Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft
File: umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft (raw, json)
Hash identifier: ziGUo5XNk2ulnrxDGg1HZaNlG3aqvZ/1hdfvX++PLh0=
Subject key identifier: DC:C3:76:3B:D4:F3:B0:B3:7F:B9:39:9A:54:60:92:F4:F0:95:71:3A
Authority key identifier: BA:68:59:59:97:90:0D:ED:30:0E:99:25:70:9D:A6:27:E9:3F:36:3A
Certificate issuer: /CN=ba68595997900ded300e9925709da627e93f363a
Certificate serial: 01A18608FED81B8FE82F535E5306948C3013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/umhZWZeQDe0wDpklcJ2mJ-k_Njo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft
Manifest number: 1367
Signing time: Thu 29 Oct 2026 05:01:38 +0000
Manifest this update: Thu 29 Oct 2026 05:01:38 +0000
Manifest next update: Fri 30 Oct 2026 05:01:38 +0000
Files and hashes: 1: 6Lv0ELrWKZzM2WUhjrrfSxrLv5I.roa (hash: b+tPMLvT0wTQ8KNZFO7LFZXenP25HBtSk8cAgN48xuk=)
2: umhZWZeQDe0wDpklcJ2mJ-k_Njo.crl (hash: N1qyo7Ymca5aEB0vL9ekM/UbJ7jOgO4pmJYjZTI6mfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft
rsync://rpki.ripe.net/repository/DEFAULT/umhZWZeQDe0wDpklcJ2mJ-k_Njo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:08:fe:d8:1b:8f:e8:2f:53:5e:53:06:94:8c:30:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba68595997900ded300e9925709da627e93f363a
Validity
Not Before: Oct 29 05:01:38 2026 GMT
Not After : Oct 30 05:01:38 2026 GMT
Subject: CN=dcc3763bd4f3b0b37fb9399a546092f4f095713a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8d:a1:2b:1c:a2:47:c2:67:67:0f:28:05:cd:
18:da:63:45:61:61:6a:0f:2d:88:4b:72:d3:63:ae:
04:91:5a:16:1e:78:0c:6e:9f:e2:0b:8e:ec:b6:c0:
18:59:33:cb:40:02:37:e5:7c:7d:87:1d:9a:28:41:
71:3f:e0:af:90:4c:3b:a8:7a:03:39:c8:33:83:a8:
71:f8:1c:8f:08:06:9a:e1:93:07:1a:5b:b2:e8:f3:
e3:2a:d1:48:38:1a:13:41:19:b7:88:81:0d:15:c3:
fd:30:f1:cf:25:1b:75:b0:69:02:3c:53:0e:26:18:
7d:30:d3:45:6b:c6:f4:11:56:f6:6a:df:41:eb:14:
74:01:ac:c1:72:79:9d:d3:b8:e6:cd:3c:44:a9:3d:
4a:0a:d8:66:bf:67:be:55:87:e1:39:be:a2:0c:db:
cf:53:7e:fe:84:c6:a7:50:80:a6:ff:30:1c:35:fc:
bd:4a:5d:04:0c:03:af:f4:a9:3a:07:7a:08:f8:4c:
11:81:09:c6:6a:c7:bf:20:1a:ff:2c:e9:03:02:fe:
e7:4f:55:41:39:df:7e:61:1d:0a:b2:ba:c4:57:8f:
2e:3a:02:6a:e6:fc:dd:74:90:f9:d3:5a:8a:bf:f8:
84:72:08:4b:67:ce:00:84:eb:75:cb:94:4d:c5:fe:
76:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C3:76:3B:D4:F3:B0:B3:7F:B9:39:9A:54:60:92:F4:F0:95:71:3A
X509v3 Authority Key Identifier:
keyid:BA:68:59:59:97:90:0D:ED:30:0E:99:25:70:9D:A6:27:E9:3F:36:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/umhZWZeQDe0wDpklcJ2mJ-k_Njo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:9f:82:50:e7:48:1c:f0:3f:d7:c7:0e:a2:cf:7b:c3:33:30:
c8:03:6f:e3:dd:f8:de:52:4e:28:c7:b8:1a:82:b8:cc:5e:d2:
a0:98:98:2d:55:9f:17:37:79:4f:16:df:6d:86:99:8c:d1:e7:
f3:25:fd:c0:b1:d8:9e:d0:d2:f4:5f:e4:81:34:13:66:93:c0:
cc:82:3c:a1:6a:64:31:5a:4a:a4:92:4e:6a:0e:72:b9:6a:98:
2e:e3:aa:38:db:29:72:63:a5:26:83:65:a2:49:b7:22:e8:03:
f5:17:65:96:1b:84:02:30:5f:73:c5:e2:b6:27:de:92:47:31:
65:b7:78:4f:eb:28:c9:d1:bf:a3:80:15:91:15:ee:3d:c0:54:
c8:ae:97:72:b1:26:4c:ee:84:02:2a:cf:51:9a:99:06:c4:0f:
e3:29:a1:b9:79:b8:72:3a:31:c7:21:fb:98:39:0f:e1:cb:9a:
64:5d:74:77:14:74:8b:a4:d3:b2:c5:7d:b4:45:82:4c:53:07:
47:d8:64:fb:23:90:50:30:a4:59:90:39:00:2d:de:16:ab:b3:
a6:00:65:53:7b:30:56:1d:53:b7:40:3d:90:c0:f8:39:f9:bb:
29:56:c4:bc:c5:ec:21:9d:91:25:23:ae:2d:34:f1:7e:50:27:
c2:3c:53:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 08:05:32 2026 by rpki-client