Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
File: UMXKBp6qqux3WtCk6jtHYFtyiiU.mft (raw, json)
Hash identifier: ZkmcCYXGpdNJYWV87CQdzy4+LKF7+oFjuZYX8ohHkTo=
Subject key identifier: 95:57:95:18:01:62:23:77:81:AB:AD:D6:16:EC:00:B3:31:A6:AD:E8
Authority key identifier: 50:C5:CA:06:9E:AA:AA:EC:77:5A:D0:A4:EA:3B:47:60:5B:72:8A:25
Certificate issuer: /CN=50c5ca069eaaaaec775ad0a4ea3b47605b728a25
Certificate serial: 01A089B12B49DC7BCD77781DEEF61B2D675A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
Manifest number: 1999
Signing time: Thu 10 Sep 2026 05:01:24 +0000
Manifest this update: Thu 10 Sep 2026 05:01:24 +0000
Manifest next update: Fri 11 Sep 2026 05:01:24 +0000
Files and hashes: 1: KxBvAyccf-9KNR7XcfENvV7BG2A.roa (hash: XbvB1YWfNONmSqL2//OKA3cnfbk/wWIRkQaPtz1eP/Y=)
2: UMXKBp6qqux3WtCk6jtHYFtyiiU.crl (hash: fdhMN1NMntsyZ5SXCgKUYb3SCYKHaJfYMLWNsyoDx2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:b1:2b:49:dc:7b:cd:77:78:1d:ee:f6:1b:2d:67:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c5ca069eaaaaec775ad0a4ea3b47605b728a25
Validity
Not Before: Sep 10 05:01:24 2026 GMT
Not After : Sep 11 05:01:24 2026 GMT
Subject: CN=955795180162237781abadd616ec00b331a6ade8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:12:fb:01:4a:14:a7:d4:14:e3:84:1e:64:c9:
a2:5d:18:f2:7d:ab:e7:25:2e:97:5b:8f:e6:f9:2f:
b1:c5:9d:4f:7f:f9:91:0e:4e:73:64:32:0c:cd:5d:
7a:35:5d:0c:b3:82:de:3f:69:89:eb:cd:f7:80:4f:
00:90:dc:4e:2f:f4:33:08:47:f5:eb:65:d5:77:44:
54:76:a1:26:e1:dd:00:8d:29:5d:84:bc:f3:79:92:
b0:13:0e:98:eb:b6:c8:19:9e:0c:3c:49:91:f2:df:
2d:ee:4b:4e:e4:63:d0:3b:35:fc:ba:45:8c:4f:db:
ea:80:1f:92:f6:f1:c4:4f:4a:f7:e1:cc:a9:89:f8:
a1:98:4f:cc:53:cf:23:da:dc:ec:92:76:e3:5b:80:
72:33:57:c7:f5:27:68:eb:2a:90:20:cb:66:24:1d:
dc:9b:de:7d:f9:6f:20:c6:d2:72:09:44:54:91:af:
ec:63:8b:e1:52:58:c3:c5:0b:fd:2b:0c:6c:4a:fb:
77:20:a1:ce:6b:66:76:86:4e:f4:cb:8a:09:df:4c:
38:35:c0:29:86:f4:aa:6d:de:cb:ed:f4:31:ff:b8:
a6:8f:17:88:fa:86:28:f2:49:c7:9c:68:0f:73:75:
46:0c:c0:da:c8:f3:b9:23:fc:95:d7:d2:70:73:e6:
27:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:57:95:18:01:62:23:77:81:AB:AD:D6:16:EC:00:B3:31:A6:AD:E8
X509v3 Authority Key Identifier:
keyid:50:C5:CA:06:9E:AA:AA:EC:77:5A:D0:A4:EA:3B:47:60:5B:72:8A:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:63:65:b6:5f:a3:2b:b6:4c:07:06:e4:eb:31:09:86:b7:70:
