Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft
File: uMiqGHMPSoPihSxWklUau1se5-o.mft (raw, json)
Hash identifier: +YTmQjGifPFJhRkM0L2m380wHIC2rcTFa9ilCDz8G4s=
Subject key identifier: 24:32:E3:59:4E:8F:64:E1:26:2F:8F:42:90:D6:E5:01:FC:E9:F0:0F
Authority key identifier: B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
Certificate issuer: /CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Certificate serial: 019FA9079FE2D2DDAAD002327402D5590AD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft
Manifest number: 19E1
Signing time: Tue 28 Jul 2026 14:01:16 +0000
Manifest this update: Tue 28 Jul 2026 14:01:16 +0000
Manifest next update: Wed 29 Jul 2026 14:01:16 +0000
Files and hashes: 1: 1-FwXe7PZZn8pbfNoA5f3LaxA9Z4.roa (hash: VNrmRdyCEMk5sVsUYPMlRs6jibn3G+c48bYYZcPJruY=)
2: 1v0gzSVrdpHJ1kxvOwfKSyYCpL8.roa (hash: cmDo8iK0CyxoS3TeSJaKn0b54YS7ZfZ1R+BFgSwd9T4=)
3: BeOlGfd4kyL56CFBTNlFeg1iQCc.roa (hash: 6DQD4VPy7IHhfQDtQNtD6rCp0/TWA+VmwTvJtNQ72aQ=)
4: IuF3Oww8F31vgCYdvmVX_Mcdfds.roa (hash: ZdUD8wHqLKgu3jLFYnYVv3d4B4ky6vIxcrxoHDIpU+w=)
5: IzgEkRNH1DYPVjDGLXtC7WBaydw.roa (hash: Li3+jB8itS16vQfr0gu2Bq1HWyQPtGQdjr3ari25zDc=)
6: etyrPt1aZEu7O63zljCUb1u_zQU.roa (hash: hrkIclXJJEK/pVdQYztmKRJMv7stBIcGF3RpANQ6FpQ=)
7: uMiqGHMPSoPihSxWklUau1se5-o.crl (hash: DUsvY8r96+/5hEglAYEtjkzCK0bwagNpGlWeQ8pOmtY=)
8: uyDd6_WnW5b42bW_ImjP5ZvDqpc.roa (hash: OGUiJNuUA+4RM8D8fSwbQDp/GrlNdWNfd8TIRpipQ6E=)
9: yP46kIpWtOqNANJHH7Ze_2pu2vw.roa (hash: oclUAkD+j2AdtktvuOa/dXAYpExh9g3kYwl48UqmTJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:9f:e2:d2:dd:aa:d0:02:32:74:02:d5:59:0a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Validity
Not Before: Jul 28 14:01:16 2026 GMT
Not After : Jul 29 14:01:16 2026 GMT
Subject: CN=2432e3594e8f64e1262f8f4290d6e501fce9f00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:66:44:12:d6:2e:25:56:03:f8:59:91:c4:ca:
19:88:26:24:7c:94:cc:a5:87:42:43:50:e4:2e:c9:
09:16:21:c4:9f:33:43:ca:4a:d8:8d:1c:43:af:6d:
86:45:8d:5a:f5:48:88:39:21:89:ba:ff:38:53:d0:
48:92:88:d7:1f:2a:12:65:41:52:e7:36:5a:9b:fb:
f5:27:b7:fa:0f:d6:3c:87:fe:51:e6:ff:66:46:1e:
4e:51:41:74:7d:9a:f8:31:47:c2:2e:56:18:e6:46:
e4:e0:4f:22:e5:af:d0:7a:80:f2:3d:10:10:90:8e:
8e:f9:ef:b9:b1:ec:34:89:0f:9c:b8:26:87:73:8f:
4e:9f:eb:f7:e0:a6:d5:55:6e:37:cc:e3:37:04:14:
88:40:93:8c:90:70:ee:ff:22:b3:1e:59:fe:b6:5a:
6b:84:84:ed:a3:b8:df:0c:45:6b:4c:26:34:e6:77:
b4:40:3f:d5:be:2c:a6:9d:12:da:d8:67:52:42:97:
3c:b1:31:4c:8f:b2:ec:30:e3:ae:e9:d4:61:83:24:
bf:5c:f6:10:53:cc:7b:78:e9:b0:7e:66:54:db:4d:
44:e2:08:68:94:55:ab:e8:fe:d9:82:48:21:2e:1f:
bd:a6:9d:eb:be:42:c7:a0:17:cc:14:c7:b6:2b:7d:
e3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:32:E3:59:4E:8F:64:E1:26:2F:8F:42:90:D6:E5:01:FC:E9:F0:0F
X509v3 Authority Key Identifier:
keyid:B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:80:64:a5:f4:ab:b4:69:5f:34:69:08:b4:d3:ca:67:ee:8e:
25:b6:57:37:73:01:03:51:0b:f2:53:8f:46:f0:64:f6:62:e1:
3b:ab:10:b4:8a:30:26:5b:80:3c:dd:ae:ed:d0:9d:96:6f:0e:
c2:cb:00:15:97:9d:12:20:6e:e1:51:cf:37:cc:66:29:fc:4b:
5d:78:ec:8b:fb:5a:6e:f5:ff:5e:a8:bf:8c:ea:9e:cf:67:96:
75:73:7f:34:16:27:d0:b9:ff:41:36:50:62:06:5e:5a:ce:97:
a6:f6:82:c6:78:1a:e1:cc:fc:96:c9:95:47:3e:be:df:be:ae:
be:02:0c:3c:16:68:a3:04:f1:d0:61:8e:08:0f:e9:4b:98:56:
75:ae:50:f8:cd:f1:7a:96:d7:7f:92:de:cb:9d:0f:0a:92:a4:
d3:d4:93:97:fa:9b:2d:f0:0b:7a:fb:d6:72:b9:9f:81:a4:cc:
fd:bb:9a:e0:90:9b:ce:d3:67:5c:fd:23:4d:e1:83:b3:1d:1e:
f2:c3:43:fa:18:18:19:63:49:35:d5:2e:73:a2:e2:fb:e7:ed:
72:8a:56:f4:40:b4:5c:30:c3:8a:7b:17:00:e8:6d:6b:30:36:
54:c4:d8:66:ef:ef:48:e1:88:bf:4f:1c:6e:48:ad:5d:b0:28:
fb:b6:27:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:10:58 2026 by rpki-client