Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft
File: c_umgtacHRBwjte2rqojLuibkB0.mft (raw, json)
Hash identifier: +UVx5DfxcW/79hJf5QNHNytM103bIde1eQ4b3AVtmdY=
Subject key identifier: 48:B3:9B:5D:63:09:61:3F:72:FE:1B:7A:C7:22:50:B3:C3:7B:8D:E5
Authority key identifier: 73:FB:A6:82:D6:9C:1D:10:70:8E:D7:B6:AE:AA:23:2E:E8:9B:90:1D
Certificate issuer: /CN=73fba682d69c1d10708ed7b6aeaa232ee89b901d
Certificate serial: 019D37C10560204D2696110749176D903031
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_umgtacHRBwjte2rqojLuibkB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft
Manifest number: 11CE
Signing time: Sun 29 Mar 2026 04:01:29 +0000
Manifest this update: Sun 29 Mar 2026 04:01:29 +0000
Manifest next update: Mon 30 Mar 2026 04:01:29 +0000
Files and hashes: 1: c_umgtacHRBwjte2rqojLuibkB0.crl (hash: mjhlc+6m1ui9MlQJtrvgVL9cyAxofc8QCsuxM86Qtm8=)
2: yCVPi-PAEcORtbmsty5UvUZaZu0.roa (hash: yBlhR7LIxNNpuS2dfkekCG28fIsE0eDQixOz/izuOyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_umgtacHRBwjte2rqojLuibkB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:05:60:20:4d:26:96:11:07:49:17:6d:90:30:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73fba682d69c1d10708ed7b6aeaa232ee89b901d
Validity
Not Before: Mar 29 04:01:29 2026 GMT
Not After : Mar 30 04:01:29 2026 GMT
Subject: CN=48b39b5d6309613f72fe1b7ac72250b3c37b8de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9f:7f:b7:d0:ca:10:26:06:d7:4c:cc:f6:db:
cf:4b:49:d5:97:dc:28:e2:5a:84:f8:ff:98:94:f8:
31:3b:35:a3:54:15:db:0e:51:a1:0d:50:86:65:8d:
d3:ab:58:ea:f6:0f:d4:f9:62:11:6a:e4:e4:18:d9:
a1:94:99:79:be:3b:4c:58:3a:bb:59:7f:0e:16:ea:
83:b3:00:d2:60:5b:84:9a:22:8c:c1:e9:2d:23:82:
63:eb:47:8c:d0:23:60:2a:c7:7e:6b:da:26:70:42:
77:4f:6b:10:3c:a6:c0:ef:16:89:44:b4:80:65:76:
a4:ca:7d:4c:d5:bd:d3:19:eb:b3:f9:70:57:4c:67:
28:44:45:7b:26:5e:79:2a:3d:9d:4e:cc:e5:80:6c:
4c:38:7d:9a:b6:6e:22:3d:17:8f:d6:e8:9d:14:4e:
03:e1:63:06:17:f1:81:35:2d:04:86:7e:7f:f6:d0:
6e:38:b4:5f:e4:de:d2:6f:c6:5e:90:fb:c5:dd:94:
61:6b:04:a9:8a:f6:62:f7:fb:55:46:d7:1c:0f:1e:
ac:31:38:25:5b:f8:97:75:2c:ba:d0:fa:98:1d:58:
bc:62:b9:07:6a:2c:a4:e2:fa:2f:03:4b:cc:1a:4b:
ac:8c:a4:3f:bf:76:ca:be:6f:c0:f0:96:6f:47:dd:
73:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B3:9B:5D:63:09:61:3F:72:FE:1B:7A:C7:22:50:B3:C3:7B:8D:E5
X509v3 Authority Key Identifier:
keyid:73:FB:A6:82:D6:9C:1D:10:70:8E:D7:B6:AE:AA:23:2E:E8:9B:90:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_umgtacHRBwjte2rqojLuibkB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f2:69:7a:81:22:a8:29:8f:bc:ee:d9:d5:b6:29:15:03:1b:
