Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
File: ume_97rR64OEtYXfe-8SBvfxn34.mft (raw, json)
Hash identifier: S287uQgkvCMf0PHC2yoCcd1qY8Hx73hZhAGxSuiHWOM=
Subject key identifier: 3F:0B:96:2D:C0:74:AA:E9:55:66:15:0D:B0:8C:6D:3A:AD:4F:60:3E
Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
Certificate issuer: /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Certificate serial: 019CAD59AE004C0F108B4908707160171E85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
Manifest number: 0FF4
Signing time: Mon 02 Mar 2026 07:01:01 +0000
Manifest this update: Mon 02 Mar 2026 07:01:01 +0000
Manifest next update: Tue 03 Mar 2026 07:01:01 +0000
Files and hashes: 1: EZ3QYuO1aqPZJjLHT0YYVGkNCoQ.roa (hash: VhRxVbInTPM1O+Ldm/7obKGqKOZ2+6LZ1EZrcIQqOtM=)
2: GTk4_xkEVcCortfUUwlKNErPXJ8.roa (hash: uEhgRh2xa40WAcBKwOTkS5sGlJsngCqmoIk1TCwsS1s=)
3: SM6e5UqBHogNbgt0o12BmkZX2DY.roa (hash: U4nFBrr+xudjO3gD5UENImDfwahddAJuHGHpyaSej5k=)
4: fMPPEhoc1eJ7TtYJwhoTEBEj3u0.roa (hash: TFEzfDo3Zwa4HL59NImWxFGsVixNQrbjisILgLkXLHY=)
5: h_2qOElNrBzAnf1LUZW2aWng-XM.roa (hash: rICSl+rZfnDOtpaXQ1fWuEhsduvsyeMqtvQvV1DpKH8=)
6: ume_97rR64OEtYXfe-8SBvfxn34.crl (hash: gaNhKoc2Xvv6jX0WceCbV8SK4+4SlMg5zvoSxoI3q1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:ae:00:4c:0f:10:8b:49:08:70:71:60:17:1e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Validity
Not Before: Mar 2 07:01:01 2026 GMT
Not After : Mar 3 07:01:01 2026 GMT
Subject: CN=3f0b962dc074aae95566150db08c6d3aad4f603e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f6:0d:e7:3c:25:de:6e:6c:8e:ed:f6:3b:c2:
a9:85:5d:ec:f7:be:7c:3a:0c:b8:69:3b:48:12:1a:
2c:c2:9d:7c:86:81:a8:97:89:9a:3e:b1:c1:f5:c9:
01:04:63:59:21:ed:03:dc:7c:ab:b3:bc:c3:26:11:
8e:ed:62:8a:04:1e:0f:e4:5c:32:70:e7:54:04:ff:
dc:7d:e1:76:31:a6:3e:1b:29:3a:ed:8d:88:ee:e2:
70:35:82:63:25:a2:aa:d4:9c:a2:11:6f:4b:a0:61:
ce:d4:be:cf:78:a6:c8:70:09:fa:5b:40:35:1a:e2:
fa:a4:79:67:b5:13:a2:9b:17:b2:d6:2d:8c:d1:78:
56:22:0a:67:11:25:3a:da:be:76:d1:7c:ff:db:73:
c8:a6:59:1d:e9:e3:e7:e6:90:a4:ee:d0:a9:0f:54:
e7:dd:2d:cd:17:1d:7f:27:4a:8f:c8:e2:89:72:49:
47:1c:95:01:0d:8f:17:d9:77:7e:11:a4:25:70:c3:
59:7e:04:1b:36:46:8b:19:36:8f:e2:38:f1:e6:92:
42:b9:69:f0:89:71:7c:35:a7:87:b1:6c:aa:90:58:
47:11:59:b6:2c:97:3e:ac:7c:87:a9:9f:a0:15:37:
7e:fb:9b:f0:d5:f9:e6:ce:9d:6a:e6:99:81:9c:58:
b2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0B:96:2D:C0:74:AA:E9:55:66:15:0D:B0:8C:6D:3A:AD:4F:60:3E
X509v3 Authority Key Identifier:
keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d9:7c:2c:8a:37:42:ff:92:4d:ed:1f:1e:bb:34:3c:b0:ee:
00:99:76:64:57:3b:8b:15:ca:81:fe:4f:7a:1d:c3:d4:d4:37:
18:ec:fd:43:7d:92:8c:58:64:a9:ad:4d:87:84:f3:89:6e:71:
07:06:d9:ea:66:3e:61:03:99:68:d7:98:65:eb:2f:b2:03:eb:
98:12:cd:f3:0a:27:9a:e2:24:d5:c9:81:05:b3:99:66:51:8d:
b2:2f:78:ae:ab:9f:f9:84:78:ef:8a:d1:ff:b7:b6:ce:e5:ee:
28:a3:77:53:59:8c:80:38:f8:eb:a4:71:a9:d8:88:bc:73:f0:
80:28:aa:e3:99:df:df:6f:88:d2:a1:2a:a8:7f:64:a3:3d:c8:
71:30:3d:c2:c8:1a:6b:d7:59:1b:3e:68:d5:c0:8e:d2:bd:75:
c7:89:35:2b:a6:04:be:17:dd:13:c7:3f:9f:72:0c:2b:ea:d8:
b2:8f:f8:f5:6a:ad:a4:92:15:43:6d:46:04:f4:63:83:16:7b:
0c:83:81:16:5d:3d:be:08:e4:e6:32:af:d4:0f:42:0b:2c:17:
df:83:97:a4:03:31:02:ef:2c:c7:61:6d:c9:9e:6d:f5:1f:0d:
f3:fb:76:78:28:a6:3c:8e:08:48:8e:45:89:28:88:99:4d:22:
86:c8:45:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:26:22 2026 by rpki-client