Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
File: UmxhjRW7cS4-uuBqixgWl6XkB7g.mft (raw, json)
Hash identifier: IhCyKeu6+2LsSn0neZM2sf2CU2h6ieCGbpCFJfat/to=
Subject key identifier: 99:22:73:96:F5:88:7F:E2:36:F2:56:F6:6B:56:1C:0C:0D:9A:89:B3
Authority key identifier: 52:6C:61:8D:15:BB:71:2E:3E:BA:E0:6A:8B:18:16:97:A5:E4:07:B8
Certificate issuer: /CN=526c618d15bb712e3ebae06a8b181697a5e407b8
Certificate serial: 019D99D0AB434F7DDC1BCFF0218936B301EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
Manifest number: 178C
Signing time: Fri 17 Apr 2026 05:01:22 +0000
Manifest this update: Fri 17 Apr 2026 05:01:22 +0000
Manifest next update: Sat 18 Apr 2026 05:01:22 +0000
Files and hashes: 1: UmxhjRW7cS4-uuBqixgWl6XkB7g.crl (hash: ekm4TTlCqfgVPyaDNL1BgIbYAIqBgYPgUOw2whf3nYk=)
2: uOsbUN7cy0tE4z7UdBm3d5V39gI.roa (hash: 4lZyd6hRUzTbzA108sOMla+DbCbzWNvltg5Nlq/cyFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:ab:43:4f:7d:dc:1b:cf:f0:21:89:36:b3:01:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=526c618d15bb712e3ebae06a8b181697a5e407b8
Validity
Not Before: Apr 17 05:01:22 2026 GMT
Not After : Apr 18 05:01:22 2026 GMT
Subject: CN=99227396f5887fe236f256f66b561c0c0d9a89b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:de:1e:e2:a1:d6:01:d4:b4:c6:33:d3:7e:24:
8b:84:dc:c4:72:af:ef:d2:f8:50:98:c0:22:ed:e0:
63:c8:a6:83:46:e2:e8:6f:52:a9:ed:6d:54:ed:5b:
0f:0c:db:19:b7:cd:0b:81:77:41:98:0e:53:83:9d:
32:d0:f9:6e:7a:09:3d:76:d8:ae:0c:8e:42:da:69:
4f:52:43:a5:a6:10:d5:e8:98:ef:fd:b1:fb:7f:33:
ab:de:dc:4b:8e:16:8e:22:a4:f2:e1:30:71:31:22:
ea:e4:29:37:f4:a8:0c:81:c5:e8:16:32:67:ad:87:
ab:00:05:20:75:18:47:86:ee:35:a5:c0:3a:d1:ef:
a4:72:40:c0:43:d0:7d:24:f6:50:99:58:81:e3:a1:
61:ad:d3:de:0a:78:8b:8c:c3:7c:8f:0d:0f:76:9c:
32:8a:60:ef:cf:74:9c:12:9a:9f:7c:d9:04:a9:24:
69:e1:8b:f2:24:6e:80:d5:d9:fc:6d:5d:5f:0b:06:
d4:1d:98:d7:d8:02:4e:9e:d6:83:8b:a5:a6:f6:a8:
57:22:d2:73:5e:df:4f:cc:6b:eb:a2:94:96:c2:f5:
d5:8b:ef:d6:ce:b5:89:ff:c4:b8:e2:3b:19:77:65:
84:98:45:dc:80:45:d7:22:0b:5f:57:e6:d8:c4:fd:
59:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:22:73:96:F5:88:7F:E2:36:F2:56:F6:6B:56:1C:0C:0D:9A:89:B3
X509v3 Authority Key Identifier:
keyid:52:6C:61:8D:15:BB:71:2E:3E:BA:E0:6A:8B:18:16:97:A5:E4:07:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:df:d0:d6:6b:dc:c3:f2:f3:73:75:04:fc:2b:73:95:8c:4c:
2f:ca:0b:21:80:2c:cf:90:c3:45:19:a7:d7:39:bb:ea:d5:09:
64:ca:29:86:b4:ea:06:eb:d9:25:99:0e:b4:40:ad:5e:ab:cd:
ca:35:0e:81:fe:66:ae:55:ed:e3:8f:40:62:42:64:f4:5b:93:
88:7c:b7:af:ad:61:db:e5:99:c3:f1:23:0f:26:e9:73:ba:f5:
d2:e5:25:60:e9:e8:72:8c:e4:d0:10:86:c7:62:e2:0a:c5:58:
f5:ac:3e:93:41:30:37:bd:fb:2f:7c:1f:89:f3:ac:44:25:88:
7b:0c:ea:aa:64:77:f2:5e:71:8e:8d:14:a5:12:4c:3a:90:4b:
f1:dc:82:b9:b6:50:25:12:b1:08:90:54:6a:07:89:a8:ee:2b:
ec:82:1a:5b:7d:06:43:7c:dc:55:fa:f7:cf:bd:cb:0d:67:fb:
52:b4:82:d3:ba:e0:db:7c:e1:cc:50:17:97:0a:27:82:e2:2c:
cb:62:5f:da:19:ee:bc:a0:9b:25:45:64:72:4e:de:11:56:f7:
8b:16:f1:f1:fe:60:4a:37:02:ce:2b:7f:36:51:86:c9:df:2f:
30:16:4d:f2:05:e5:0b:66:9f:07:54:90:be:d9:9c:2f:d1:7b:
48:ec:88:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:32:09 2026 by rpki-client