
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft
File: umCk2HTZYByBQsNS-AxWpDJ2zUc.mft (raw, json)
Hash identifier: afEmPZdpE9j0Cd5J4O2yIn+4uIwq1B40hnLIYryplRw=
Subject key identifier: B6:62:3F:A3:C0:27:CB:72:12:42:F4:4A:2A:2F:FC:73:8B:68:74:A5
Authority key identifier: BA:60:A4:D8:74:D9:60:1C:81:42:C3:52:F8:0C:56:A4:32:76:CD:47
Certificate issuer: /CN=ba60a4d874d9601c8142c352f80c56a43276cd47
Certificate serial: 019A21401939E0238569B365AF57744F7761
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft
Manifest number: 1705
Signing time: Sun 26 Oct 2025 16:00:40 +0000
Manifest this update: Sun 26 Oct 2025 16:00:40 +0000
Manifest next update: Mon 27 Oct 2025 16:00:40 +0000
Files and hashes: 1: 5U4MEYVwKErq9FhOsJB89ZvBBuA.roa (hash: NDCcRzRMP/wHXoUUOEq/IXJG3IgwKCj1GS7rUpsjlXY=)
2: 60lbisj9EBvEk8CkvIEbp4prM3I.roa (hash: cqYnW2I6KAO2XW2NYFnEXuAIZkVjJlu5WB2aqpTSh88=)
3: bHZh-gl2BV9HaE6gMvNJJyeNKUs.roa (hash: sDUjjxYqPfgF3z6qcjo8Ch8x8GHsvhm9yqvWs72G0WI=)
4: koXm2_p4F4KWKYlIu0UQERaNMQ8.roa (hash: zXAmEZonvu8xaYLE77bD6JgXELMdseALDrYiTNuQR1E=)
5: qerWJ9N0klhuhzcIgvZSrAumV_Y.roa (hash: /vwvzpt6A9BdPc1JxUloTrK4LVtePi7FvbqVFdA3VF8=)
6: umCk2HTZYByBQsNS-AxWpDJ2zUc.crl (hash: Nq0QeJtKrQBTDhkni9HB/Dcfk6s4mPd15+FbkQDY4QI=)
7: zMnP4SbXXtzO5Qz_HmHXST-lJbc.roa (hash: x/mXpix8fyVF7pfT27hYA7xsa5opQzKkRx7F0dXWqMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:40:19:39:e0:23:85:69:b3:65:af:57:74:4f:77:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba60a4d874d9601c8142c352f80c56a43276cd47
Validity
Not Before: Oct 26 16:00:40 2025 GMT
Not After : Oct 27 16:00:40 2025 GMT
Subject: CN=b6623fa3c027cb721242f44a2a2ffc738b6874a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bf:93:12:a7:65:1a:47:1c:01:4d:33:9c:f1:
9d:2f:32:e6:87:91:22:f1:e8:7a:94:1f:63:de:12:
5d:0a:25:79:8a:f4:0f:b5:68:6c:90:22:19:4f:fc:
94:3b:ce:68:f6:11:71:d2:c3:22:f1:1b:fc:f1:df:
11:ab:20:8a:0e:cf:5f:43:5a:c7:79:94:0e:ff:dd:
97:a6:08:b9:77:e3:ff:53:e3:31:a7:8f:dd:9b:4a:
9d:ad:de:e9:e8:8a:d9:4c:e4:11:12:dc:01:c7:b7:
d0:2d:4f:a1:d8:46:3c:57:cb:05:cc:5f:08:8b:8e:
8a:35:dd:28:2b:20:56:4d:f5:b7:b8:22:69:1c:51:
fd:c6:22:be:08:ab:6c:95:2e:86:1f:f6:03:b5:42:
03:39:c2:a9:84:69:2f:14:62:b1:6d:bd:f0:8a:68:
5b:61:36:24:a9:1a:e9:e9:d5:3e:55:20:a3:ff:09:
6a:a1:d0:25:39:94:a5:71:f8:7c:73:dd:b2:a9:bf:
a1:be:f6:9b:3b:aa:45:9b:a8:da:e8:81:42:8d:be:
ce:61:31:a5:32:a1:ce:61:14:6b:c5:43:4d:07:e2:
1c:70:8c:9b:9f:5d:43:f8:4e:2d:6e:c2:c4:e5:1b:
f4:29:e0:b4:f7:30:f8:fe:01:b5:a4:0a:42:bd:fa:
ac:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:62:3F:A3:C0:27:CB:72:12:42:F4:4A:2A:2F:FC:73:8B:68:74:A5
