Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
File: UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft (raw, json)
Hash identifier: naPcqlynZiQ31M4vNvvL+5X+o8gL6kH/oyQv+D33vrs=
Subject key identifier: 7C:6C:BB:98:E9:BE:C8:01:C2:F2:05:1D:0A:1B:57:7F:B6:8A:B3:0B
Authority key identifier: 50:C0:06:D6:40:1E:F4:2F:A5:0E:24:09:55:00:B2:FD:AF:AD:5B:AA
Certificate issuer: /CN=50c006d6401ef42fa50e24095500b2fdafad5baa
Certificate serial: 019D992B4F1A10CE88A8247986B526B94182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
Manifest number: 1752
Signing time: Fri 17 Apr 2026 02:00:45 +0000
Manifest this update: Fri 17 Apr 2026 02:00:45 +0000
Manifest next update: Sat 18 Apr 2026 02:00:45 +0000
Files and hashes: 1: Rx6_2dFGC_byik0IQci9SEzvGuI.roa (hash: HsI4o34Z5wlmbwp0oeAuMzNNb5shkpIEpxzJkNhrxZk=)
2: UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl (hash: bzmpbtgXyW/YfSNKDP7qysAt7f/p9W15XuYvOjIB0a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:4f:1a:10:ce:88:a8:24:79:86:b5:26:b9:41:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c006d6401ef42fa50e24095500b2fdafad5baa
Validity
Not Before: Apr 17 02:00:45 2026 GMT
Not After : Apr 18 02:00:45 2026 GMT
Subject: CN=7c6cbb98e9bec801c2f2051d0a1b577fb68ab30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:58:67:90:c2:40:ba:50:fd:8e:82:1b:b3:8c:
2b:45:6e:84:d8:80:5e:a4:81:5c:04:e0:a9:2d:f8:
74:a5:02:df:56:43:f8:bf:5c:89:a4:f9:46:a3:6a:
68:e1:66:51:05:fb:35:61:83:f3:2c:0d:b6:46:f8:
57:84:28:ec:f7:a2:4c:22:75:8d:5a:1e:ea:1b:7b:
34:4f:69:d2:81:5e:05:ff:0e:7a:e1:df:7e:d7:db:
1b:5a:5b:fc:c2:55:81:da:ea:80:ce:b6:1e:0c:9b:
6f:01:c5:00:69:91:a9:a5:77:ba:c7:74:10:1e:39:
1e:55:08:64:27:3d:00:16:f9:fc:ba:e5:de:52:31:
b7:ec:7c:a8:ab:db:de:d0:dd:68:9b:7d:16:a8:b7:
ca:61:69:bf:d5:27:e4:75:82:bd:10:b1:f0:fc:b0:
bd:08:36:06:5a:94:c3:65:d9:b9:be:d4:b4:30:11:
43:a7:3b:d0:29:d6:95:81:69:8c:0a:72:25:2b:fc:
63:d6:f6:e7:10:e0:47:ec:52:9a:e9:33:51:01:b9:
a0:8f:74:45:8f:05:3e:4a:b9:64:bf:1b:9e:17:23:
69:2e:01:65:91:c6:ba:f6:9c:bc:64:48:ac:74:6d:
73:b3:cd:8e:1b:47:ac:09:20:b8:f4:d5:66:43:4f:
a2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6C:BB:98:E9:BE:C8:01:C2:F2:05:1D:0A:1B:57:7F:B6:8A:B3:0B
X509v3 Authority Key Identifier:
keyid:50:C0:06:D6:40:1E:F4:2F:A5:0E:24:09:55:00:B2:FD:AF:AD:5B:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:5b:cc:48:ba:87:a5:43:6f:f5:66:ca:c2:72:f3:13:b6:d0:
9b:3a:6a:45:5c:58:1b:c2:c5:65:87:fd:fa:5d:a4:61:48:c7:
28:cc:e4:6f:00:6e:6c:89:f1:00:81:7d:bb:5e:f5:3c:21:61:
2d:32:d1:f6:66:e6:ce:63:26:6d:2d:05:c8:3c:91:b9:d2:9a:
88:bb:74:cc:3a:da:97:16:28:51:cc:70:16:c5:d6:82:f1:2a:
af:18:7a:32:3e:6f:ee:a5:67:9c:3f:b8:6d:44:db:45:21:73:
33:36:b8:b2:de:c9:f4:0a:7c:23:d2:94:ec:58:cd:ee:ac:23:
ef:e7:a9:f5:7a:f9:7c:39:81:07:53:eb:07:cd:a7:3c:ae:0b:
8d:94:64:72:83:05:cf:8b:92:30:59:ea:57:07:f8:e5:d0:6a:
56:a7:ac:4b:8f:5d:4a:26:b3:a6:11:4f:81:95:9b:19:56:3b:
2e:4e:e1:c4:15:95:6e:02:a2:3c:9d:38:f2:e6:ba:69:5c:7f:
97:11:2f:8a:93:17:a9:6f:3b:e9:f9:a4:d4:30:f7:34:cc:94:
86:8f:81:39:65:b2:dd:e8:6b:dd:d7:c2:9c:0a:53:c7:6c:a7:
e6:b2:be:75:9f:ba:b2:db:f6:83:10:9c:0d:aa:55:97:bf:ff:
29:0f:00:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:02:32 2026 by rpki-client