Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.mft
File: uMxZ2ZSshg5bJeCVddmflDcOkcs.mft (raw, json)
Hash identifier: DjrHzliPeM3fSK4+Q+EJi5gvf1B/GTBV+GaiE6jO+Hc=
Subject key identifier: C0:D4:A0:19:8B:77:EE:BD:65:63:6C:F8:F3:FF:81:08:D5:4E:3B:11
Authority key identifier: B8:CC:59:D9:94:AC:86:0E:5B:25:E0:95:75:D9:9F:94:37:0E:91:CB
Certificate issuer: /CN=b8cc59d994ac860e5b25e09575d99f94370e91cb
Certificate serial: 019EB80E71A97D490BAEEA9A6B15306CAB9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMxZ2ZSshg5bJeCVddmflDcOkcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.mft
Manifest number: 0CFF
Signing time: Thu 11 Jun 2026 19:00:14 +0000
Manifest this update: Thu 11 Jun 2026 19:00:14 +0000
Manifest next update: Fri 12 Jun 2026 19:00:14 +0000
Files and hashes: 1: msj-QCorJnXKr4kvj6gncmTacwY.roa (hash: 9SrsATf3LBoprWf5FN/vM5cjeV8i1QEYJtsGy50JnIY=)
2: uMxZ2ZSshg5bJeCVddmflDcOkcs.crl (hash: ake8eSX0SYyIBC5qSTahJUoAz3Gje5P6f//FKaytA8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMxZ2ZSshg5bJeCVddmflDcOkcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0e:71:a9:7d:49:0b:ae:ea:9a:6b:15:30:6c:ab:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8cc59d994ac860e5b25e09575d99f94370e91cb
Validity
Not Before: Jun 11 19:00:14 2026 GMT
Not After : Jun 12 19:00:14 2026 GMT
Subject: CN=c0d4a0198b77eebd65636cf8f3ff8108d54e3b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bb:6c:b2:cf:0d:56:41:03:ad:11:39:73:95:
88:c2:24:99:28:0f:e5:ec:07:77:e4:fa:4a:a4:cf:
60:6e:64:fd:ee:17:cb:43:8b:f4:49:8e:c2:00:22:
e9:c4:28:f5:66:3a:9e:05:20:ef:34:70:52:bd:31:
36:97:07:2c:74:cb:05:fa:e6:0e:0a:9d:5d:ce:db:
c7:22:da:a0:8a:25:56:c5:b8:5d:7e:c9:aa:f0:b9:
c3:f0:ae:7c:ae:4c:70:b8:4f:70:cd:46:86:ac:a4:
51:19:b0:9f:76:45:73:83:7d:e3:5e:04:97:97:1d:
bc:42:92:28:48:13:39:19:a1:a8:c7:0e:b2:a4:c7:
0b:d9:c9:39:4e:ab:bd:51:1e:0c:75:ae:59:ea:f1:
f5:a0:99:be:86:e1:f0:cb:97:b9:52:f9:37:ac:a6:
d6:60:2f:c2:99:1d:86:5e:50:e3:ef:0b:86:92:0e:
fa:73:26:b9:95:d1:f4:2b:7d:6a:f2:1f:f6:ee:b6:
e6:2c:fa:c2:90:a6:59:34:85:fc:c6:70:2f:fc:a2:
8c:70:f8:90:7f:1e:ca:9e:40:f1:6f:9f:9a:19:43:
ab:a8:c2:30:d6:f4:fd:5f:4f:30:d2:7d:a5:07:9b:
f1:4e:60:24:49:5e:12:c0:ed:fa:0f:a5:bd:15:56:
50:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D4:A0:19:8B:77:EE:BD:65:63:6C:F8:F3:FF:81:08:D5:4E:3B:11
X509v3 Authority Key Identifier:
keyid:B8:CC:59:D9:94:AC:86:0E:5B:25:E0:95:75:D9:9F:94:37:0E:91:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMxZ2ZSshg5bJeCVddmflDcOkcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:56:92:ab:bb:92:66:4e:9e:1d:01:bb:80:df:f2:44:61:4d:
22:93:90:e9:37:23:46:d4:ba:15:04:11:b3:be:e8:5d:e7:d3:
03:be:88:d2:7e:eb:f2:cd:34:8c:fd:e2:b7:9b:8d:92:6b:ca:
55:53:fe:0b:72:ca:d5:b9:e8:71:69:66:34:35:42:2e:39:ee:
99:dc:5e:78:68:5e:44:da:64:64:be:8d:81:6d:d1:17:0c:2e:
7d:eb:32:3f:9a:d5:fd:dc:43:8e:fa:fd:0b:ad:a7:c9:22:52:
8a:3c:66:64:54:f3:23:2d:40:13:30:24:d4:31:06:20:ea:33:
49:d3:a1:a7:b5:d0:52:d3:ca:df:78:4b:f7:b5:88:7b:43:1d:
63:d9:f4:e4:00:07:eb:22:da:a3:b0:ed:d3:d1:70:1a:44:25:
c0:45:43:a4:4b:9c:69:d1:f6:c1:bd:7d:a9:b4:db:e8:f6:72:
a5:17:9d:1d:bc:5a:c0:ac:d9:4b:07:32:e2:39:6c:ed:9d:32:
8f:aa:b8:a1:cf:27:6c:53:5d:8d:41:8f:00:ef:56:09:62:da:
f9:77:90:fd:65:da:14:79:b5:e4:40:4a:7d:c6:32:96:19:4d:
21:41:10:d9:1d:2e:88:0d:e2:59:e4:c8:05:a0:1d:46:5a:3d:
5a:59:f6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:17:09 2026 by rpki-client