Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
File: UmTy3QuYerdeN5-Bd6QXajCGAGg.mft (raw, json)
Hash identifier: TanEbsJUIVadcu5rt9BDxQibVFmN7lL2A9n1ArpUTEA=
Subject key identifier: 8E:63:3C:72:33:54:3F:BC:2A:D7:B1:4F:6E:48:E3:B8:F0:AA:99:63
Authority key identifier: 52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
Certificate issuer: /CN=5264f2dd0b987ab75e379f8177a4176a30860068
Certificate serial: 019D37F754B8949D02C042DF8CBDAF62FE24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
Manifest number: 04CB
Signing time: Sun 29 Mar 2026 05:00:49 +0000
Manifest this update: Sun 29 Mar 2026 05:00:49 +0000
Manifest next update: Mon 30 Mar 2026 05:00:49 +0000
Files and hashes: 1: UmTy3QuYerdeN5-Bd6QXajCGAGg.crl (hash: 3C3tKoZ8itfMqMEHXPQFCHPeo1q1zjlA1cjpJYbAnJA=)
2: h7aUOqQIAGVx29wKcHsmI73SdWI.roa (hash: nXej1/AfJF2/TdKlqz14CbVM6VY7sIDvsNtbQhZWQmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:54:b8:94:9d:02:c0:42:df:8c:bd:af:62:fe:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5264f2dd0b987ab75e379f8177a4176a30860068
Validity
Not Before: Mar 29 05:00:49 2026 GMT
Not After : Mar 30 05:00:49 2026 GMT
Subject: CN=8e633c7233543fbc2ad7b14f6e48e3b8f0aa9963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c3:89:ef:26:3c:9c:9f:20:83:03:2b:60:7c:
9c:de:b3:3b:8f:25:11:b3:85:fa:38:0c:32:0c:d0:
11:29:c5:28:ab:a7:45:73:69:19:7a:cd:d5:60:6b:
37:62:2f:6b:5b:81:09:7c:b6:d4:1c:d8:bf:27:0b:
05:09:32:20:e4:1a:e1:40:06:9a:4e:7c:13:65:01:
71:3a:d2:16:5e:d4:3b:17:8c:52:0e:4e:e1:4a:98:
aa:92:4c:e4:cb:51:ff:54:f6:7e:8b:4e:ed:46:93:
96:79:61:51:63:61:b7:cf:fb:29:28:ea:c3:1f:d3:
87:38:6d:37:09:ad:be:d0:a0:8f:3f:0f:85:37:5c:
14:0f:6b:5f:8f:2c:84:3f:69:55:83:9c:4b:e1:88:
60:79:91:45:d1:47:36:c6:2c:e4:27:88:15:d6:92:
5b:db:21:aa:36:09:8d:08:11:09:5a:57:30:51:be:
7c:1a:bd:02:be:f3:8f:2e:34:f1:45:0f:b4:86:8c:
d1:5d:e1:36:41:fa:f9:44:e2:45:12:c3:df:ec:5e:
75:fe:5f:e7:cc:ad:3e:f1:92:77:16:a4:03:ac:98:
c4:b0:02:c5:d1:ca:ed:61:b0:ed:07:78:0a:51:b6:
70:f7:85:6c:34:9c:49:fc:e3:f2:6d:26:8f:a8:c9:
31:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:63:3C:72:33:54:3F:BC:2A:D7:B1:4F:6E:48:E3:B8:F0:AA:99:63
X509v3 Authority Key Identifier:
keyid:52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f6:1e:35:a2:13:46:a5:af:69:51:73:a3:82:d6:0b:23:d8:
ce:8c:e5:74:03:04:63:ff:97:d3:b6:14:ae:60:8f:cb:4d:9a:
a8:c3:73:57:26:ec:98:1a:9c:44:b0:0e:77:b8:de:46:4d:5b:
d1:63:3b:5e:06:51:4c:9b:98:4f:36:e3:1c:93:2d:c9:02:a6:
0e:bf:b7:d6:9c:55:c0:e7:b5:2b:37:17:65:f6:be:c1:7f:aa:
e3:3e:21:42:1e:ac:39:9c:77:a8:d4:a7:b5:0b:f7:59:dc:d0:
10:b6:55:80:f8:aa:ab:26:50:4a:6f:21:a9:d1:c4:36:22:e6:
da:67:80:41:8b:84:b3:0d:61:7b:75:46:a3:7a:18:3e:0a:67:
4a:4c:73:de:8f:61:ca:d7:2f:fe:ee:b5:c2:c5:7d:08:6e:24:
32:04:44:01:d5:20:af:59:ab:27:91:b5:80:78:a7:8f:35:51:
de:4d:be:df:7c:e9:29:d8:e0:dd:d5:3d:b0:1e:40:f7:37:46:
0d:7c:87:bc:e6:7b:81:20:02:c7:b1:b9:5a:9a:fa:8c:e6:95:
a5:61:df:ff:81:57:c3:c4:87:38:0a:f5:d9:fb:39:1e:d4:d9:
c8:f2:ca:9b:62:b9:40:30:84:a5:bc:fc:d6:4a:ca:b0:46:12:
c7:f4:a5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:03:13 2026 by rpki-client