Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
File: UMXKBp6qqux3WtCk6jtHYFtyiiU.mft (raw, json)
Hash identifier: FjBQDel4w4nXgJN8izcuAeDjEfKhLT4hIuHmjE58an8=
Subject key identifier: CC:03:F4:1C:9A:70:7B:DB:01:FF:1C:20:B7:44:11:5C:1B:44:B3:6F
Authority key identifier: 50:C5:CA:06:9E:AA:AA:EC:77:5A:D0:A4:EA:3B:47:60:5B:72:8A:25
Certificate issuer: /CN=50c5ca069eaaaaec775ad0a4ea3b47605b728a25
Certificate serial: 01A17B16AA0AE824C71B2B68E1364BBDEB70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
Manifest number: 1A16
Signing time: Tue 27 Oct 2026 02:00:44 +0000
Manifest this update: Tue 27 Oct 2026 02:00:44 +0000
Manifest next update: Wed 28 Oct 2026 02:00:44 +0000
Files and hashes: 1: KxBvAyccf-9KNR7XcfENvV7BG2A.roa (hash: XbvB1YWfNONmSqL2//OKA3cnfbk/wWIRkQaPtz1eP/Y=)
2: UMXKBp6qqux3WtCk6jtHYFtyiiU.crl (hash: +YQiRC5O8Vyc9HHm4qwC2thHOUw4zzuAxHunoVFBzS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:16:aa:0a:e8:24:c7:1b:2b:68:e1:36:4b:bd:eb:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c5ca069eaaaaec775ad0a4ea3b47605b728a25
Validity
Not Before: Oct 27 02:00:44 2026 GMT
Not After : Oct 28 02:00:44 2026 GMT
Subject: CN=cc03f41c9a707bdb01ff1c20b744115c1b44b36f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e1:a3:32:6a:13:15:5d:87:66:7d:e9:ca:a1:
56:49:2d:33:b6:eb:6b:6e:f3:54:54:69:4f:5f:c3:
5f:58:e4:82:05:a8:bf:94:d4:cd:05:f5:5e:01:ea:
c0:be:5e:6a:c6:2d:81:a0:44:b6:9d:65:a0:df:b6:
c2:90:3c:1e:28:dd:66:8e:79:13:11:a9:0c:35:f7:
28:2c:54:c4:1a:9b:55:1d:77:af:0b:70:32:d4:d5:
90:57:c2:5f:dd:28:3f:b3:b2:da:cd:e9:a8:fc:41:
81:31:60:22:e6:73:2b:f5:98:1b:b8:f3:c0:49:34:
8e:de:57:89:12:65:af:02:96:a9:7f:f1:45:36:be:
ff:a7:96:85:38:7a:4a:e7:97:07:3c:f4:78:cc:63:
dd:ae:5b:b6:f3:c4:3a:14:3a:4e:63:07:9a:15:2b:
7e:4f:61:52:70:79:96:d0:67:66:ea:50:47:bb:cd:
bb:6a:87:1b:ba:85:fa:f4:7c:9b:0e:0d:30:e9:29:
54:1d:3a:73:59:71:74:c1:96:4a:d5:2b:33:f8:9c:
5f:7c:ae:83:e2:95:97:ed:84:9f:83:b7:b2:ae:cc:
23:c3:f0:5a:90:b7:93:90:42:3a:6a:03:27:8a:54:
a8:78:db:28:83:71:8c:ea:a3:a1:c2:52:8d:f3:d8:
61:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:03:F4:1C:9A:70:7B:DB:01:FF:1C:20:B7:44:11:5C:1B:44:B3:6F
X509v3 Authority Key Identifier:
keyid:50:C5:CA:06:9E:AA:AA:EC:77:5A:D0:A4:EA:3B:47:60:5B:72:8A:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:f3:71:cb:4b:99:a3:16:f6:f7:c9:44:fe:34:92:e2:fb:01:
7f:d4:a1:72:f4:41:09:24:3b:42:17:13:ce:ee:0c:cb:37:72:
1e:ec:09:8b:d0:26:35:55:9e:fb:05:28:c8:31:ab:ef:dd:8b:
95:4c:c1:1d:16:14:bb:bc:cd:ad:a9:37:51:08:76:32:93:52:
73:29:2d:a7:54:fc:ae:9b:36:98:3d:76:21:3b:9e:40:81:ba:
42:30:3a:37:8e:f1:86:94:ba:14:f1:64:ae:96:ab:56:c8:ce:
9e:cc:11:bf:58:17:c5:93:4a:4c:0e:05:83:2d:42:4b:2c:61:
46:65:f5:e9:9c:be:7c:16:69:22:5e:d2:80:b3:07:29:11:21:
44:bd:15:82:1d:bf:49:b1:c7:c6:19:38:0c:81:47:7c:85:03:
4e:96:06:5c:a6:94:91:4a:c5:84:c5:16:2d:62:66:23:e5:98:
53:0f:d3:cd:1f:a9:9a:5f:e5:f0:3d:49:58:4e:1e:f2:e6:72:
ab:cd:56:40:4c:b8:67:b3:8f:d1:ae:0b:e7:b4:1d:9e:c0:38:
00:7a:f3:ae:47:a5:93:89:64:13:48:f3:6e:d9:be:3a:fd:ae:
81:2b:7d:0f:77:77:fd:e4:83:4e:39:e6:c5:dc:d6:5a:06:ea:
76:68:bc:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:44:34 2026 by rpki-client