Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
File: UmTy3QuYerdeN5-Bd6QXajCGAGg.mft (raw, json)
Hash identifier: z7Yz5+jgUy51yCtSkwHGziugh9G/XvXyuiXPvlPX0wU=
Subject key identifier: 6B:D9:2B:67:C9:F1:CB:80:CE:27:4D:94:92:53:CF:32:73:FF:98:35
Authority key identifier: 52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
Certificate issuer: /CN=5264f2dd0b987ab75e379f8177a4176a30860068
Certificate serial: 01A088D4E60DFF2E398EE44CD86FCABAEAB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
Manifest number: 0683
Signing time: Thu 10 Sep 2026 01:00:48 +0000
Manifest this update: Thu 10 Sep 2026 01:00:48 +0000
Manifest next update: Fri 11 Sep 2026 01:00:48 +0000
Files and hashes: 1: SjTVfgx1YmDzVlw-a0V5KmMIKRE.roa (hash: FiCGGz46S1/JlpdVCTYWxDtKkfziWJdtEEF1Tk4QjOQ=)
2: UmTy3QuYerdeN5-Bd6QXajCGAGg.crl (hash: O37xg5UtEzG7lcqvRetl+7B2r+mRI3B1AoGzjqFdKQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:d4:e6:0d:ff:2e:39:8e:e4:4c:d8:6f:ca:ba:ea:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5264f2dd0b987ab75e379f8177a4176a30860068
Validity
Not Before: Sep 10 01:00:48 2026 GMT
Not After : Sep 11 01:00:48 2026 GMT
Subject: CN=6bd92b67c9f1cb80ce274d949253cf3273ff9835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e6:0f:27:27:aa:a4:14:56:21:22:09:8c:58:
42:a3:0e:37:8f:aa:33:5e:f7:05:8d:f8:b6:fb:e6:
9c:31:7d:20:eb:bb:4a:93:d9:1f:0c:a7:15:a7:b0:
3c:09:d3:dc:71:b1:5a:cb:24:17:79:5a:2f:3e:76:
97:af:b8:40:bd:d5:b0:17:db:66:95:a2:d4:a0:b6:
ee:e2:2c:2b:c6:0e:af:24:77:1a:bc:44:27:61:f9:
e2:36:6b:0c:d6:6e:d5:cc:bf:b5:d0:f2:d7:9a:8c:
9b:17:c3:9e:b7:7d:5a:a0:f0:a3:b6:d4:dd:4e:06:
33:4c:32:dc:d1:6c:50:f8:39:70:e4:b5:b3:e8:14:
fd:38:f5:96:9a:e1:18:47:7e:ad:f4:bb:6c:75:bd:
12:f8:cd:c2:93:6a:f2:b8:d3:b8:e7:b9:01:d9:3b:
67:dc:67:e9:90:e6:a7:c1:50:f3:64:08:40:4e:1c:
22:9f:0b:bd:04:4a:a4:03:b4:61:b9:86:66:44:93:
62:1c:65:f9:e7:9c:c1:3a:07:2a:92:f6:6c:f4:23:
68:2c:e8:6c:ca:81:d1:bb:cb:1e:fc:2f:27:56:d5:
f7:e8:8a:81:3c:b0:85:93:c7:82:e9:ff:c5:d8:d0:
5c:a7:f7:92:46:c6:07:7e:51:9b:9d:0b:3d:a1:b6:
f2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D9:2B:67:C9:F1:CB:80:CE:27:4D:94:92:53:CF:32:73:FF:98:35
X509v3 Authority Key Identifier:
keyid:52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:62:ec:14:c1:4c:f2:5e:2c:ed:27:5d:20:27:8e:20:11:2a:
34:32:fc:d2:78:f6:91:31:82:02:46:10:07:39:ef:46:6b:53:
05:61:6b:2a:43:2e:2f:a5:a9:da:20:cd:d8:2a:54:7b:ee:95:
b0:16:13:d0:3e:f6:27:b4:12:a8:b5:33:be:f9:5c:c3:fc:51:
51:95:28:f8:0f:27:8b:d3:52:93:60:7f:3f:87:9d:0d:6b:f1:
dd:3d:73:ee:da:c1:8c:9c:53:9c:06:cb:56:64:a3:9b:81:b0:
be:a0:dc:31:bb:04:3a:37:41:f1:88:b6:93:ae:93:31:84:41:
36:be:d3:c8:2c:ff:60:45:ed:17:b6:38:d2:e3:67:19:44:3c:
23:a4:4c:5a:e1:50:f9:29:d9:4f:62:b6:2f:1b:75:67:c2:96:
da:17:20:f8:6b:2b:ce:5d:e4:bd:55:bd:d0:f1:f3:e1:d8:62:
7e:91:c9:83:17:db:8c:07:bd:72:8d:84:5c:1a:46:5d:bd:52:
14:84:de:f8:07:34:b1:8b:c8:14:1b:c2:e2:9f:58:19:c7:65:
0c:60:69:9d:3f:3d:ba:2d:bd:c5:90:72:b6:9a:c8:fd:7b:65:
e1:57:7e:d1:28:8a:ce:a5:5f:30:77:cb:cf:c8:b7:20:4c:82:
66:87:97:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:40:19 2026 by rpki-client