Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/945b53-d788-487b-a982-0903ee7c1902/1/bUmIt5OIS3moT-NFY9A581RsGF8.mft
File: bUmIt5OIS3moT-NFY9A581RsGF8.mft (raw, json)
Hash identifier: MobJ4FkbpQw/GxxllL5+HY2gGkusXIMyeUY7XwYTrRs=
Subject key identifier: 70:D0:45:34:BE:2D:37:C0:33:7D:91:0B:76:7D:0D:1A:5F:62:C2:A7
Authority key identifier: 6D:49:88:B7:93:88:4B:79:A8:4F:E3:45:63:D0:39:F3:54:6C:18:5F
Certificate issuer: /CN=6d4988b793884b79a84fe34563d039f3546c185f
Certificate serial: 01A0BD2FD01D4DD0B99899ADAE8787E830C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bUmIt5OIS3moT-NFY9A581RsGF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/945b53-d788-487b-a982-0903ee7c1902/1/bUmIt5OIS3moT-NFY9A581RsGF8.mft
Manifest number: 0428
Signing time: Sun 20 Sep 2026 05:00:22 +0000
Manifest this update: Sun 20 Sep 2026 05:00:22 +0000
Manifest next update: Mon 21 Sep 2026 05:00:22 +0000
Files and hashes: 1: bUmIt5OIS3moT-NFY9A581RsGF8.crl (hash: tI/5XDtIdAdKamlfDYAMMAeL3npTs9bOxHOzw8m4tzQ=)
2: uwtH6XSMIlNNvLETWa2zBCtCv54.asa (hash: PZz6lUyUjmeDMW0cN5tom+AMwKUKSuKpAQKvZ9tNaSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/945b53-d788-487b-a982-0903ee7c1902/1/bUmIt5OIS3moT-NFY9A581RsGF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/945b53-d788-487b-a982-0903ee7c1902/1/bUmIt5OIS3moT-NFY9A581RsGF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bUmIt5OIS3moT-NFY9A581RsGF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:2f:d0:1d:4d:d0:b9:98:99:ad:ae:87:87:e8:30:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d4988b793884b79a84fe34563d039f3546c185f
Validity
Not Before: Sep 20 05:00:22 2026 GMT
Not After : Sep 21 05:00:22 2026 GMT
Subject: CN=70d04534be2d37c0337d910b767d0d1a5f62c2a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6b:ef:70:ad:4e:eb:88:c0:2e:63:15:d2:02:
54:08:6c:9e:5c:a9:60:b0:a8:de:11:7e:3f:0f:64:
d2:3a:ae:bf:f5:89:99:9d:71:30:49:28:39:b9:6c:
e1:19:7f:73:1c:ec:55:1a:e3:ef:25:3b:fc:95:0b:
8f:9f:f2:64:83:c5:f5:c8:7d:b1:f6:35:7e:a4:73:
de:34:2f:1a:be:83:ac:95:ee:86:78:5b:c8:97:4a:
de:f4:5c:3a:1f:f1:fe:07:e3:6a:62:3e:0e:92:e6:
da:c8:e2:6e:86:62:44:9e:e6:bd:53:a4:31:3d:17:
a5:56:47:11:90:21:d0:d6:12:8e:77:91:b2:e5:65:
aa:aa:90:d0:32:78:6a:54:04:a2:f1:07:20:05:1d:
19:9e:98:de:9f:eb:e8:a6:58:91:ee:6c:b7:60:5d:
8e:d3:c9:30:93:0d:21:63:ef:de:c4:a9:9f:99:5e:
df:53:9b:ac:f6:e2:48:48:ed:5d:f6:d9:1a:e9:6a:
97:d2:81:44:f2:aa:0e:04:7e:08:79:0f:9d:3a:bc:
53:72:86:e1:72:47:0d:f2:9d:0e:1b:77:5d:b4:75:
68:d1:c8:50:0f:7c:31:bb:0b:ec:41:59:5f:f5:f8:
34:4a:7e:91:28:fd:5f:1a:7e:d5:7c:70:db:c8:7f:
11:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D0:45:34:BE:2D:37:C0:33:7D:91:0B:76:7D:0D:1A:5F:62:C2:A7
X509v3 Authority Key Identifier:
keyid:6D:49:88:B7:93:88:4B:79:A8:4F:E3:45:63:D0:39:F3:54:6C:18:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bUmIt5OIS3moT-NFY9A581RsGF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/945b53-d788-487b-a982-0903ee7c1902/1/bUmIt5OIS3moT-NFY9A581RsGF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/945b53-d788-487b-a982-0903ee7c1902/1/bUmIt5OIS3moT-NFY9A581RsGF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f2:8a:3b:55:0e:9a:47:2c:8a:0f:e4:35:2c:a4:44:0e:7b:
bf:b3:c9:8b:7d:fd:bd:0e:3b:04:09:a0:d7:89:33:db:00:1a:
05:a1:77:ff:65:6d:6a:75:80:e8:ee:8a:07:54:1b:95:ff:8e:
07:8d:5a:c3:ad:56:73:16:84:36:aa:92:95:83:2a:a2:46:58:
0d:b4:23:f6:48:9c:96:26:c7:ea:c3:2b:0d:64:c3:c8:dd:44:
2b:d4:da:29:95:e9:fb:01:27:40:9f:b0:5d:98:18:24:a7:bc:
af:69:d5:a2:a8:ed:41:7a:ee:72:5a:35:e6:2a:c6:d4:97:88:
4d:d2:00:c5:91:ae:e6:b1:df:d0:b1:7b:14:47:ba:9e:a8:a4:
63:b1:96:d3:d7:18:24:e6:67:fb:3b:83:08:a0:c2:18:84:ee:
24:7b:a4:6d:a4:0e:dd:a8:a4:24:cc:6f:f3:ed:5c:d2:e0:c5:
80:4b:30:ec:da:6e:0f:56:0d:86:9c:64:4b:af:0e:1a:81:89:
2a:fc:42:7e:34:cb:ba:d4:8f:a8:d3:ac:f7:89:a4:51:9d:e2:
4f:b4:21:0e:e6:e1:a0:ab:10:bf:fc:9f:ae:7c:f6:28:48:2b:
8e:d2:87:73:ec:bf:69:3d:1b:af:02:8a:8a:de:d9:dc:c1:7d:
20:0b:01:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:13:42 2026 by rpki-client