Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
File: um1Gt2v9bUK71XXi8m_OE2ubam0.mft (raw, json)
Hash identifier: 3xL3jSi/CO9BHZyFYAgve1P1V7D17sUobw+zAN9gRKE=
Subject key identifier: 49:37:3B:E0:2B:26:6E:CE:5A:7C:44:11:3E:89:A7:01:D8:BB:C2:2E
Authority key identifier: BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D
Certificate issuer: /CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d
Certificate serial: 01A1DE706B011907106A31CE65FDD681458B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
Manifest number: 1AF9
Signing time: Sun 15 Nov 2026 09:01:11 +0000
Manifest this update: Sun 15 Nov 2026 09:01:11 +0000
Manifest next update: Mon 16 Nov 2026 09:01:11 +0000
Files and hashes: 1: Bm7KXTZG-GzrmHMle85VbaK0lEc.roa (hash: eP4Z4Xyrl9duYpmeFr1kOXcCCxjk6AkZ57/buELWekE=)
2: YkorEnKm6LzRmwWsxcFNFH1cULo.roa (hash: r2RXMf3T6ozI4KhQ/ydf8YGQ149Sw8bA5XoNMW2hS0A=)
3: fpbZgKklTRGbUlBw5VfG2XolpT4.roa (hash: VEiVSo2qKOGnxDIsrhNTfOH5xMpm4xzV14ZuiE7aVXQ=)
4: fwb4YpE_ObhkPJOOtInq4VZSkFQ.roa (hash: ejLh2AtjPL3jxNb43Lf5+3Lqqs/Okt+3XnJA445dp+0=)
5: um1Gt2v9bUK71XXi8m_OE2ubam0.crl (hash: i80UXkY9Zs7tStAtd801vhd1nGLZmDA+Qa1jaQKt7zI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:6b:01:19:07:10:6a:31:ce:65:fd:d6:81:45:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d
Validity
Not Before: Nov 15 09:01:11 2026 GMT
Not After : Nov 16 09:01:11 2026 GMT
Subject: CN=49373be02b266ece5a7c44113e89a701d8bbc22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ec:26:a6:a7:a1:3b:c5:a1:ec:3e:5a:63:9b:
52:5e:01:92:f3:bf:5c:6d:92:32:ef:d6:5c:2d:65:
a5:23:59:f7:68:1a:10:d9:03:45:6b:c5:ea:2a:5b:
63:ae:2f:ea:ce:53:42:a4:8e:6c:3d:70:f5:28:e0:
a1:e3:e8:f8:93:3e:11:39:a6:a6:c5:95:fb:16:fb:
9d:d3:c7:cc:7b:ee:6e:8d:f2:0f:de:8a:eb:e2:18:
0d:eb:20:bc:9c:89:69:76:e2:2b:a1:c7:1c:76:59:
94:ea:d9:d7:99:88:21:a0:dd:67:ad:47:c6:5b:9a:
6e:c7:68:b7:4d:57:1e:f9:48:0e:4c:c1:f9:06:c9:
b2:d4:8c:90:ed:e0:91:69:0c:b2:80:c5:aa:47:1d:
2c:7a:9c:1b:a6:bb:ba:c0:36:13:82:6e:af:5a:59:
3e:da:9c:b9:a9:ef:5d:d6:9c:bf:7e:77:bc:d5:ce:
34:90:6c:33:19:fb:92:f7:c7:06:20:22:23:55:7d:
cb:7d:76:b4:50:eb:cb:7c:4e:f9:28:9f:21:46:72:
b0:f9:2a:7a:1c:aa:2f:76:76:73:f1:3c:4e:2c:0f:
66:c5:66:c0:bf:17:6e:f0:2c:c6:05:2c:35:81:88:
7b:1a:d6:00:d9:a8:4d:a6:bb:32:25:18:dc:49:fb:
1a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:37:3B:E0:2B:26:6E:CE:5A:7C:44:11:3E:89:A7:01:D8:BB:C2:2E
X509v3 Authority Key Identifier:
