Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft
File: umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft (raw, json)
Hash identifier: ZVMPXRjnc/E4X8vILut3a4fpqU439BO6VdwAE+uJsl4=
Subject key identifier: 37:4F:9C:3A:BB:D3:F7:CF:C7:EE:AD:09:53:4A:C2:70:96:40:9C:3D
Authority key identifier: BA:68:59:59:97:90:0D:ED:30:0E:99:25:70:9D:A6:27:E9:3F:36:3A
Certificate issuer: /CN=ba68595997900ded300e9925709da627e93f363a
Certificate serial: 01A08CE8CF55DCD770940BF181433EECD9EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/umhZWZeQDe0wDpklcJ2mJ-k_Njo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft
Manifest number: 12E6
Signing time: Thu 10 Sep 2026 20:01:02 +0000
Manifest this update: Thu 10 Sep 2026 20:01:02 +0000
Manifest next update: Fri 11 Sep 2026 20:01:02 +0000
Files and hashes: 1: 6Lv0ELrWKZzM2WUhjrrfSxrLv5I.roa (hash: b+tPMLvT0wTQ8KNZFO7LFZXenP25HBtSk8cAgN48xuk=)
2: umhZWZeQDe0wDpklcJ2mJ-k_Njo.crl (hash: /e0JPGMl1paQv1RKAbJsuCXQlQE7mv3feGaxRl+8odc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft
rsync://rpki.ripe.net/repository/DEFAULT/umhZWZeQDe0wDpklcJ2mJ-k_Njo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e8:cf:55:dc:d7:70:94:0b:f1:81:43:3e:ec:d9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba68595997900ded300e9925709da627e93f363a
Validity
Not Before: Sep 10 20:01:02 2026 GMT
Not After : Sep 11 20:01:02 2026 GMT
Subject: CN=374f9c3abbd3f7cfc7eead09534ac27096409c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1d:77:9b:44:71:e2:8c:0f:ba:ae:8e:83:b2:
b4:6e:c1:82:6f:22:cd:cf:4e:4f:b5:0b:f2:ed:dd:
22:e7:54:dd:c6:3a:f1:db:bf:1a:15:f5:a3:5d:82:
fd:d5:b7:82:03:a7:02:0c:3a:87:c4:88:03:3b:d0:
f5:9c:f7:03:5a:42:1a:a5:58:69:f7:27:76:76:2a:
9d:2b:0f:5c:b3:ce:97:9f:37:36:49:01:be:29:29:
37:6e:c1:8e:16:8a:b2:1b:1a:d7:cd:0c:cf:7b:38:
5c:08:97:21:4b:a0:1f:19:2c:ff:1f:b1:1e:b8:b4:
6b:6e:a2:1d:08:f9:ee:75:ae:a1:63:2d:e5:00:aa:
de:66:3c:0b:f6:71:d1:c2:52:7f:4e:7e:1b:b2:b3:
40:6c:98:6d:81:85:6b:fd:22:33:39:e4:56:33:76:
88:75:70:c9:97:1f:56:40:c3:66:dd:c0:67:87:78:
aa:d0:c5:a7:02:08:b5:ff:de:e1:60:37:5a:cd:97:
79:fa:da:92:34:b9:1b:51:f2:13:41:62:46:c8:e2:
13:99:38:ea:6f:01:65:a7:8f:13:ca:9c:db:eb:ec:
08:99:3c:99:88:7a:c1:b2:2a:2f:3f:09:f2:a1:e9:
6f:1a:4f:d6:ef:e0:d4:31:de:d6:ee:de:37:a3:90:
83:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4F:9C:3A:BB:D3:F7:CF:C7:EE:AD:09:53:4A:C2:70:96:40:9C:3D
X509v3 Authority Key Identifier:
keyid:BA:68:59:59:97:90:0D:ED:30:0E:99:25:70:9D:A6:27:E9:3F:36:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/umhZWZeQDe0wDpklcJ2mJ-k_Njo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:a5:ca:c1:fa:0b:fd:8c:9f:a9:0e:2f:5d:9d:a3:76:a2:1d:
a4:bd:cf:ef:d5:3d:67:19:a6:e6:59:88:aa:61:73:ac:d2:0e:
ee:ea:50:76:63:48:29:15:0e:7d:19:d1:e6:5b:15:39:ae:1e:
2a:cd:e9:06:4a:29:22:b7:5e:ff:3d:de:de:74:2a:8d:1b:1f:
94:52:71:11:d7:89:c2:aa:a5:c3:37:41:39:d3:d0:2f:6a:81:
86:2e:2c:bf:bc:05:be:e9:4b:6e:8f:bf:bd:8b:73:33:1a:f4:
cb:79:79:22:ef:92:f3:4a:35:78:91:fd:8f:c8:17:e9:5a:27:
85:d4:49:63:ed:c8:03:7a:96:c4:7f:06:01:cc:31:c1:86:31:
ba:03:7b:56:87:7a:82:c9:89:de:d4:58:e4:5c:a3:cb:2e:69:
ac:07:91:fa:ec:e4:2a:c1:fc:cc:5a:9a:37:15:ac:ba:a4:75:
5a:d2:81:35:f5:ef:f6:72:cf:56:eb:6a:60:08:be:e3:97:27:
2d:78:5a:4f:7c:b6:0c:6c:34:12:12:a7:8c:a8:e9:4b:9f:cb:
a6:5a:f7:6e:e4:8e:71:bc:da:0e:ad:91:6c:20:51:d7:f7:29:
95:d2:a7:53:0b:f6:91:aa:0a:33:2e:78:7a:b3:4c:65:7a:a7:
af:a1:fb:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:14:09 2026 by rpki-client