56:ee:c6:1a:b5:b0:da:62:fe:ce:ac:e0:26:0d:ed:a4:28:e4:
2d:22:cf:49:ea:52:21:d8:1e:47:26:b6:f2:24:54:fd:ac:f7:
f9:9d:e7:a4:89:93:4b:45:eb:2b:3f:00:20:81:41:b2:c4:b7:
c7:ef:df:79:d5:d1:17:a6:cf:0b:92:09:f6:6d:fb:a9:26:a8:
9f:98:48:5b:a9:26:28:8a:c7:64:cc:83:9f:5a:00:b2:9b:4a:
27:6a:7f:9e:a8:bc:11:37:12:df:c4:7f:6b:9c:93:9e:60:8d:
70:8c:4a:75:d9:58:6f:9b:e8:1c:5e:c0:cd:eb:21:dd:c4:25:
76:69:cf:a8:5c:de:c7:f3:54:ce:09:19:d5:ba:c2:d7:bb:e2:
be:35:e2:e4:37:33:f1:fe:e8:c2:c3:53:1c:a8:c9:75:6d:3f:
c4:22:e1:29:54:a2:f4:d6:b4:ef:ad:e9:24:22:38:54:dd:0b:
9b:41:f3:b1:84:e9:81:b7:35:15:4a:46:50:cf:b8:f8:ab:1e:
ef:02:b2:c6:61:8e:be:54:66:99:fc:30:be:5e:14:17:e2:89:
f0:df:0c:1a:94:32:b9:8f:a9:39:01:e5:ac:18:8a:3f:77:52:
78:e2:20:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wQVgIE0mlhEHSRdtkDAxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZmJhNjgyZDY5YzFkMTA3MDhlZDdiNmFlYWEyMzJlZTg5
YjkwMWQwHhcNMjYwMzI5MDQwMTI5WhcNMjYwMzMwMDQwMTI5WjAzMTEwLwYDVQQD
Eyg0OGIzOWI1ZDYzMDk2MTNmNzJmZTFiN2FjNzIyNTBiM2MzN2I4ZGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu59/t9DKECYG10zM9tvPS0nVl9wo
4lqE+P+YlPgxOzWjVBXbDlGhDVCGZY3Tq1jq9g/U+WIRauTkGNmhlJl5vjtMWDq7
WX8OFuqDswDSYFuEmiKMwektI4Jj60eM0CNgKsd+a9omcEJ3T2sQPKbA7xaJRLSA
ZXakyn1M1b3TGeuz+XBXTGcoREV7Jl55Kj2dTszlgGxMOH2atm4iPReP1uidFE4D
4WMGF/GBNS0Ehn5/9tBuOLRf5N7Sb8ZekPvF3ZRhawSpivZi9/tVRtccDx6sMTgl
W/iXdSy60PqYHVi8YrkHaiyk4vovA0vMGkusjKQ/v3bKvm/A8JZvR91zzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEizm11jCWE/cv4besciULPDe43lMB8GA1UdIwQY
MBaAFHP7poLWnB0QcI7Xtq6qIy7om5AdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY191bWd0YWNIUkJ3anRlMnJxb2pMdWlia0IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9kMmNlYzUtYjI0NS00NTQ3LWE5Y2Qt
ZjZjNjQ0Yzk0NjA4LzEvY191bWd0YWNIUkJ3anRlMnJxb2pMdWlia0IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9kMmNlYzUtYjI0NS00NTQ3LWE5Y2QtZjZjNjQ0Yzk0NjA4
LzEvY191bWd0YWNIUkJ3anRlMnJxb2pMdWlia0IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXfJpeoEi
qCmPvO7Z1bYpFQMbVu7GGrWw2mL+zqzgJg3tpCjkLSLPSepSIdgeRya28iRU/az3
+Z3npImTS0XrKz8AIIFBssS3x+/fedXRF6bPC5IJ9m37qSaon5hIW6kmKIrHZMyD
n1oAsptKJ2p/nqi8ETcS38R/a5yTnmCNcIxKddlYb5voHF7Azesh3cQldmnPqFze
x/NUzgkZ1brC17vivjXi5Dcz8f7owsNTHKjJdW0/xCLhKVSi9Na0763pJCI4VN0L
m0HzsYTpgbc1FUpGUM+4+Kse7wKyxmGOvlRmmfwwvl4UF+KJ8N8MGpQyuY+pOQHl
rBiKP3dSeOIgEw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:02 2026 by rpki-client