keyid:BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:36:d7:a4:fe:05:66:57:59:db:64:a8:ad:08:9e:fe:9d:68:
6a:ea:92:19:10:99:46:86:b5:d2:50:31:e5:c0:85:e1:c3:6e:
a8:3a:8d:96:48:a1:d8:6f:9c:ca:55:b9:f4:68:72:78:b5:57:
15:01:22:13:6b:31:7a:5d:b3:cc:95:b4:2a:0d:db:6a:1a:6e:
84:ab:bd:13:40:76:5a:d3:2c:85:10:f3:46:63:d0:d3:c8:92:
6b:54:16:30:2f:be:4d:4c:bc:4c:e4:c1:9f:16:ec:6e:76:4d:
95:6e:c6:5c:ab:e4:a0:04:f1:56:09:fc:3d:7c:01:a2:26:b7:
0b:f9:a8:1e:91:bd:b2:2a:b3:56:7c:e9:cb:45:3f:5a:97:c1:
23:5d:d7:82:06:9e:f6:72:38:d3:d4:93:b7:69:e2:8f:1d:ba:
2d:a6:13:26:3d:d2:8e:f6:bf:1f:75:a3:fb:fa:88:5c:e5:aa:
e5:da:f7:df:c8:53:e7:23:80:2b:2e:f3:3e:7f:4e:74:d5:1b:
08:ff:43:18:1d:0f:72:ac:1c:ca:b6:01:fc:cc:f1:5d:98:34:
c4:d7:ae:74:88:aa:3e:a5:5b:76:99:d7:7d:fd:d1:14:02:82:
2f:e1:f3:07:9e:29:07:a9:29:3b:4f:69:e7:32:3c:04:2d:59:
ac:ad:cd:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHecGsBGQcQajHOZf3WgUWLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNmQ0NmI3NmJmZDZkNDJiYmQ1NzVlMmYyNmZjZTEzNmI5
YjZhNmQwHhcNMjYxMTE1MDkwMTExWhcNMjYxMTE2MDkwMTExWjAzMTEwLwYDVQQD
Eyg0OTM3M2JlMDJiMjY2ZWNlNWE3YzQ0MTEzZTg5YTcwMWQ4YmJjMjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtewmpqehO8Wh7D5aY5tSXgGS879c
bZIy79ZcLWWlI1n3aBoQ2QNFa8XqKltjri/qzlNCpI5sPXD1KOCh4+j4kz4ROaam
xZX7Fvud08fMe+5ujfIP3orr4hgN6yC8nIlpduIrocccdlmU6tnXmYghoN1nrUfG
W5pux2i3TVce+UgOTMH5Bsmy1IyQ7eCRaQyygMWqRx0sepwbpru6wDYTgm6vWlk+
2py5qe9d1py/fne81c40kGwzGfuS98cGICIjVX3LfXa0UOvLfE75KJ8hRnKw+Sp6
HKovdnZz8TxOLA9mxWbAvxdu8CzGBSw1gYh7GtYA2ahNprsyJRjcSfsa1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEk3O+ArJm7OWnxEET6JpwHYu8IuMB8GA1UdIwQY
MBaAFLptRrdr/W1Cu9V14vJvzhNrm2ptMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW0xR3QydjliVUs3MVhYaThtX09FMnViYW0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lOGJlMGUtYTgwZC00YTRmLWI1MmYt
ZGZmMWNmZmI3YjE4LzEvdW0xR3QydjliVUs3MVhYaThtX09FMnViYW0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9lOGJlMGUtYTgwZC00YTRmLWI1MmYtZGZmMWNmZmI3YjE4
LzEvdW0xR3QydjliVUs3MVhYaThtX09FMnViYW0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApzbXpP4F
ZldZ22SorQie/p1oauqSGRCZRoa10lAx5cCF4cNuqDqNlkih2G+cylW59GhyeLVX
FQEiE2sxel2zzJW0Kg3bahpuhKu9E0B2WtMshRDzRmPQ08iSa1QWMC++TUy8TOTB
nxbsbnZNlW7GXKvkoATxVgn8PXwBoia3C/moHpG9siqzVnzpy0U/WpfBI13Xggae
9nI409STt2nijx26LaYTJj3Sjva/H3Wj+/qIXOWq5dr338hT5yOAKy7zPn9OdNUb
CP9DGB0PcqwcyrYB/MzxXZg0xNeudIiqPqVbdpnXff3RFAKCL+HzB54pB6kpO09p
5zI8BC1ZrK3NXA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:44:41 2026 by rpki-client