Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
File: UMXKBp6qqux3WtCk6jtHYFtyiiU.mft (raw, json)
Hash identifier: Z+DNHbJ4lNvPeHsejVh12m8V1Fizkt7AV3K/9RGzSXM=
Subject key identifier: FC:C3:A1:CF:DF:8F:28:D2:2C:10:06:CA:E2:CA:5B:63:2A:DD:09:32
Authority key identifier: 50:C5:CA:06:9E:AA:AA:EC:77:5A:D0:A4:EA:3B:47:60:5B:72:8A:25
Certificate issuer: /CN=50c5ca069eaaaaec775ad0a4ea3b47605b728a25
Certificate serial: 01A17D05A4FB171A3E3BB45C835D91193B08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
Manifest number: 1A17
Signing time: Tue 27 Oct 2026 11:01:24 +0000
Manifest this update: Tue 27 Oct 2026 11:01:24 +0000
Manifest next update: Wed 28 Oct 2026 11:01:24 +0000
Files and hashes: 1: KxBvAyccf-9KNR7XcfENvV7BG2A.roa (hash: XbvB1YWfNONmSqL2//OKA3cnfbk/wWIRkQaPtz1eP/Y=)
2: UMXKBp6qqux3WtCk6jtHYFtyiiU.crl (hash: VWp+IknD7WMZVvosftk6rEcO+50pz74KAv9pGmkOve0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:05:a4:fb:17:1a:3e:3b:b4:5c:83:5d:91:19:3b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c5ca069eaaaaec775ad0a4ea3b47605b728a25
Validity
Not Before: Oct 27 11:01:24 2026 GMT
Not After : Oct 28 11:01:24 2026 GMT
Subject: CN=fcc3a1cfdf8f28d22c1006cae2ca5b632add0932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:46:1b:05:0a:9e:72:2b:77:e5:63:1e:48:1f:
e7:43:d7:27:41:0b:39:3c:fb:f9:ff:61:50:6c:9c:
11:a5:62:d7:21:23:67:e7:37:88:83:2c:69:36:0d:
9a:a5:98:b2:1f:9e:2b:21:91:f6:80:63:9a:17:91:
12:a3:f8:ed:c3:cb:78:55:90:2b:fe:67:11:71:74:
ce:72:2f:fd:95:04:c8:af:f6:a6:7f:82:4d:06:d6:
e3:ed:26:c7:f4:dd:28:6b:88:a1:e7:c5:13:3c:71:
b2:5e:e1:0e:3a:fc:64:21:49:bf:3c:d8:c5:3b:cf:
b4:4a:b2:f4:3f:90:7b:b5:f4:5f:a1:6f:96:fe:11:
3f:e7:7e:92:fc:9f:5d:18:0a:80:a9:8a:7e:a1:39:
a5:e4:7c:3d:d0:7e:e0:5c:14:98:30:db:47:6e:52:
3c:f1:b0:91:90:e6:50:05:2f:18:88:0a:2a:0b:ff:
e9:dc:ff:61:83:98:fa:2c:96:c8:6b:68:36:a1:b3:
24:68:49:ed:58:ce:a8:ca:31:a0:f0:22:e5:ed:bf:
2b:40:2f:bf:da:11:db:f1:0e:b4:30:5e:06:cf:26:
aa:e2:ad:ce:9f:5c:22:7d:a5:0d:be:aa:4c:81:44:
d5:53:26:47:10:9e:0b:8a:84:af:55:52:18:a2:cc:
86:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C3:A1:CF:DF:8F:28:D2:2C:10:06:CA:E2:CA:5B:63:2A:DD:09:32
X509v3 Authority Key Identifier:
keyid:50:C5:CA:06:9E:AA:AA:EC:77:5A:D0:A4:EA:3B:47:60:5B:72:8A:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:cb:7d:8d:45:bb:04:d9:73:f7:d2:a4:8f:fc:a6:03:80:bc:
b8:82:86:05:78:24:99:a1:cb:25:d1:15:56:d4:6e:ec:85:73:
65:c7:5a:cf:5d:e4:01:3d:96:af:1c:2d:53:90:4d:13:fb:b6:
89:fc:cc:2e:6b:e9:eb:a2:98:ed:85:15:45:9d:cd:91:c0:a7:
ba:40:55:ef:0f:df:2e:7c:f6:ce:b8:9e:6a:56:67:2e:b5:13:
6a:35:24:bd:dc:a8:9b:cc:4b:ae:8d:e2:b6:ad:ca:8a:a1:d6:
6d:02:df:eb:66:e8:9a:38:40:cf:ec:f7:ad:b2:54:f6:dd:b5:
d4:f8:48:d7:a7:48:d1:7d:35:a5:32:9f:59:e4:a3:d7:7b:16:
74:c1:88:8e:a3:48:f7:ab:5f:e8:b9:20:34:4b:0b:84:27:0f:
c0:7e:58:aa:a0:23:a0:21:8a:30:7a:4f:e7:bb:2d:ed:8d:17:
d7:1a:8a:20:80:03:3b:54:38:d8:53:86:ee:1b:dc:2b:95:92:
4b:97:d5:a5:2d:db:de:a0:3e:df:fa:2c:c2:9b:d3:8d:a9:41:
2e:c7:97:1b:b9:61:72:62:93:20:cb:6f:71:dc:f1:0b:56:e5:
4d:e7:b5:c4:03:1f:fd:a2:67:b2:22:8e:69:99:e6:4c:f3:51:
71:8c:8c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:40:22 2026 by rpki-client