Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
File: UmTy3QuYerdeN5-Bd6QXajCGAGg.mft (raw, json)
Hash identifier: lZvCkiNrRIcvTOxbysUHJGYHlStUz1KE4j7Yijh6L5Q=
Subject key identifier: A6:E3:6E:88:42:39:2F:21:43:3F:8E:F7:79:7D:FD:39:7A:AA:19:AA
Authority key identifier: 52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
Certificate issuer: /CN=5264f2dd0b987ab75e379f8177a4176a30860068
Certificate serial: 01A17C2961681F443411FAC68BA76FDE5BC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
Manifest number: 0701
Signing time: Tue 27 Oct 2026 07:00:48 +0000
Manifest this update: Tue 27 Oct 2026 07:00:48 +0000
Manifest next update: Wed 28 Oct 2026 07:00:48 +0000
Files and hashes: 1: SjTVfgx1YmDzVlw-a0V5KmMIKRE.roa (hash: FiCGGz46S1/JlpdVCTYWxDtKkfziWJdtEEF1Tk4QjOQ=)
2: UmTy3QuYerdeN5-Bd6QXajCGAGg.crl (hash: TmxT29zVZ7jeAjCAU8ICi0f0Ejp0eGjU5nwXgbaVUzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:29:61:68:1f:44:34:11:fa:c6:8b:a7:6f:de:5b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5264f2dd0b987ab75e379f8177a4176a30860068
Validity
Not Before: Oct 27 07:00:48 2026 GMT
Not After : Oct 28 07:00:48 2026 GMT
Subject: CN=a6e36e8842392f21433f8ef7797dfd397aaa19aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:80:62:69:44:99:b5:53:f4:06:4b:6c:c9:99:
3b:9e:8c:a4:7b:78:7f:e8:65:d3:fe:e8:c4:51:c0:
da:ae:78:87:13:54:3b:9f:97:e5:35:4d:21:8c:f5:
af:c5:42:73:c2:f1:1e:60:81:09:89:63:3a:cf:b4:
a3:04:56:4a:49:d2:ad:d2:6b:f2:32:d3:01:23:93:
5b:c8:f0:6e:78:77:13:e3:2d:b5:9c:b1:39:43:fd:
ce:96:ab:ca:74:57:91:0b:fa:f7:32:76:8e:ba:a5:
d3:bc:56:b0:18:1f:1e:de:14:2f:6e:15:6c:02:4c:
ad:bd:1c:76:14:5d:3f:9f:f8:a1:43:2b:01:a8:6c:
ff:1d:cb:a3:d9:d4:70:c0:a2:83:46:4d:ea:1c:45:
05:36:5d:f3:eb:27:c5:e5:f5:b9:8a:d8:9f:4d:82:
d4:67:67:ea:f8:6f:e7:8d:6f:54:89:07:99:aa:a0:
5e:62:63:0e:dd:7b:72:2e:51:31:07:f8:de:7b:00:
2c:f9:f8:a5:5d:6d:e2:5b:f7:fb:c8:a3:df:e6:86:
9d:e2:f1:1d:83:89:c9:c6:01:44:1b:a6:dd:6a:d6:
59:72:93:f8:95:b3:77:42:86:a3:c8:0e:5d:fb:9e:
b0:5b:da:73:e3:77:e9:86:d2:78:7e:d0:05:f3:c7:
96:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E3:6E:88:42:39:2F:21:43:3F:8E:F7:79:7D:FD:39:7A:AA:19:AA
X509v3 Authority Key Identifier:
keyid:52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:14:c0:9a:3a:68:51:4f:7b:62:35:aa:86:34:e9:0b:1d:73:
f6:fe:d0:c5:87:c4:46:66:92:dc:fd:1e:eb:81:d8:59:d5:4c:
a9:35:59:06:78:7d:ef:64:34:da:c7:cf:32:47:13:e9:6b:e7:
d7:f9:4d:bd:0b:b8:7a:b1:01:13:52:6e:ec:64:4a:f0:0d:21:
2c:9f:35:43:7e:8f:d0:9d:74:6e:05:b1:2f:90:79:29:a1:1b:
e6:87:c8:74:24:09:bd:d9:a6:1d:3e:45:31:52:96:7d:62:8f:
3e:9b:5c:74:8b:33:6c:e5:b8:f8:85:a2:e1:30:ee:cc:4e:40:
df:dc:59:c9:e8:f4:94:1d:90:42:71:33:78:e2:bd:52:7c:6c:
cf:c2:31:0e:c7:ed:8a:db:91:10:80:11:de:7e:f3:3c:c9:47:
23:38:c5:b1:6c:18:73:50:61:8e:24:7b:a2:61:0a:e7:47:39:
81:1c:14:53:79:0c:12:ff:80:ad:af:0c:f5:63:db:d5:06:17:
e7:0a:10:f1:ff:2a:85:67:d8:3c:02:3e:7d:54:82:09:4a:90:
ae:5e:c2:14:28:ef:42:48:6f:3b:57:4d:65:7e:05:f9:2e:fc:
2a:17:be:9b:b2:8f:fd:de:62:4d:5c:61:80:06:04:35:db:89:
93:1f:e5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:39:57 2026 by rpki-client