d9:bf:ce:d1:6a:a7:fc:63:95:ad:ff:c0:f6:2f:79:89:04:19:
20:5c:f8:00:b0:2c:a3:14:2a:3c:4e:d2:29:17:26:6e:7d:1a:
2b:98:05:82:c5:b4:b4:f0:68:42:c6:31:47:2e:1b:05:38:ab:
43:06:3e:97:a5:a5:f9:bd:4a:21:c1:06:99:d9:37:c3:7e:15:
8e:08:5e:4a:e8:c5:7d:be:e4:4e:07:32:1f:f5:b9:2a:78:48:
ec:66:3d:35:b2:6c:91:0a:78:cd:ad:8c:68:8b:24:d6:7d:7d:
3e:6c:47:d2:ab:1a:d8:ad:72:f8:f0:0f:9d:2d:e7:1e:f4:7c:
7b:5a:77:b7:00:39:db:79:d5:e9:34:91:ed:1b:be:b3:be:99:
01:7f:31:77:be:33:d9:31:f8:1c:4f:32:fe:71:c0:c9:67:0a:
a2:f2:77:52:fa:9d:a0:c0:03:f8:d7:81:0b:1e:7b:78:39:53:
5a:45:db:c4:d8:d3:f9:ed:9c:40:a7:51:a6:a1:dc:d8:a9:1f:
40:44:8a:12:2c:1a:83:c9:8c:ff:af:60:50:aa:65:3a:2a:2c:
cc:7b:c7:14:5e:7b:e6:43:5a:ed:4e:37:fb:7e:e7:6b:ac:72:
72:60:98:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCJsStJ3HvNd3gd7vYbLWdaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYzVjYTA2OWVhYWFhZWM3NzVhZDBhNGVhM2I0NzYwNWI3
MjhhMjUwHhcNMjYwOTEwMDUwMTI0WhcNMjYwOTExMDUwMTI0WjAzMTEwLwYDVQQD
Eyg5NTU3OTUxODAxNjIyMzc3ODFhYmFkZDYxNmVjMDBiMzMxYTZhZGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRL7AUoUp9QU44QeZMmiXRjyfavn
JS6XW4/m+S+xxZ1Pf/mRDk5zZDIMzV16NV0Ms4LeP2mJ6833gE8AkNxOL/QzCEf1
62XVd0RUdqEm4d0AjSldhLzzeZKwEw6Y67bIGZ4MPEmR8t8t7ktO5GPQOzX8ukWM
T9vqgB+S9vHET0r34cypifihmE/MU88j2tzsknbjW4ByM1fH9Sdo6yqQIMtmJB3c
m959+W8gxtJyCURUka/sY4vhUljDxQv9KwxsSvt3IKHOa2Z2hk70y4oJ30w4NcAp
hvSqbd7L7fQx/7imjxeI+oYo8knHnGgPc3VGDMDayPO5I/yV19Jwc+YnUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVXlRgBYiN3gaut1hbsALMxpq3oMB8GA1UdIwQY
MBaAFFDFygaeqqrsd1rQpOo7R2BbcoolMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU1YS0JwNnFxdXgzV3RDazZqdEhZRnR5aWlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9jZGU3OTAtNGUzYi00YTRlLWI4NGMt
NTU2NTA2NzAyYTU3LzEvVU1YS0JwNnFxdXgzV3RDazZqdEhZRnR5aWlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9jZGU3OTAtNGUzYi00YTRlLWI4NGMtNTU2NTA2NzAyYTU3
LzEvVU1YS0JwNnFxdXgzV3RDazZqdEhZRnR5aWlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmWNltl+j
K7ZMBwbk6zEJhrdw2b/O0Wqn/GOVrf/A9i95iQQZIFz4ALAsoxQqPE7SKRcmbn0a
K5gFgsW0tPBoQsYxRy4bBTirQwY+l6Wl+b1KIcEGmdk3w34VjgheSujFfb7kTgcy
H/W5KnhI7GY9NbJskQp4za2MaIsk1n19PmxH0qsa2K1y+PAPnS3nHvR8e1p3twA5
23nV6TSR7Ru+s76ZAX8xd74z2TH4HE8y/nHAyWcKovJ3UvqdoMAD+NeBCx57eDlT
WkXbxNjT+e2cQKdRpqHc2KkfQESKEiwag8mM/69gUKplOioszHvHFF575kNa7U43
+37na6xycmCYQA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 08:45:43 2026 by rpki-client