Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft
File: umCk2HTZYByBQsNS-AxWpDJ2zUc.mft (raw, json)
Hash identifier: f0WWRO0PnP5fLISqa1jVhmcWacEUTDChDXBWIiePQOQ=
Subject key identifier: CB:3E:82:B1:C4:86:A4:79:FA:EA:EA:72:1F:7E:07:88:35:9D:00:5C
Authority key identifier: BA:60:A4:D8:74:D9:60:1C:81:42:C3:52:F8:0C:56:A4:32:76:CD:47
Certificate issuer: /CN=ba60a4d874d9601c8142c352f80c56a43276cd47
Certificate serial: 01A170C9F6B23894FB079659E5C7E99440AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft
Manifest number: 1ACF
Signing time: Sun 25 Oct 2026 02:00:46 +0000
Manifest this update: Sun 25 Oct 2026 02:00:46 +0000
Manifest next update: Mon 26 Oct 2026 02:00:46 +0000
Files and hashes: 1: NH6Kxbw3owXkcn71mMgtvz0Y0hk.roa (hash: 9K/OKUGyyv+EkjvXSN956FdqTIF+oPfgyQZUcSZZM2w=)
2: WoQJ2osYoFuYoWIyHvgo9Cec_t4.roa (hash: wB9N0PcZkOcrh3O/SmhX92RwWwOtgRdO/TEPN7XWM+M=)
3: _Tm2JxUvXUUwS72Udu0m-0BuZ-0.roa (hash: 1aBi4zXI+QFcwyGnxOISG2CE4CmnOOCxmThNKagGEBI=)
4: f52WTL9GGOhNAMMc7rBjnwIaWTc.roa (hash: 5tjbY4JIpfmV2gm3hhjE23Rvphjz0c3k2ZjG+/otkGI=)
5: p32AqgICpWGV5IUX6fmyer79QMY.roa (hash: Qp7WxCFuaih23zF/G1VCAMMPnZC5xDFs0GhMuipzmtk=)
6: qVb5PhcWzp2jSjoiwq3ZVNNlrxY.roa (hash: uqKfbYVlW5hlUaluGy9iii/BrL+kIfu3455zS2T6GtM=)
7: sSAJGD3q9WywlcJzJJU8b9wkNnI.roa (hash: GScXqHaLC/DvIVFv4LbVlGQC4NvQYCtdCncZDyaINVM=)
8: umCk2HTZYByBQsNS-AxWpDJ2zUc.crl (hash: UN3HazTgtousZMtkyVHczUWSo/02fqq2iKAAlE7HCAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:70:c9:f6:b2:38:94:fb:07:96:59:e5:c7:e9:94:40:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba60a4d874d9601c8142c352f80c56a43276cd47
Validity
Not Before: Oct 25 02:00:46 2026 GMT
Not After : Oct 26 02:00:46 2026 GMT
Subject: CN=cb3e82b1c486a479faeaea721f7e0788359d005c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:68:70:08:8c:7e:93:f7:b2:84:07:bf:ae:b0:
4c:2e:bb:9f:7c:e4:de:38:8b:8d:75:7b:c8:d6:93:
ef:9e:ee:f5:32:a5:18:06:bf:b0:10:72:5c:64:51:
3c:ff:8b:19:cb:72:a8:c2:8e:e2:e3:b5:62:1e:92:
d3:50:49:88:bc:05:26:65:19:14:8d:78:53:77:2d:
f0:84:56:90:0b:ed:e2:5d:34:00:f1:0d:3f:ff:be:
28:18:c7:a9:d4:84:d1:94:a6:3c:f3:9e:1a:ff:61:
65:a9:f7:be:d5:c4:16:5d:cf:5b:d2:bc:15:41:86:
d0:a8:2d:20:1c:51:20:2d:70:20:40:ae:ed:2c:dc:
7a:cd:6b:57:50:5e:ff:5f:3a:ee:a8:08:06:c8:2b:
b1:d6:61:e5:da:89:53:3a:2c:13:69:5c:56:1a:f0:
51:62:2d:bb:52:9c:60:b4:1e:cf:47:4d:fc:a1:ef:
bc:c7:8b:7d:0a:8a:ca:61:8a:8a:cb:94:c9:0b:70:
b9:21:55:b5:72:ce:cb:53:ba:64:1f:3a:e2:29:2a:
dc:cb:50:4d:af:9d:63:a4:0a:f1:04:fa:88:44:0f:
74:bd:9e:ba:41:cb:51:4b:22:70:f5:e5:60:64:32:
f1:e1:9b:e1:df:92:32:62:1b:fb:15:6c:03:98:47:
97:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3E:82:B1:C4:86:A4:79:FA:EA:EA:72:1F:7E:07:88:35:9D:00:5C
X509v3 Authority Key Identifier:
keyid:BA:60:A4:D8:74:D9:60:1C:81:42:C3:52:F8:0C:56:A4:32:76:CD:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:24:2a:82:8d:6d:a3:f6:4d:1a:db:48:0b:44:c3:35:cd:75:
60:aa:7b:b8:d7:0f:38:0a:58:1b:ef:35:1e:40:a2:57:89:39:
18:25:45:49:09:0d:51:45:fb:7d:51:2c:4c:3e:7c:76:22:35:
55:fe:3e:bc:03:4c:f4:85:98:4f:be:0f:ca:77:0f:db:25:40:
7f:43:98:0e:71:df:9a:67:56:0a:f3:2c:ab:89:93:27:9d:ff:
a9:02:87:39:12:87:5d:45:7d:29:ad:52:13:8b:a3:27:6c:3f:
df:11:e2:24:b2:ea:03:4f:7b:fe:c1:92:99:e1:9f:6d:d0:7e:
fa:a6:c8:90:c6:73:98:61:36:ac:7b:44:2c:3c:41:5f:fb:4e:
10:b2:ea:e7:d1:12:4f:97:7d:78:9e:7c:e2:88:f6:12:61:f5:
b2:bf:6f:a6:d8:dd:07:f2:8c:87:e0:99:05:73:7c:85:f9:b6:
1b:47:6a:ca:85:ba:cd:2a:f9:f1:19:69:fb:5c:f0:bb:3f:17:
c9:93:61:85:b6:1e:c7:cf:2f:a9:da:dc:31:54:37:eb:53:cf:
97:54:9a:af:00:0e:3f:dc:78:38:8f:6c:0c:c8:de:96:bc:06:
b8:cb:29:ab:9d:71:1d:e6:72:aa:09:39:6b:94:f2:c5:71:32:
88:de:e8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:06:43 2026 by rpki-client