Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
File: UmTy3QuYerdeN5-Bd6QXajCGAGg.mft (raw, json)
Hash identifier: 5dU+Y9AbUGAQNqwV4nsZghajJDsVmxWUDQNq2GCz70M=
Subject key identifier: C2:26:FF:78:9F:CD:92:F4:07:DD:11:EC:B5:9C:ED:B2:85:44:F8:EA
Authority key identifier: 52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
Certificate issuer: /CN=5264f2dd0b987ab75e379f8177a4176a30860068
Certificate serial: 01A17E17B7F8BA9BEA2F9AF86D2CC8387864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
Manifest number: 0702
Signing time: Tue 27 Oct 2026 16:00:45 +0000
Manifest this update: Tue 27 Oct 2026 16:00:45 +0000
Manifest next update: Wed 28 Oct 2026 16:00:45 +0000
Files and hashes: 1: SjTVfgx1YmDzVlw-a0V5KmMIKRE.roa (hash: FiCGGz46S1/JlpdVCTYWxDtKkfziWJdtEEF1Tk4QjOQ=)
2: UmTy3QuYerdeN5-Bd6QXajCGAGg.crl (hash: 9zJ5yYYTYJzDd16+6NedMuVNWTTDFxmjfu1YP+hFRvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:17:b7:f8:ba:9b:ea:2f:9a:f8:6d:2c:c8:38:78:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5264f2dd0b987ab75e379f8177a4176a30860068
Validity
Not Before: Oct 27 16:00:45 2026 GMT
Not After : Oct 28 16:00:45 2026 GMT
Subject: CN=c226ff789fcd92f407dd11ecb59cedb28544f8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:98:50:4e:4d:b4:b5:f5:bc:9a:ef:e2:d8:0e:
cf:97:75:ee:88:e3:06:27:da:b0:04:cc:78:0d:cd:
bb:5b:22:a6:48:97:cb:98:bc:52:46:f0:84:31:64:
ef:c7:13:d1:fe:d4:f2:3c:06:b4:a4:27:48:1a:82:
85:c6:e2:62:d8:cf:df:be:9e:f7:dc:4c:2e:28:31:
e3:a0:02:4c:96:de:09:68:cb:02:89:3e:bc:28:04:
ac:a7:f4:92:fe:de:2d:97:10:f6:7c:b2:cd:ba:a5:
ef:fc:39:c8:dd:62:73:a4:cf:db:0e:7a:4c:65:18:
fa:cb:38:c9:da:1e:ef:be:ec:7e:a4:ce:50:54:fc:
ee:13:d0:2e:98:06:99:47:03:96:78:e4:79:c0:eb:
be:c5:6b:d9:4d:1a:a9:72:fc:d7:61:89:f8:2c:17:
ac:59:8d:c1:f8:a0:60:55:32:27:bd:79:16:57:94:
8e:4b:16:06:b5:21:f6:69:4b:b4:03:28:04:79:5a:
36:00:3a:e7:b2:37:1d:40:39:78:1d:3e:77:63:45:
71:77:75:49:63:d3:09:20:6c:10:d7:b5:b7:be:a5:
13:b2:22:5d:d2:ae:11:8f:b1:5f:a5:e4:67:a5:83:
d2:53:5f:7e:a4:10:b3:41:74:03:5e:b2:4d:8b:b7:
08:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:26:FF:78:9F:CD:92:F4:07:DD:11:EC:B5:9C:ED:B2:85:44:F8:EA
X509v3 Authority Key Identifier:
keyid:52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a0:15:08:ad:60:8c:26:86:a8:d2:22:ee:57:71:4e:5b:5a:
61:0a:04:e6:64:f7:e4:64:f2:74:88:93:1a:85:bc:08:6d:a4:
6d:9e:1e:84:df:42:bd:e8:a1:d3:a3:ea:4a:99:65:82:1b:fc:
aa:d0:fe:12:31:71:e4:a3:54:f1:ab:dd:07:e0:fc:87:b6:70:
b5:e3:8f:1c:36:e7:e0:45:58:34:bd:00:e0:86:45:9c:ec:ad:
69:19:e5:38:f0:c2:d9:53:65:8a:28:09:44:a2:07:81:f7:fe:
98:b7:70:20:a8:63:6c:0a:b5:c5:1e:82:8b:16:61:84:a6:ad:
2d:a2:92:d8:1f:78:a0:fb:ba:0f:31:0b:90:a0:02:9e:c1:20:
c4:c6:f5:24:c7:d8:c8:c3:17:d0:1a:16:8a:68:10:8f:53:5b:
6b:28:f6:69:6d:dc:25:fb:d1:c9:b5:a3:2d:98:9a:dc:f9:92:
50:dd:49:5b:85:52:a4:6d:93:cc:57:74:4b:7b:97:7d:f1:7e:
b1:3f:01:27:df:f1:a6:82:c8:00:d3:68:69:2e:16:73:48:46:
36:7b:da:d2:eb:cc:b0:47:1a:3a:04:f7:a7:72:f9:09:c1:2c:
ce:35:b0:ea:8a:f0:c2:76:e0:61:d4:8c:d2:e7:0f:0d:59:c9:
4c:a8:1b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:27:50 2026 by rpki-client