Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft
File: uMiqGHMPSoPihSxWklUau1se5-o.mft (raw, json)
Hash identifier: /hIwn2yDwxxRyfkzShOGa0GQ1spcVnpv13hJSsyHT3I=
Subject key identifier: 3A:5C:69:3F:EF:B9:5D:EF:24:2B:E7:32:2A:A3:20:E2:C4:40:99:5A
Authority key identifier: B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
Certificate issuer: /CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Certificate serial: 01A0BF8C7744A37628CBCE2846525AF519A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft
Manifest number: 1A72
Signing time: Sun 20 Sep 2026 16:00:48 +0000
Manifest this update: Sun 20 Sep 2026 16:00:48 +0000
Manifest next update: Mon 21 Sep 2026 16:00:48 +0000
Files and hashes: 1: 1-FwXe7PZZn8pbfNoA5f3LaxA9Z4.roa (hash: VNrmRdyCEMk5sVsUYPMlRs6jibn3G+c48bYYZcPJruY=)
2: 1v0gzSVrdpHJ1kxvOwfKSyYCpL8.roa (hash: cmDo8iK0CyxoS3TeSJaKn0b54YS7ZfZ1R+BFgSwd9T4=)
3: BeOlGfd4kyL56CFBTNlFeg1iQCc.roa (hash: 6DQD4VPy7IHhfQDtQNtD6rCp0/TWA+VmwTvJtNQ72aQ=)
4: IuF3Oww8F31vgCYdvmVX_Mcdfds.roa (hash: ZdUD8wHqLKgu3jLFYnYVv3d4B4ky6vIxcrxoHDIpU+w=)
5: etyrPt1aZEu7O63zljCUb1u_zQU.roa (hash: hrkIclXJJEK/pVdQYztmKRJMv7stBIcGF3RpANQ6FpQ=)
6: nmL9EQqvDKrR3Hs40Iu8m1-vIzY.roa (hash: DWKdYwXjR7CbcwQ5T5LM5T6YAURcXQrAsUonMFFVa8s=)
7: uMiqGHMPSoPihSxWklUau1se5-o.crl (hash: Eb1On09XrRR0dmbO9Hlrmpeni50IcX+eMFrE5qs/SZQ=)
8: uyDd6_WnW5b42bW_ImjP5ZvDqpc.roa (hash: OGUiJNuUA+4RM8D8fSwbQDp/GrlNdWNfd8TIRpipQ6E=)
9: yP46kIpWtOqNANJHH7Ze_2pu2vw.roa (hash: oclUAkD+j2AdtktvuOa/dXAYpExh9g3kYwl48UqmTJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:8c:77:44:a3:76:28:cb:ce:28:46:52:5a:f5:19:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Validity
Not Before: Sep 20 16:00:48 2026 GMT
Not After : Sep 21 16:00:48 2026 GMT
Subject: CN=3a5c693fefb95def242be7322aa320e2c440995a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:87:f9:8b:90:7b:dd:28:1d:2e:70:6d:bf:fa:
ec:c4:2c:c6:68:30:7b:7a:34:a9:af:ab:0d:45:d6:
f5:ad:87:60:6d:a3:bd:e1:13:ac:0c:30:4e:25:c2:
38:98:d1:1b:44:c2:d7:b7:67:e0:20:4c:32:55:72:
c9:bc:9b:c6:a1:d3:67:26:37:04:10:bf:32:56:70:
8d:72:d5:c5:b5:c4:80:f5:05:d9:34:6b:e4:ec:1f:
33:06:ea:69:a3:a6:be:7b:d0:0b:f3:ba:98:95:b0:
1a:0c:08:4a:4a:98:8a:d6:35:2d:61:29:ba:56:6f:
23:9b:ec:21:40:a4:d7:8d:44:20:14:74:3b:12:a5:
47:b6:81:6f:05:70:0d:4f:3e:24:72:aa:cd:23:5a:
37:05:0a:1a:f9:bd:c6:25:ff:d7:08:5d:a5:73:d7:
8e:51:a3:32:e4:ca:89:d1:20:0a:5f:bd:cb:39:ac:
97:c9:1f:62:9a:0c:1e:4c:d6:6c:53:c1:8b:8b:b0:
00:7d:ce:62:b7:80:4a:b6:e8:7b:11:d1:77:01:c7:
14:6e:b7:a7:e6:5f:02:13:ee:f8:38:c6:8e:f8:38:
ee:42:32:e7:a2:d3:80:ad:c3:8c:96:32:c1:7c:15:
2c:e2:d6:e1:d4:ac:39:d6:eb:b4:d3:52:1f:c5:96:
f2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5C:69:3F:EF:B9:5D:EF:24:2B:E7:32:2A:A3:20:E2:C4:40:99:5A
X509v3 Authority Key Identifier:
keyid:B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:38:17:c0:84:c4:85:20:d2:69:11:ec:64:57:cf:58:b5:57:
e1:a2:c8:fb:48:02:57:ee:8b:c5:c8:72:82:f4:65:93:1a:3b:
ca:cf:20:e4:38:2e:6d:b7:20:07:6e:23:b5:da:60:88:dc:9e:
2d:5e:16:a5:63:2e:b1:0e:36:60:e5:fa:b7:32:ec:a5:aa:0a:
61:b3:db:1e:73:f6:d8:d8:c9:65:4f:71:b5:2e:74:8a:6f:80:
1d:6a:26:fb:1b:b5:0c:f8:1d:da:16:ae:4f:36:1f:a0:54:57:
b9:58:e6:13:ac:7c:4d:b2:ec:22:cc:9e:d1:3a:c5:89:52:72:
89:6c:56:49:ae:4e:16:52:a6:ca:00:35:ca:7b:3e:15:cf:be:
75:86:29:8d:8c:44:80:0a:68:f9:f5:55:ed:5e:cd:51:d5:d3:
25:47:07:96:b0:d8:e3:39:3f:19:20:d6:10:d7:e6:fe:4c:97:
85:bd:ca:a7:b2:6a:a5:b0:42:f0:a1:c8:d8:ab:a3:ec:ca:9d:
9c:28:be:56:b3:19:62:39:94:5b:02:70:3a:65:dc:36:44:39:
87:b9:fe:c7:0e:71:c2:2f:f7:95:2d:9d:58:7e:07:fd:0a:7d:
bf:ae:8f:fe:23:d5:ae:9d:f6:b3:eb:98:35:22:89:9a:aa:a1:
a5:7d:7d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:41:37 2026 by rpki-client