Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
File: ume_97rR64OEtYXfe-8SBvfxn34.mft (raw, json)
Hash identifier: ov2JaKjLRPmrnyGRA1T6xeM9mFwnzRnGxpxHY7shbsk=
Subject key identifier: 15:18:60:8C:35:BA:6B:36:4F:EC:46:0D:6B:25:71:8B:18:94:00:7E
Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
Certificate issuer: /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Certificate serial: 019D9C99F895974CF0FC785CA8712C83FF63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
Manifest number: 1072
Signing time: Fri 17 Apr 2026 18:00:29 +0000
Manifest this update: Fri 17 Apr 2026 18:00:29 +0000
Manifest next update: Sat 18 Apr 2026 18:00:29 +0000
Files and hashes: 1: BDT11QF-TtgdWALp45xoyYelUsM.roa (hash: mujOfcZnyEUoIqlubLK7erXRFeA189kfqWm71HEHJLA=)
2: DlL96hxxwcy8Kwd8DQrZphzJ2xQ.roa (hash: douTIG2rpH9W5IASQHZjad+O9ORB6/ZQHqnsPcQDa1Y=)
3: EVJm44_qM79rFFxjaBYVRCtqVwc.roa (hash: nQKe6AiCZP429Q5zEhReB+qr5inljkvblMvj0QyfEAw=)
4: EZ3QYuO1aqPZJjLHT0YYVGkNCoQ.roa (hash: VhRxVbInTPM1O+Ldm/7obKGqKOZ2+6LZ1EZrcIQqOtM=)
5: GTk4_xkEVcCortfUUwlKNErPXJ8.roa (hash: uEhgRh2xa40WAcBKwOTkS5sGlJsngCqmoIk1TCwsS1s=)
6: SM6e5UqBHogNbgt0o12BmkZX2DY.roa (hash: U4nFBrr+xudjO3gD5UENImDfwahddAJuHGHpyaSej5k=)
7: fMPPEhoc1eJ7TtYJwhoTEBEj3u0.roa (hash: TFEzfDo3Zwa4HL59NImWxFGsVixNQrbjisILgLkXLHY=)
8: ume_97rR64OEtYXfe-8SBvfxn34.crl (hash: wgXSkF53muluZUyHOms8oojabqNcsToE5U9T5OLcPEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:99:f8:95:97:4c:f0:fc:78:5c:a8:71:2c:83:ff:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Validity
Not Before: Apr 17 18:00:29 2026 GMT
Not After : Apr 18 18:00:29 2026 GMT
Subject: CN=1518608c35ba6b364fec460d6b25718b1894007e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:41:1b:1a:90:63:71:80:e5:e6:f3:a3:6d:35:
22:e1:62:43:2c:08:60:d3:0f:c3:75:5c:ea:6c:5e:
61:71:f3:5f:c3:5a:7c:ea:de:86:80:f9:5e:2b:33:
15:15:74:73:08:b5:04:ba:15:b9:64:be:0f:c9:ad:
a8:24:d6:c3:53:4e:1d:33:4d:8f:5e:8d:28:b3:d6:
57:a0:fd:42:f8:bc:77:f9:15:67:19:d9:9f:31:2e:
69:cb:56:b6:d1:3c:ef:09:98:77:40:02:f5:ed:24:
06:18:f7:5d:8a:e4:09:c6:88:0d:83:31:1a:10:46:
a9:b5:74:c2:55:ec:51:fe:87:4a:7f:46:7b:0a:49:
4b:8f:a6:c4:b4:fe:f6:92:a2:f7:d7:37:f9:50:cc:
ce:ad:11:cf:c4:06:14:9a:3d:6f:4e:e4:ad:59:75:
21:02:3c:3c:79:68:b7:17:ae:39:59:1d:44:93:63:
f7:19:92:10:9e:69:7e:dd:87:a1:ed:99:84:f6:2d:
b7:80:a6:68:1b:b5:3a:9b:f4:72:9f:37:71:42:56:
ee:ac:c7:f4:5f:39:11:82:cb:83:d0:83:fd:68:e4:
42:e5:72:eb:cb:6b:e4:55:39:36:f5:d3:cb:6c:6e:
d8:cd:a0:a3:5f:38:89:54:2d:a6:75:af:58:9d:cb:
a6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:18:60:8C:35:BA:6B:36:4F:EC:46:0D:6B:25:71:8B:18:94:00:7E
X509v3 Authority Key Identifier:
keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:43:f0:3b:79:26:df:e8:3c:3f:b5:53:52:75:1d:29:44:b5:
2f:37:04:6f:69:4c:60:b1:f6:77:a2:6f:0c:8e:ac:2b:55:f0:
d5:9d:de:47:95:e5:78:7e:73:37:09:75:1d:e5:08:4b:8b:69:
4e:ef:8b:a7:a0:fb:37:c2:97:14:ec:e6:ee:b5:98:ad:fe:49:
eb:5b:38:16:b5:d1:4b:03:c1:97:e7:bd:b2:6f:67:8d:cf:d5:
c7:9d:fe:77:6e:e0:79:2c:eb:d6:45:68:21:9a:6f:ee:40:31:
a2:7e:89:67:fd:ae:19:e9:bc:1e:4a:aa:98:16:d9:25:61:bf:
38:8e:e9:fc:3d:ea:50:b5:d5:8b:f4:16:4f:4a:2e:21:2f:47:
66:a1:ff:c8:39:16:ec:10:7f:b7:5d:a1:6a:e3:e2:6e:9a:2e:
0e:5b:a2:51:66:6f:b7:59:d7:0c:27:fd:66:36:32:f1:a8:ab:
a0:7d:f9:54:1f:ec:e3:69:21:7e:c2:23:df:10:72:a5:00:51:
0e:f2:3d:6d:e6:22:f6:34:8b:c7:86:db:ce:a3:dc:f7:a3:d9:
70:9e:eb:a2:8b:95:e5:0f:98:b0:e4:4d:bc:03:c5:2b:76:96:
8d:2f:e8:dd:f3:5e:e4:ad:16:ba:fb:19:45:26:95:bf:28:65:
b8:11:90:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:04:26 2026 by rpki-client