
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
File: UmTy3QuYerdeN5-Bd6QXajCGAGg.mft (raw, json)
Hash identifier: G5WP9EP6oKKAUFUFZGi6mWDlM3lSPAkRmCO9vN5IXGQ=
Subject key identifier: A8:FB:85:91:36:4F:65:20:58:63:C3:F4:AF:9B:02:38:7D:57:DC:51
Authority key identifier: 52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
Certificate issuer: /CN=5264f2dd0b987ab75e379f8177a4176a30860068
Certificate serial: 019EB65759B1773222BDE33847EA235FC030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
Manifest number: 0591
Signing time: Thu 11 Jun 2026 11:00:38 +0000
Manifest this update: Thu 11 Jun 2026 11:00:38 +0000
Manifest next update: Fri 12 Jun 2026 11:00:38 +0000
Files and hashes: 1: UmTy3QuYerdeN5-Bd6QXajCGAGg.crl (hash: KKkXhelFkmpJ35bnUyd3FRB9l/Ce5p5BJ3PFEMMxdck=)
2: h7aUOqQIAGVx29wKcHsmI73SdWI.roa (hash: nXej1/AfJF2/TdKlqz14CbVM6VY7sIDvsNtbQhZWQmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:57:59:b1:77:32:22:bd:e3:38:47:ea:23:5f:c0:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5264f2dd0b987ab75e379f8177a4176a30860068
Validity
Not Before: Jun 11 11:00:38 2026 GMT
Not After : Jun 12 11:00:38 2026 GMT
Subject: CN=a8fb8591364f65205863c3f4af9b02387d57dc51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e7:bd:17:e1:12:96:de:42:22:60:7d:af:16:
98:71:13:f8:4c:52:ec:2e:70:22:82:10:e0:91:1e:
18:0f:b1:99:fe:c2:3f:88:17:fd:12:75:d5:81:6b:
fe:23:5d:e3:11:65:a2:90:65:c7:f1:96:a2:da:92:
15:2a:e0:92:e7:72:ed:64:71:f2:45:de:7f:bf:42:
77:ac:2e:34:5c:5c:d2:7f:ea:11:c9:71:3e:1e:3d:
f2:82:f8:38:06:b8:e5:2b:f5:d4:12:4b:82:06:e7:
7b:29:f5:04:41:d3:13:23:12:40:73:7e:5e:f5:c0:
b0:99:8c:13:c2:65:99:b0:5b:d3:02:28:29:db:5d:
9b:e9:af:b4:1f:0c:8a:5c:c5:83:65:ac:6d:54:d8:
68:00:b1:ac:a2:68:4f:d9:b2:39:d5:b5:9a:da:23:
1c:2e:6f:6d:75:47:ba:0e:6f:fd:bb:5c:ea:73:f4:
11:64:49:d6:17:41:df:30:1e:d4:84:be:73:2c:ed:
22:c1:fa:d0:e2:de:73:f4:56:c1:b8:fb:70:cf:12:
4e:78:b8:62:d6:62:11:e1:d0:a7:30:56:0c:6c:ac:
db:de:97:13:c3:2b:93:0c:d0:eb:d5:5d:43:47:f2:
73:f0:2f:b1:ba:5d:49:e4:15:e5:b0:c8:7c:68:2a:
41:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FB:85:91:36:4F:65:20:58:63:C3:F4:AF:9B:02:38:7D:57:DC:51
X509v3 Authority Key Identifier:
keyid:52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:b6:9b:81:13:4d:0b:2b:d6:5e:8a:7e:61:46:f3:5f:59:0b:
1f:3c:8d:d9:d9:b3:84:f3:c2:d0:41:41:b2:f3:4c:ba:42:8b:
42:3c:38:4b:1e:84:81:f2:e0:07:cd:01:11:8c:b0:52:86:05:
ab:93:35:02:a5:1e:83:bb:38:78:23:9b:af:0b:30:a8:7d:85:
f4:c0:29:20:cb:99:c6:d4:50:17:a2:c7:69:ad:43:16:f8:1a:
5b:f4:66:36:cf:bd:ed:b6:9f:2e:e3:9d:76:07:39:98:9f:a4:
ca:37:e8:90:de:af:96:3c:b4:99:37:5f:bd:0b:ec:82:41:a8:
0a:c9:ea:67:14:d4:8b:90:80:73:8a:b7:c8:46:90:1f:a6:b6:
4c:3c:58:51:d0:99:14:a8:9b:2f:bc:dd:bd:e0:0f:7f:36:38:
51:5e:98:19:fc:7b:05:50:d4:24:7e:3d:34:7f:53:9d:2b:8a:
08:08:33:14:0c:77:e1:39:16:bf:63:ee:70:1f:1e:83:18:ae:
95:0f:a2:b9:95:83:ce:08:5e:2a:4c:77:60:de:c9:84:00:88:
07:c0:12:a8:80:c1:f9:d2:4c:3d:f9:44:ef:9b:f8:06:15:72:
39:4b:bb:7f:4d:8d:34:42:47:49:2e:b1:68:59:b2:6d:36:24:
06:f6:ba:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:53:25 2026 by rpki-client