Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
File: UmTy3QuYerdeN5-Bd6QXajCGAGg.mft (raw, json)
Hash identifier: kEhC4l976mn7y2Q+l+M4uWnMWhopEHhxAcGV9sdKmtk=
Subject key identifier: F0:BC:0E:86:50:98:F8:9A:F6:3B:C7:A7:5E:19:86:97:58:0A:42:A1
Authority key identifier: 52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
Certificate issuer: /CN=5264f2dd0b987ab75e379f8177a4176a30860068
Certificate serial: 019CAAFCFDEB9F4E8535A237AEFCFB7FFD26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
Manifest number: 0482
Signing time: Sun 01 Mar 2026 20:00:32 +0000
Manifest this update: Sun 01 Mar 2026 20:00:32 +0000
Manifest next update: Mon 02 Mar 2026 20:00:32 +0000
Files and hashes: 1: UmTy3QuYerdeN5-Bd6QXajCGAGg.crl (hash: sl+QcwMl3HTwMWfAY1nU0i6wg1r3ZUd4B6znB+xT8lM=)
2: h7aUOqQIAGVx29wKcHsmI73SdWI.roa (hash: nXej1/AfJF2/TdKlqz14CbVM6VY7sIDvsNtbQhZWQmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:fd:eb:9f:4e:85:35:a2:37:ae:fc:fb:7f:fd:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5264f2dd0b987ab75e379f8177a4176a30860068
Validity
Not Before: Mar 1 20:00:32 2026 GMT
Not After : Mar 2 20:00:32 2026 GMT
Subject: CN=f0bc0e865098f89af63bc7a75e198697580a42a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5a:74:f5:9b:df:37:e0:39:ff:55:00:78:57:
24:56:a1:c8:76:bb:20:c2:25:d3:7e:59:c2:a9:55:
cf:54:fc:78:46:27:36:a0:4a:df:91:00:f2:bc:29:
63:1e:d8:a2:30:5c:6d:76:27:74:a2:5b:e8:97:60:
52:cc:e5:c4:f4:c4:5e:90:30:81:ee:33:0f:3c:35:
db:d1:db:97:8a:3f:d2:bf:d5:dd:c3:b5:7c:87:7a:
98:ae:98:40:fb:31:90:2a:2d:19:8e:31:f1:44:59:
55:f2:24:14:83:d0:4d:ae:c0:4f:40:28:2c:47:f0:
30:53:5d:33:ec:2e:27:69:01:02:8d:d8:9d:1d:a0:
96:50:0b:e0:a0:bf:d0:de:c9:40:e4:ac:c0:58:74:
42:49:14:9a:21:4e:37:6d:bd:ff:56:f0:6e:c5:61:
70:ff:5a:7d:96:18:bc:ab:38:7a:c3:fd:0f:f6:18:
d6:75:7e:4d:08:e4:9a:c5:f6:ae:87:48:7d:56:37:
4a:7e:13:5e:1d:cb:c2:48:c8:49:1a:2c:30:14:a5:
bc:f3:72:f4:ea:72:b8:5f:57:3b:d2:83:32:dc:c7:
12:3e:49:a7:13:a6:b5:e2:98:b6:e7:6d:36:d1:31:
48:b2:a3:fc:3d:6d:da:e5:f8:25:d0:45:36:89:fb:
2c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BC:0E:86:50:98:F8:9A:F6:3B:C7:A7:5E:19:86:97:58:0A:42:A1
X509v3 Authority Key Identifier:
keyid:52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:80:6a:38:df:cb:46:b4:c9:0e:dc:17:08:25:f6:9a:0d:de:
04:6b:95:80:3e:ba:45:0c:f2:c3:4b:c1:4e:77:9c:e7:41:54:
7f:8b:44:81:c9:dc:f4:ef:df:c3:3b:3d:e5:e2:a8:72:09:c4:
ac:d1:15:0a:01:e2:74:33:d4:84:47:12:b2:fa:6f:13:b9:de:
28:4c:16:05:6d:9f:94:85:e1:5f:75:e1:07:e5:b0:54:09:5f:
b4:c3:31:2c:01:33:8f:ba:40:84:35:36:ed:7a:60:24:92:65:
de:13:9e:b7:62:79:28:48:2c:00:67:78:52:6e:60:fc:96:f6:
8d:a0:a9:ad:0f:97:f7:2d:86:5d:2e:ea:c4:21:1b:6b:ae:40:
d1:c5:e2:63:f1:67:0c:cd:ee:78:2e:4f:e7:27:fd:d7:a8:d7:
58:e5:6f:02:db:2e:9e:e9:65:68:02:e0:de:61:d5:51:09:5f:
26:9e:ad:d0:d7:10:43:d6:89:71:64:8f:9c:74:df:be:7f:1b:
99:12:cb:ee:97:5d:cf:f5:7e:c0:13:f6:31:5a:e5:2b:43:13:
95:b3:11:2c:0b:b2:fd:06:00:59:5f:2b:2a:ad:54:c9:01:7a:
2f:fd:24:ad:48:85:69:14:b4:cb:05:74:34:19:28:26:14:63:
aa:f0:71:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:03:29 2026 by rpki-client