Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft
File: umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft (raw, json)
Hash identifier: GES8O3mgrXLfpNsgsuYY5YtrtefERC8TMR0ZFuhFUOw=
Subject key identifier: 5C:57:1D:49:30:7A:AB:61:F9:F1:59:C3:DB:48:D6:B4:55:49:EF:07
Authority key identifier: BA:68:59:59:97:90:0D:ED:30:0E:99:25:70:9D:A6:27:E9:3F:36:3A
Certificate issuer: /CN=ba68595997900ded300e9925709da627e93f363a
Certificate serial: 019FA14E3E30A579FFD09CBE6AF6537A3918
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/umhZWZeQDe0wDpklcJ2mJ-k_Njo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft
Manifest number: 126C
Signing time: Mon 27 Jul 2026 02:01:27 +0000
Manifest this update: Mon 27 Jul 2026 02:01:27 +0000
Manifest next update: Tue 28 Jul 2026 02:01:27 +0000
Files and hashes: 1: 6Lv0ELrWKZzM2WUhjrrfSxrLv5I.roa (hash: b+tPMLvT0wTQ8KNZFO7LFZXenP25HBtSk8cAgN48xuk=)
2: umhZWZeQDe0wDpklcJ2mJ-k_Njo.crl (hash: 2XTAHwL2CSZNt02K1a09ndsvWu4SVsrc9mKb4SWd6TU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft
rsync://rpki.ripe.net/repository/DEFAULT/umhZWZeQDe0wDpklcJ2mJ-k_Njo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4e:3e:30:a5:79:ff:d0:9c:be:6a:f6:53:7a:39:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba68595997900ded300e9925709da627e93f363a
Validity
Not Before: Jul 27 02:01:27 2026 GMT
Not After : Jul 28 02:01:27 2026 GMT
Subject: CN=5c571d49307aab61f9f159c3db48d6b45549ef07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0d:f0:26:67:df:26:47:e1:60:33:92:6b:42:
12:69:3d:f7:e6:ab:67:5c:66:88:4c:a3:a6:74:ef:
86:ce:6e:92:67:fd:e5:23:dc:1f:1d:c5:f2:1a:fb:
69:9a:25:d2:51:12:f4:a7:db:09:cc:ad:53:10:21:
77:55:aa:3e:08:f9:42:a2:85:70:17:80:c3:70:4f:
13:0b:d0:d4:c8:9d:47:3a:61:21:75:00:e6:2e:9c:
99:de:c3:45:09:71:4a:22:48:1e:6c:8f:bd:0f:da:
e2:b7:f5:e1:84:45:92:33:51:d7:97:d3:93:fd:27:
4f:1b:f1:06:04:3f:a5:e8:4b:1b:34:9e:82:e3:e2:
2d:37:34:53:81:bd:00:d0:f6:d8:85:84:bd:8f:c8:
87:cc:79:8c:89:0d:2e:e5:c3:94:eb:af:3f:78:9e:
26:0b:a1:c0:c5:4a:1e:6a:36:42:71:24:f9:4e:10:
c5:6d:34:1b:aa:88:4b:f1:58:55:a2:e9:7b:61:16:
03:84:2e:9c:ea:94:88:ee:02:89:21:45:dc:fc:9f:
7e:30:52:e8:6b:0d:65:9f:e1:cc:cf:b4:b5:fe:8e:
e7:75:ac:e0:5e:0f:6e:90:93:6c:6d:68:7e:fd:cc:
36:2a:48:9e:4d:b8:b6:65:7f:a1:2e:07:c8:36:e0:
64:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:57:1D:49:30:7A:AB:61:F9:F1:59:C3:DB:48:D6:B4:55:49:EF:07
X509v3 Authority Key Identifier:
keyid:BA:68:59:59:97:90:0D:ED:30:0E:99:25:70:9D:A6:27:E9:3F:36:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/umhZWZeQDe0wDpklcJ2mJ-k_Njo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:53:6c:8e:7f:b0:81:56:eb:d9:66:46:8e:6b:b3:19:ff:ae:
52:62:10:42:8a:f3:14:37:02:65:ae:5b:02:87:de:34:62:30:
6d:3e:69:d8:c9:a1:cf:eb:28:b1:e5:d3:07:c0:6d:e8:a0:2f:
98:93:ff:32:71:06:3a:1f:6f:dd:9c:f6:1d:25:7b:20:18:3a:
02:ed:b9:d3:2a:5a:fe:87:cd:28:ed:c2:49:d9:7b:9a:a7:27:
d2:e2:2c:bc:36:85:17:a2:a0:53:ec:ae:9c:39:3b:cd:f5:74:
97:e3:2d:42:ce:42:f6:0f:c7:31:84:8a:49:78:08:b4:04:34:
8b:1e:a8:78:7d:8c:c0:d6:b3:f3:96:6f:03:1b:39:8c:78:97:
95:5d:c3:36:23:f0:04:ec:61:66:3f:7e:3f:6d:67:05:d1:4f:
92:0c:b8:48:22:e8:b2:b8:78:7a:ce:09:62:21:14:bf:0e:42:
99:9c:4b:e1:a2:7c:ac:8b:39:0f:03:7a:3a:53:ca:6e:d6:af:
e4:39:f2:e2:24:8f:36:a7:75:11:1d:cb:18:1d:93:f7:74:8e:
39:16:ee:df:1f:c3:db:c8:15:5c:4b:7b:37:a2:86:c7:24:14:
e1:ac:82:0e:35:01:97:d0:b5:6b:1d:ef:81:25:80:30:05:d6:
f0:c7:b6:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hTj4wpXn/0Jy+avZTejkYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNjg1OTU5OTc5MDBkZWQzMDBlOTkyNTcwOWRhNjI3ZTkz
ZjM2M2EwHhcNMjYwNzI3MDIwMTI3WhcNMjYwNzI4MDIwMTI3WjAzMTEwLwYDVQQD
Eyg1YzU3MWQ0OTMwN2FhYjYxZjlmMTU5YzNkYjQ4ZDZiNDU1NDllZjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg3wJmffJkfhYDOSa0ISaT335qtn
XGaITKOmdO+Gzm6SZ/3lI9wfHcXyGvtpmiXSURL0p9sJzK1TECF3Vao+CPlCooVw
F4DDcE8TC9DUyJ1HOmEhdQDmLpyZ3sNFCXFKIkgebI+9D9rit/XhhEWSM1HXl9OT
/SdPG/EGBD+l6EsbNJ6C4+ItNzRTgb0A0PbYhYS9j8iHzHmMiQ0u5cOU668/eJ4m
C6HAxUoeajZCcST5ThDFbTQbqohL8VhVoul7YRYDhC6c6pSI7gKJIUXc/J9+MFLo
aw1ln+HMz7S1/o7ndazgXg9ukJNsbWh+/cw2KkieTbi2ZX+hLgfINuBk2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxXHUkweqth+fFZw9tI1rRVSe8HMB8GA1UdIwQY
MBaAFLpoWVmXkA3tMA6ZJXCdpifpPzY6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW1oWldaZVFEZTB3RHBrbGNKMm1KLWtfTmpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS80NzJhNGQtZmNhZS00NDU0LTk5Njct
MDJkZWQ5YjJlMGM5LzEvdW1oWldaZVFEZTB3RHBrbGNKMm1KLWtfTmpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS80NzJhNGQtZmNhZS00NDU0LTk5NjctMDJkZWQ5YjJlMGM5
LzEvdW1oWldaZVFEZTB3RHBrbGNKMm1KLWtfTmpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgFNsjn+w
gVbr2WZGjmuzGf+uUmIQQorzFDcCZa5bAofeNGIwbT5p2Mmhz+soseXTB8Bt6KAv
mJP/MnEGOh9v3Zz2HSV7IBg6Au250ypa/ofNKO3CSdl7mqcn0uIsvDaFF6KgU+yu
nDk7zfV0l+MtQs5C9g/HMYSKSXgItAQ0ix6oeH2MwNaz85ZvAxs5jHiXlV3DNiPw
BOxhZj9+P21nBdFPkgy4SCLosrh4es4JYiEUvw5CmZxL4aJ8rIs5DwN6OlPKbtav
5Dny4iSPNqd1ER3LGB2T93SOORbu3x/D28gVXEt7N6KGxyQU4ayCDjUBl9C1ax3v
gSWAMAXW8Me2qg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 08:31:52 2026 by rpki-client