X509v3 Authority Key Identifier:
keyid:BA:60:A4:D8:74:D9:60:1C:81:42:C3:52:F8:0C:56:A4:32:76:CD:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:90:3b:c8:b4:39:ad:60:f3:14:4e:a8:4e:3e:04:42:be:37:
97:11:d2:49:43:e9:9a:bd:f5:ea:f6:65:7d:29:fb:b9:88:b1:
2c:fd:18:d0:8b:e5:e4:8c:81:f5:ca:f5:6b:13:b6:5f:92:9e:
c7:18:fe:a4:e8:36:f3:cd:46:11:84:06:a4:9e:ab:cc:8d:21:
88:2f:81:6f:17:30:ee:5c:b6:fe:c6:f4:41:b4:97:e6:68:c3:
a9:cc:bc:d5:6a:df:5a:e2:10:3f:6c:88:40:67:ea:45:fe:c9:
19:5d:12:7a:2a:c8:39:3f:f9:8e:92:63:5f:28:55:67:bf:2e:
eb:ef:58:35:63:16:e9:b1:f6:f6:fe:db:22:79:12:c8:92:c5:
01:e0:3d:4e:5e:2c:80:66:27:d6:69:75:9b:89:2b:d2:37:61:
be:14:6a:de:0b:53:e5:60:ba:bc:e8:06:58:c9:69:5a:41:ad:
96:77:6c:9d:91:f3:56:86:a6:6d:e7:bb:10:42:e5:6e:33:58:
b3:37:39:0c:a9:4e:b1:ad:14:c4:a8:97:ff:f4:60:61:ed:fc:
e6:e4:05:0d:62:ed:76:d8:d2:67:7d:26:58:05:16:8e:ad:a7:
e8:5f:fc:31:4c:62:7b:a1:12:6e:12:a5:df:8a:14:a0:87:69:
15:3e:5f:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohQBk54COFabNlr1d0T3dhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNjBhNGQ4NzRkOTYwMWM4MTQyYzM1MmY4MGM1NmE0MzI3
NmNkNDcwHhcNMjUxMDI2MTYwMDQwWhcNMjUxMDI3MTYwMDQwWjAzMTEwLwYDVQQD
EyhiNjYyM2ZhM2MwMjdjYjcyMTI0MmY0NGEyYTJmZmM3MzhiNjg3NGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnb+TEqdlGkccAU0znPGdLzLmh5Ei
8eh6lB9j3hJdCiV5ivQPtWhskCIZT/yUO85o9hFx0sMi8Rv88d8RqyCKDs9fQ1rH
eZQO/92Xpgi5d+P/U+Mxp4/dm0qdrd7p6IrZTOQREtwBx7fQLU+h2EY8V8sFzF8I
i46KNd0oKyBWTfW3uCJpHFH9xiK+CKtslS6GH/YDtUIDOcKphGkvFGKxbb3wimhb
YTYkqRrp6dU+VSCj/wlqodAlOZSlcfh8c92yqb+hvvabO6pFm6ja6IFCjb7OYTGl
MqHOYRRrxUNNB+IccIybn11D+E4tbsLE5Rv0KeC09zD4/gG1pApCvfqs2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZiP6PAJ8tyEkL0Siov/HOLaHSlMB8GA1UdIwQY
MBaAFLpgpNh02WAcgULDUvgMVqQyds1HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW1DazJIVFpZQnlCUXNOUy1BeFdwREoyelVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yOGNiNWMtMjk4Zi00ZDhiLTgxNWIt
ZTVhMzc3OGJlM2FkLzEvdW1DazJIVFpZQnlCUXNOUy1BeFdwREoyelVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8yOGNiNWMtMjk4Zi00ZDhiLTgxNWItZTVhMzc3OGJlM2Fk
LzEvdW1DazJIVFpZQnlCUXNOUy1BeFdwREoyelVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJZA7yLQ5
rWDzFE6oTj4EQr43lxHSSUPpmr316vZlfSn7uYixLP0Y0Ivl5IyB9cr1axO2X5Ke
xxj+pOg2881GEYQGpJ6rzI0hiC+Bbxcw7ly2/sb0QbSX5mjDqcy81WrfWuIQP2yI
QGfqRf7JGV0SeirIOT/5jpJjXyhVZ78u6+9YNWMW6bH29v7bInkSyJLFAeA9Tl4s
gGYn1ml1m4kr0jdhvhRq3gtT5WC6vOgGWMlpWkGtlndsnZHzVoambee7EELlbjNY
szc5DKlOsa0UxKiX//RgYe385uQFDWLtdtjSZ30mWAUWjq2n6F/8MUxie6ESbhKl
34oUoIdpFT5fLw==
-----END CERTIFICATE-----
Generated at Sun Oct 26 20:40:48 2025 by rpki-client