Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft
File: umCk2HTZYByBQsNS-AxWpDJ2zUc.mft (raw, json)
Hash identifier: jzxHWeiS2jwDVIKh/nMATWPcLEVxIR+JBy0Cg/D7w4g=
Subject key identifier: 80:E9:42:44:92:A3:25:7B:7A:4C:11:8A:8B:84:BA:67:04:AE:9F:65
Authority key identifier: BA:60:A4:D8:74:D9:60:1C:81:42:C3:52:F8:0C:56:A4:32:76:CD:47
Certificate issuer: /CN=ba60a4d874d9601c8142c352f80c56a43276cd47
Certificate serial: 019CB95DE31BD1EDA5C782606E5EF79ADAE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft
Manifest number: 185D
Signing time: Wed 04 Mar 2026 15:01:03 +0000
Manifest this update: Wed 04 Mar 2026 15:01:03 +0000
Manifest next update: Thu 05 Mar 2026 15:01:03 +0000
Files and hashes: 1: WoQJ2osYoFuYoWIyHvgo9Cec_t4.roa (hash: wB9N0PcZkOcrh3O/SmhX92RwWwOtgRdO/TEPN7XWM+M=)
2: _Tm2JxUvXUUwS72Udu0m-0BuZ-0.roa (hash: 1aBi4zXI+QFcwyGnxOISG2CE4CmnOOCxmThNKagGEBI=)
3: f52WTL9GGOhNAMMc7rBjnwIaWTc.roa (hash: 5tjbY4JIpfmV2gm3hhjE23Rvphjz0c3k2ZjG+/otkGI=)
4: p32AqgICpWGV5IUX6fmyer79QMY.roa (hash: Qp7WxCFuaih23zF/G1VCAMMPnZC5xDFs0GhMuipzmtk=)
5: qVb5PhcWzp2jSjoiwq3ZVNNlrxY.roa (hash: uqKfbYVlW5hlUaluGy9iii/BrL+kIfu3455zS2T6GtM=)
6: sSAJGD3q9WywlcJzJJU8b9wkNnI.roa (hash: GScXqHaLC/DvIVFv4LbVlGQC4NvQYCtdCncZDyaINVM=)
7: umCk2HTZYByBQsNS-AxWpDJ2zUc.crl (hash: +upm7/1z7mM8+rLx9y7d+M/DQ0qZ7Zkr9wgKiDAiWFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 14:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:5d:e3:1b:d1:ed:a5:c7:82:60:6e:5e:f7:9a:da:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba60a4d874d9601c8142c352f80c56a43276cd47
Validity
Not Before: Mar 4 15:01:03 2026 GMT
Not After : Mar 5 15:01:03 2026 GMT
Subject: CN=80e9424492a3257b7a4c118a8b84ba6704ae9f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:99:6e:3f:68:50:6d:6a:94:ed:0b:ee:69:41:
24:45:1e:dd:18:a8:48:b7:b5:7a:de:81:9e:c1:2c:
9c:55:24:fa:8c:60:5a:72:ae:9d:08:9d:32:56:2b:
fa:9a:ee:6b:d7:3d:d6:10:93:d0:cf:b1:ae:e9:a7:
02:73:37:76:5a:51:17:d4:b3:34:ce:12:d5:1b:a7:
97:17:99:ac:dc:bb:ab:34:85:4e:a0:4e:85:77:f7:
f7:14:a7:a0:a1:e9:eb:51:3d:5c:69:86:a2:1a:c2:
05:24:11:50:0e:cb:fe:1a:26:bf:07:aa:c5:60:0e:
cc:f1:df:28:f7:04:c8:90:cb:9b:fe:57:50:a5:ff:
0e:8e:6c:e0:9f:e9:ea:b8:04:fe:44:47:b3:97:05:
a5:97:21:0e:d4:3f:60:8a:f6:9b:19:27:82:bb:b4:
e7:16:d7:18:62:27:5b:52:62:d4:7a:86:67:30:4e:
36:84:86:c4:8c:75:77:d1:a9:c5:ee:f3:e4:00:40:
2a:54:22:91:a0:c6:1a:4a:6a:29:36:2b:4a:8d:95:
b9:0a:20:22:62:83:1b:98:7d:45:b6:c0:30:ad:d0:
89:5a:8c:fc:d8:df:e4:de:b8:ee:09:6b:18:64:54:
ab:1a:b1:5f:f1:35:ed:d3:75:62:a3:87:a8:ad:20:
c9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E9:42:44:92:A3:25:7B:7A:4C:11:8A:8B:84:BA:67:04:AE:9F:65
X509v3 Authority Key Identifier:
keyid:BA:60:A4:D8:74:D9:60:1C:81:42:C3:52:F8:0C:56:A4:32:76:CD:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:fc:cd:03:a4:03:22:2c:63:d9:c9:72:95:08:49:8a:36:ed:
77:c0:75:e0:2c:71:57:4e:16:6a:68:a9:9f:ef:70:25:cf:2f:
3f:77:8b:ff:be:ba:6f:42:59:24:03:e0:03:30:68:f0:ba:0f:
30:1e:e6:85:96:32:75:3b:68:ab:7c:70:61:8b:ce:8d:97:12:
74:d1:6e:09:22:43:7f:9a:1d:d7:ff:3c:ae:40:70:2b:77:75:
98:17:e6:a9:e4:0b:1e:a0:41:62:4d:84:1d:fb:f4:1c:6b:67:
42:f6:a4:8b:2e:aa:18:5c:c1:1f:ba:f7:55:65:0a:7f:15:d6:
b6:7d:8d:4a:71:6c:b6:09:b9:37:7d:e6:38:47:2b:5c:bc:87:
d2:89:63:dc:cd:b2:77:b6:98:4b:b7:ab:e0:04:8b:e2:99:a8:
bf:92:b5:93:f2:ff:7c:22:64:33:bf:3c:9e:c4:2b:dd:c7:b6:
ad:2e:29:b7:92:8e:e5:03:66:8c:ab:66:14:3a:da:b5:be:a9:
85:5f:44:dc:92:73:84:30:f3:8b:01:88:f8:03:f4:59:35:74:
0b:c0:d6:19:19:cc:90:29:82:51:10:ee:d1:17:49:56:f8:a4:
ad:01:52:b1:89:9b:0f:4d:bc:d6:77:4e:f7:a6:e3:95:3d:14:
f2:d3:e1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 20:51:20 2026 by rpki-client