90:76:8a:cf:b3:c3:e5:72:27:c6:
e5:2e:9b:5e:58:18:7c:f1:62:df:ae:b9:f1:1c:65:
b7:50:6b:b5:e3:51:f1:18:15:46:ff:e9:39:dd:e2:
18:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:71:EB:7F:B9:C9:E1:98:AC:C6:94:57:C7:66:F3:F8:72:57:7D:EF
X509v3 Authority Key Identifier:
keyid:50:C9:DA:14:83:FE:39:93:D1:98:52:60:61:97:35:C4:CF:D3:80:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:9e:da:4d:d0:8c:27:8c:e9:f3:c2:51:9a:87:c2:7f:ec:9c:
fe:eb:c7:5d:e5:df:44:d0:3f:e1:48:a8:45:38:22:61:2b:92:
34:22:75:a3:34:d1:b5:db:7c:85:a2:2c:31:fb:ec:48:f8:43:
48:b4:23:cc:04:56:70:fc:8f:32:87:ff:e6:4c:a6:d0:0e:6b:
35:ad:8e:04:ae:c5:83:90:32:00:af:3a:bf:66:92:c4:5c:05:
3e:a5:c7:ad:6f:15:21:60:38:49:93:2a:24:76:50:19:17:37:
56:3d:e0:40:f9:65:b4:f3:96:3e:b3:9a:a8:6b:c6:9b:49:10:
02:a7:32:63:dc:64:a6:8f:6b:be:70:8e:d6:d5:60:8c:0a:65:
91:4e:ba:f4:9b:60:6b:2a:12:6d:a6:cd:11:37:3f:59:e3:c5:
27:d6:04:57:42:4e:2e:0a:72:27:2c:de:23:ca:fc:c0:e5:db:
e6:b0:48:0d:a8:c4:2b:0f:8d:ce:19:1e:01:d1:55:2d:a6:c4:
ad:5f:97:0d:58:16:fa:cf:e8:b3:fc:c5:50:22:45:21:0a:2a:
18:c4:a8:69:9b:d6:3a:de:69:52:d4:ac:1c:90:fa:49:a6:9b:
60:4f:1b:12:21:63:34:71:58:b7:9d:fb:91:29:6e:f1:f3:4f:
9e:b4:06:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:11:16 2026 by rpki-client