Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
File: UmxhjRW7cS4-uuBqixgWl6XkB7g.mft (raw, json)
Hash identifier: lXD+drv/6lSGIuQ3cL9G5aYWYEHcoBhLRjMk5F7MXnA=
Subject key identifier: B4:81:08:54:A9:36:A4:32:E1:E1:45:4B:27:D7:2A:F0:D4:EA:D7:D0
Authority key identifier: 52:6C:61:8D:15:BB:71:2E:3E:BA:E0:6A:8B:18:16:97:A5:E4:07:B8
Certificate issuer: /CN=526c618d15bb712e3ebae06a8b181697a5e407b8
Certificate serial: 019CAA587098B08716A056DF806958228D0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
Manifest number: 1710
Signing time: Sun 01 Mar 2026 17:00:48 +0000
Manifest this update: Sun 01 Mar 2026 17:00:48 +0000
Manifest next update: Mon 02 Mar 2026 17:00:48 +0000
Files and hashes: 1: UmxhjRW7cS4-uuBqixgWl6XkB7g.crl (hash: 6GSO2aiv2huUO75jlCUJm+1U4+fqKla5On1Dw/avIyU=)
2: uOsbUN7cy0tE4z7UdBm3d5V39gI.roa (hash: 4lZyd6hRUzTbzA108sOMla+DbCbzWNvltg5Nlq/cyFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:70:98:b0:87:16:a0:56:df:80:69:58:22:8d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=526c618d15bb712e3ebae06a8b181697a5e407b8
Validity
Not Before: Mar 1 17:00:48 2026 GMT
Not After : Mar 2 17:00:48 2026 GMT
Subject: CN=b4810854a936a432e1e1454b27d72af0d4ead7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0a:75:48:9c:c0:60:ff:bc:f1:7a:af:e7:1a:
1d:13:f0:5a:22:73:eb:df:13:ea:ce:5a:eb:e9:19:
65:b3:db:47:dd:46:90:86:f5:c4:7a:f2:47:67:69:
22:2e:3f:86:b0:08:a4:14:5e:c6:4b:19:71:2f:13:
39:88:dc:5e:74:df:c9:79:2b:c8:08:91:cf:ca:01:
76:5c:f0:7c:b9:4c:f6:e4:7a:a4:07:a4:6a:77:1c:
e1:37:03:e6:d9:08:ec:92:1a:9f:a5:b5:76:7c:b3:
99:c4:63:af:bf:57:cb:d4:88:10:93:ff:d7:b2:2a:
86:e7:44:48:e7:82:4e:23:be:73:67:45:9e:b2:98:
08:15:9c:be:c9:e9:fe:5a:90:36:84:b7:df:d5:5a:
75:cd:7c:e2:ba:1e:02:37:5d:1b:7c:6d:d2:81:60:
04:75:01:65:1f:fc:1a:4f:4a:f0:6c:bf:ae:2e:6c:
71:1b:f9:49:c3:83:85:96:f9:31:92:3f:c8:b0:37:
e7:13:8f:55:00:2c:11:50:ea:05:78:4a:06:c6:29:
8b:06:d2:02:cc:d2:1d:a0:80:99:c1:fb:e0:b0:6a:
58:f9:c7:e8:ff:b2:f2:16:d7:d3:ba:80:65:ea:51:
f2:24:ef:60:2d:11:5b:88:8d:36:84:47:83:84:91:
6d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:81:08:54:A9:36:A4:32:E1:E1:45:4B:27:D7:2A:F0:D4:EA:D7:D0
X509v3 Authority Key Identifier:
keyid:52:6C:61:8D:15:BB:71:2E:3E:BA:E0:6A:8B:18:16:97:A5:E4:07:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:d2:40:79:57:1a:f7:05:54:d8:9d:d8:19:e0:ed:61:38:6f:
c1:63:34:2c:6c:29:98:59:87:07:53:27:75:6f:2a:a3:74:6c:
31:05:ec:a8:af:0f:52:25:aa:9d:5e:6a:15:f0:a7:2a:fb:14:
fe:28:ae:fe:59:dd:82:27:e0:85:5b:9e:b6:c6:50:93:75:2a:
da:cf:93:8d:5b:d7:eb:16:fc:9d:8c:c3:61:e8:1a:af:3c:29:
7b:88:62:a7:62:63:3b:e5:a7:e3:7a:35:94:c5:b2:48:6b:09:
7d:ae:fb:65:d1:06:3a:63:a0:16:a6:f9:3e:58:e9:fa:88:ea:
9a:5c:04:de:6d:31:21:a6:01:66:99:b4:0b:e3:5c:a7:2d:32:
ee:0d:99:4d:2f:54:2e:70:da:23:0e:52:2f:41:9b:36:db:99:
d2:fa:ca:ca:36:77:59:e5:bd:6e:3c:16:d0:53:65:71:0c:d5:
33:83:00:db:4d:2c:15:e2:1b:d7:f6:39:b6:85:e9:d0:8b:e4:
f2:b1:bd:c2:71:8d:d4:c3:bc:23:cc:15:14:36:59:2b:58:62:
b0:fa:be:b6:c3:36:54:bf:2c:d5:ba:e3:c2:cc:e6:c1:a2:af:
c8:b8:f1:40:bf:19:63:e1:8b:40:bf:6c:02:89:c3:dc:55:be:
c7:7f:3d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:38:54 2026 by rpki-client