Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft
File: UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft (raw, json)
Hash identifier: EnSqxwTvXuuZmwEWA0SwMqMngVrKz49Jx6D3jH/DagE=
Subject key identifier: CB:5E:60:4D:05:A3:96:F6:A2:98:D3:08:D8:62:EF:34:17:87:D8:F8
Authority key identifier: 50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
Certificate issuer: /CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Certificate serial: 019D38D398AD0BE45CDF8804BBD7E687CD70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft
Manifest number: 18AE
Signing time: Sun 29 Mar 2026 09:01:24 +0000
Manifest this update: Sun 29 Mar 2026 09:01:24 +0000
Manifest next update: Mon 30 Mar 2026 09:01:24 +0000
Files and hashes: 1: 1TMkY76y_V6mPJpsV1naKX6HlYE.roa (hash: 7g6t4h4bRD3CQ+x9cEpMvRx7n8nsWpYU3/XxpEQtDK8=)
2: 4Ffdv4KtJfFvxZLjqWGkVv74nAQ.roa (hash: sdhLpSw3Nqp2sJtnjs2/xgyKEd+7ky/DZNBPyzQg5go=)
3: 53B8FRI7nRRNBbxhMzXE9n-mCys.roa (hash: wLJkzwgPSg2ecFqsLih9Nw7Px9kiK752n9vZL4ROi5o=)
4: Iz81YeF4Yaopqn4t0LL3OA1IuQs.roa (hash: U7q18MGaToAHycayT/bTwS2UUHwaN8gc3zIyXx5SQn4=)
5: UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl (hash: 8LHv9B5MW0lZFTfaU5LoKB3wWYZk9y8jJTAaDGx7nl0=)
6: VQiElCspYygojHZx1e_d787gq8M.roa (hash: cYsGyxOGTSDbkK7Bo8Dcbyj6xyiZ7rpceD54Wi9Pnvo=)
7: XonmnFu_hl5fLd1NFTkRdlszSzs.roa (hash: nis1JSWNkVlYV4JdLmei0R+V1a6IX6+JXGHy2zIU2ZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:98:ad:0b:e4:5c:df:88:04:bb:d7:e6:87:cd:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Validity
Not Before: Mar 29 09:01:24 2026 GMT
Not After : Mar 30 09:01:24 2026 GMT
Subject: CN=cb5e604d05a396f6a298d308d862ef341787d8f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:89:5f:64:12:1e:0e:0d:15:40:af:66:14:63:
4d:95:68:36:04:0d:98:1f:5a:78:f5:78:90:b2:e9:
35:a3:83:d1:3d:4f:10:74:f7:07:0b:8b:97:02:c8:
34:ef:cc:03:0e:80:ff:7c:2b:33:cf:10:08:25:a6:
42:e8:ed:f7:90:fb:73:17:44:31:7c:ad:d3:4b:af:
1d:8a:c7:18:83:77:69:6a:0c:36:bc:b0:81:cf:04:
36:96:f2:f4:32:47:23:2f:3d:ee:d2:35:b7:95:38:
57:35:79:d9:49:2e:96:63:71:db:d2:3c:83:49:16:
a1:59:e0:33:18:ce:13:18:80:24:2a:a5:75:bb:1f:
ed:32:5b:ec:08:a0:da:fa:2c:3b:3f:90:30:5e:2b:
41:d0:e9:3c:de:f4:58:8d:79:bb:54:32:62:e8:90:
9c:cd:ac:71:6a:28:3e:41:a6:01:04:64:e2:db:df:
9b:23:ac:f9:3c:3c:c2:24:ca:cd:14:29:4c:6a:49:
65:be:f9:bc:f7:9e:75:78:1e:ef:39:53:46:1c:02:
90:3b:92:8f:52:22:f2:b1:d0:32:96:ce:b3:64:5f:
af:cb:b1:9c:2e:05:c6:49:41:c6:2e:e7:ef:97:0c:
9c:e8:88:d8:59:31:03:bc:ad:bd:1d:65:7b:97:d5:
b6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5E:60:4D:05:A3:96:F6:A2:98:D3:08:D8:62:EF:34:17:87:D8:F8
X509v3 Authority Key Identifier:
keyid:50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:fd:5d:96:e6:86:b9:71:89:37:db:19:b6:81:b3:ee:67:ae:
88:74:08:45:20:12:d5:c2:b1:0c:b0:28:22:0a:c0:ac:37:cf:
30:dd:d4:b8:f4:b3:85:8b:45:76:1a:7a:6f:2c:e5:0a:cd:81:
7f:98:2b:ae:4e:3b:dd:01:70:f9:59:f3:0b:fb:9c:3d:99:ae:
aa:65:77:34:a9:ef:b4:fb:52:57:39:69:f1:e0:29:ec:b6:57:
bf:7b:77:64:98:e3:36:a9:dd:0b:6c:1e:14:da:2a:82:2e:7d:
86:ff:3c:45:5c:4c:cb:a3:95:a6:0e:9d:a2:fa:2f:04:a2:3a:
14:79:10:fd:60:39:01:57:bc:5a:98:07:3d:f3:b0:a4:e0:f5:
f2:26:04:43:7e:46:68:97:a4:76:0a:f6:1d:da:bc:5c:01:c0:
b9:16:dd:1e:e2:cf:03:97:59:e2:d3:36:10:9e:50:f9:bf:f8:
02:eb:a3:bb:ef:86:95:c3:e2:3a:50:cc:23:95:30:64:e5:d3:
bb:dc:7e:b3:5b:cc:60:19:cf:19:1f:e3:b9:d3:b7:1c:92:a8:
b5:a2:2f:c1:61:e3:89:b4:72:48:95:fb:c6:37:8e:ff:cb:56:
13:ee:48:bf:64:ff:b1:c2:31:9d:5b:43:a6:2c:bb:82:53:e3:
d7:df:d6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:30 2026 by rpki-client