Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
File: UmxhjRW7cS4-uuBqixgWl6XkB7g.mft (raw, json)
Hash identifier: K8wBr6BXpRnETbgtc5ZAWrmwxSDAZkX5u2dR0wv7smY=
Subject key identifier: 9E:DE:44:86:8D:D7:FA:00:72:E8:42:07:B3:51:C7:F0:2B:00:FB:15
Authority key identifier: 52:6C:61:8D:15:BB:71:2E:3E:BA:E0:6A:8B:18:16:97:A5:E4:07:B8
Certificate issuer: /CN=526c618d15bb712e3ebae06a8b181697a5e407b8
Certificate serial: 019D39418D298BE6600124D2540EC3AEDEE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
Manifest number: 175A
Signing time: Sun 29 Mar 2026 11:01:30 +0000
Manifest this update: Sun 29 Mar 2026 11:01:30 +0000
Manifest next update: Mon 30 Mar 2026 11:01:30 +0000
Files and hashes: 1: UmxhjRW7cS4-uuBqixgWl6XkB7g.crl (hash: xH52PYTJaGx9ot6ebL/HQKjBTZGTvPhArY9AHt8+O6Y=)
2: uOsbUN7cy0tE4z7UdBm3d5V39gI.roa (hash: 4lZyd6hRUzTbzA108sOMla+DbCbzWNvltg5Nlq/cyFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:8d:29:8b:e6:60:01:24:d2:54:0e:c3:ae:de:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=526c618d15bb712e3ebae06a8b181697a5e407b8
Validity
Not Before: Mar 29 11:01:30 2026 GMT
Not After : Mar 30 11:01:30 2026 GMT
Subject: CN=9ede44868dd7fa0072e84207b351c7f02b00fb15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8f:ee:dd:9a:39:10:8b:b8:d3:d3:37:a4:0e:
75:29:b6:7f:23:7c:8b:3d:9c:13:86:6e:2f:80:97:
1a:b6:03:35:0e:73:e0:06:a4:65:25:12:8d:15:34:
4a:b5:66:43:14:60:a8:e1:df:34:e9:a5:23:14:d7:
45:f7:9c:11:0b:37:6c:4a:aa:1e:bf:ff:9b:d8:25:
6e:d2:ac:7c:08:2a:3f:80:87:ef:6a:c7:01:70:3d:
ba:68:9f:95:81:74:ad:88:1e:eb:c7:70:a8:93:d5:
8b:e7:aa:8f:91:56:1d:df:fb:aa:3e:30:45:61:1c:
21:e4:39:71:fd:58:b1:60:ec:04:11:e0:0a:7b:d5:
fb:44:54:78:44:5e:1a:85:cc:6e:a5:3b:55:53:dc:
5d:c5:f5:65:65:36:11:08:15:16:f9:39:ac:7a:80:
63:9c:09:c7:b9:e6:b2:6f:8e:b7:8f:96:e2:ea:5b:
c9:d8:ed:e7:08:25:ee:99:0d:ed:d9:25:44:89:af:
7b:a6:c4:44:5a:73:8f:35:f0:4e:7c:21:97:23:bc:
64:96:5a:c4:80:4c:b8:67:cd:cf:3c:0e:52:90:c7:
48:0a:05:35:dd:55:67:f3:f2:c6:28:75:33:b7:53:
6f:f3:4f:31:23:d6:ef:91:dd:28:e7:1c:b8:ff:a5:
f4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DE:44:86:8D:D7:FA:00:72:E8:42:07:B3:51:C7:F0:2B:00:FB:15
X509v3 Authority Key Identifier:
keyid:52:6C:61:8D:15:BB:71:2E:3E:BA:E0:6A:8B:18:16:97:A5:E4:07:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b5:14:d7:80:f7:4d:51:16:e1:8d:85:35:00:9a:d6:2e:39:
10:bc:8e:7f:b6:4d:da:78:9a:91:87:82:ab:43:2e:5c:fb:c2:
0a:7d:01:e5:ce:5a:4c:a3:1b:c4:e7:4d:c1:4d:ce:f2:f4:df:
a0:c8:f8:f4:27:b1:c2:ec:76:b4:9e:60:1e:91:38:9e:5e:0c:
91:c8:f5:87:58:37:03:e9:18:b7:ff:57:fb:45:1d:dd:bb:1f:
97:bf:26:88:c6:23:fe:91:e4:09:c5:c1:88:14:d4:df:45:cf:
69:3f:76:50:6f:42:75:c3:67:4a:be:d6:3a:81:f5:81:28:43:
bb:47:e1:2d:80:e6:7b:5c:66:d2:91:60:8e:a1:f1:93:19:66:
d8:3b:f9:63:31:b2:9a:f2:31:38:68:4e:56:c9:c7:93:05:96:
93:8f:a2:fc:81:a9:6d:a7:d7:94:7a:7e:a1:4d:9a:f0:56:d0:
fa:22:43:f7:02:53:3f:dc:f5:67:51:26:7c:db:20:7a:bb:32:
e4:7b:9e:9b:9a:4d:9d:d9:35:89:07:30:db:cd:3a:07:e3:17:
b1:2e:03:12:f9:fa:4c:36:9a:b4:b8:2f:fd:3a:5e:88:f9:7f:
62:b5:7c:bf:3c:34:9c:07:db:6a:d3:85:81:64:d7:64:36:1a:
15:04:03:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:04:45 2026 by rpki-client