Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft
File: uMaM2mX2aWLMuWg_FVDRTlYQego.mft (raw, json)
Hash identifier: 0WVEzTLg22wxe5biRTAYsi0D7NN0l7zRf+3rtTEji1A=
Subject key identifier: 52:42:E3:6C:66:94:F1:A4:A8:01:A8:4E:74:F9:72:99:02:85:90:2C
Authority key identifier: B8:C6:8C:DA:65:F6:69:62:CC:B9:68:3F:15:50:D1:4E:56:10:7A:0A
Certificate issuer: /CN=b8c68cda65f66962ccb9683f1550d14e56107a0a
Certificate serial: 019EC0DB50D7569D36C194728CB9E8967AA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMaM2mX2aWLMuWg_FVDRTlYQego.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft
Manifest number: 0A69
Signing time: Sat 13 Jun 2026 12:00:59 +0000
Manifest this update: Sat 13 Jun 2026 12:00:59 +0000
Manifest next update: Sun 14 Jun 2026 12:00:59 +0000
Files and hashes: 1: gH0BmhGdI-4jnerabl4mUmUrBX4.roa (hash: vNs9/H6iuDqV1b/jbRlgh+sdKrOOTZh6C5aRY+PDcq0=)
2: uMaM2mX2aWLMuWg_FVDRTlYQego.crl (hash: pw9kkxifvH86XybZCEnvEQVUBU2c72J0DHikIP/w9+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMaM2mX2aWLMuWg_FVDRTlYQego.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:50:d7:56:9d:36:c1:94:72:8c:b9:e8:96:7a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c68cda65f66962ccb9683f1550d14e56107a0a
Validity
Not Before: Jun 13 12:00:59 2026 GMT
Not After : Jun 14 12:00:59 2026 GMT
Subject: CN=5242e36c6694f1a4a801a84e74f972990285902c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1c:02:76:78:4d:dc:aa:d1:e7:3b:86:1f:d5:
df:d1:85:b2:85:13:0b:b0:93:a9:56:d0:f7:0d:4b:
7b:67:8c:ae:35:46:a1:a9:cc:c9:92:76:c7:ad:31:
af:55:92:af:58:eb:61:fa:14:20:f4:a3:f6:d1:66:
9a:65:66:98:4e:c1:df:68:a4:88:49:cb:9a:fa:a0:
71:5e:b2:65:0b:aa:3c:c8:bd:35:be:79:0d:48:b8:
3b:8a:62:d8:8d:bc:3d:a3:51:f9:ca:0e:66:83:d5:
87:86:ac:96:5c:16:fb:f1:37:22:0d:f0:df:06:d1:
f5:d1:e9:70:e3:c4:b0:75:e8:1b:a1:49:9a:f5:f9:
fc:7a:fb:e6:3f:59:a5:44:e8:1f:7e:08:59:ea:90:
25:c0:ba:60:06:31:b9:a1:14:67:df:bf:4b:b8:71:
80:74:45:d2:ec:45:1a:19:6f:b3:22:12:34:2b:58:
e2:a6:e6:b1:d6:3e:8e:2d:18:15:91:e4:93:2a:9f:
b3:e4:f6:6c:61:0a:f7:be:a3:66:aa:55:13:07:f9:
ea:86:7e:99:2b:5c:c3:06:ce:59:64:3c:f9:f8:34:
a8:05:19:1f:b0:68:23:22:38:64:5c:23:f4:b3:65:
27:4c:cc:9d:83:6f:83:66:c4:3b:7d:c2:45:9e:a9:
49:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:42:E3:6C:66:94:F1:A4:A8:01:A8:4E:74:F9:72:99:02:85:90:2C
X509v3 Authority Key Identifier:
keyid:B8:C6:8C:DA:65:F6:69:62:CC:B9:68:3F:15:50:D1:4E:56:10:7A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMaM2mX2aWLMuWg_FVDRTlYQego.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:cc:eb:8f:19:9d:79:91:62:16:95:f6:a5:5f:5b:4c:a3:55:
d7:0f:16:a3:6b:e1:d0:7d:0d:60:17:c7:ba:94:8b:99:15:9c:
de:4d:79:a3:4a:0d:ec:3f:29:44:c2:91:0f:9b:09:25:fb:ab:
85:18:64:91:98:a4:71:17:ae:c2:b6:e1:2f:e0:da:13:44:c0:
b8:cc:ae:a9:f2:68:a1:03:88:76:26:b2:00:70:30:a4:42:75:
c5:28:28:8a:02:67:c3:63:63:d3:1a:ed:75:8c:8c:e1:e8:44:
e1:be:bf:5f:4c:07:85:c2:08:93:18:26:09:71:bd:8a:91:5a:
50:72:01:cc:55:23:8c:bc:3a:09:e3:17:0b:d3:02:b8:cb:2e:
94:c2:93:d1:fa:69:ad:d3:2b:8c:16:b2:42:a0:64:20:a0:a2:
09:f6:5e:6a:a2:5f:b9:f2:01:9b:e8:f5:31:68:57:14:1c:30:
0a:2e:2f:50:4a:b9:ad:40:f8:7d:0f:7a:8c:50:8f:83:96:5b:
36:9b:e2:a5:17:d7:e7:e6:d3:f2:b5:23:74:c2:7f:c2:15:e7:
e6:cb:dc:a3:02:dc:68:d5:e5:87:33:18:d6:a6:f8:e3:6c:d1:
58:a1:a2:ac:41:27:bc:ea:c3:92:39:2e:7b:0d:c9:4e:e9:b8:
dc:98:30:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:26:23 2026 by rpki-client