
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
File: UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft (raw, json)
Hash identifier: wRZ6TmpAQAvGj+Ibnw3T+VJFmRThY/DD83/xNJnCMIs=
Subject key identifier: 3A:B2:AA:AC:B4:50:59:10:C7:A9:50:1B:95:EF:2A:DE:B6:E5:C4:8B
Authority key identifier: 50:C9:DA:14:83:FE:39:93:D1:98:52:60:61:97:35:C4:CF:D3:80:33
Certificate issuer: /CN=50c9da1483fe3993d1985260619735c4cfd38033
Certificate serial: 019FAABE49EFF9C3C346BC6629D046BEF3F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 22:00:25 +0000
Manifest this update: Tue 28 Jul 2026 22:00:25 +0000
Manifest next update: Wed 29 Jul 2026 22:00:25 +0000
Files and hashes: 1: R5_iJAHMim0AgymJSQ6r4wQbiHw.roa (hash: EQeRHkG43biXk81xozYoB7VEoug0HoUQn327W+HkcVI=)
2: UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl (hash: TgeBxxrQ4BNwthGrDLWqa31fCbdI0UN1JtNr+X2xYec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:49:ef:f9:c3:c3:46:bc:66:29:d0:46:be:f3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c9da1483fe3993d1985260619735c4cfd38033
Validity
Not Before: Jul 28 22:00:25 2026 GMT
Not After : Jul 29 22:00:25 2026 GMT
Subject: CN=3ab2aaacb4505910c7a9501b95ef2adeb6e5c48b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5d:6c:cc:43:d0:cc:56:fb:90:5a:b3:ed:c5:
aa:82:cb:36:7a:31:3c:02:1b:50:78:3d:d0:10:b2:
4d:6c:87:49:73:2c:b7:92:e5:d2:7f:01:6f:ae:9a:
3d:1c:46:50:e7:e8:79:44:f3:17:12:0c:70:70:e2:
86:b1:55:33:6a:fb:6e:a5:de:1f:79:bb:30:5b:5f:
6c:fa:cb:35:76:b6:60:03:60:0d:00:17:21:89:f7:
83:1e:36:58:7d:fc:20:40:f8:fb:fb:6e:5b:63:0b:
d7:fd:b0:ef:2f:06:43:9d:0c:dc:8f:ee:1b:7b:d4:
8e:3d:46:16:86:0b:d0:05:8e:05:b7:96:a6:ae:f2:
8c:44:0b:fc:47:8f:9a:e9:91:af:0e:60:78:c6:88:
18:8a:0f:04:65:e6:98:45:2e:e6:75:2a:d7:3e:52:
8f:2e:f7:49:d5:eb:62:02:2c:d8:da:ea:93:e9:03:
b5:46:c4:18:9b:a7:97:13:8e:ff:54:d6:1a:5e:a0:
83:cd:99:e4:42:c5:59:eb:38:22:99:ed:62:33:ad:
f7:7f:90:68:d5:95:fc:ae:4f:4c:9a:04:aa:e5:ed:
15:5c:a2:57:8b:2f:c1:ed:8a:fe:38:92:0d:14:52:
90:b2:7e:76:0d:61:72:30:5c:0e:87:bd:4a:8c:3f:
36:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B2:AA:AC:B4:50:59:10:C7:A9:50:1B:95:EF:2A:DE:B6:E5:C4:8B
X509v3 Authority Key Identifier:
keyid:50:C9:DA:14:83:FE:39:93:D1:98:52:60:61:97:35:C4:CF:D3:80:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:9e:d6:a0:06:4a:bc:e3:c5:98:28:32:6c:f2:58:1e:b5:12:
60:39:45:ad:55:80:17:ff:4a:a4:19:23:e1:46:25:a5:4f:3e:
80:8f:8a:06:0a:41:e7:d7:2e:d8:1e:18:a9:b4:57:45:5f:1c:
4f:10:3b:8c:80:ce:6b:a0:6e:51:06:05:11:ed:0e:07:86:f6:
f2:56:00:64:85:51:9a:12:4e:95:f8:31:2a:95:82:6d:43:8b:
2e:29:7e:b2:a3:e4:09:5c:15:27:6d:73:a4:b8:a9:16:a5:9b:
3c:40:d3:59:07:9e:c3:9a:e8:14:ad:60:f8:5d:54:6c:26:12:
78:ce:c6:b6:cd:c1:69:9f:49:91:5c:a5:1d:99:b6:9d:14:c5:
ca:8c:0b:24:31:46:66:2c:5c:88:0f:7f:96:a5:29:78:fa:56:
b3:a8:22:71:92:e2:0f:26:02:73:a3:f7:7b:ca:56:4b:b8:91:
43:30:15:52:aa:30:22:7f:d5:d6:7d:88:c5:a5:b4:85:c1:1f:
ed:ed:c0:d8:65:33:9c:61:5e:48:33:87:a9:64:b5:b0:bf:ca:
64:72:b5:7b:86:97:1f:88:86:af:76:74:24:98:9a:08:70:c6:
c6:55:42:19:76:b1:c6:d4:16:c7:51:3f:78:af:51:80:6d:fc:
a3:72:85:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:00:01 2026 by rpki-client