Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
File: UmTy3QuYerdeN5-Bd6QXajCGAGg.mft (raw, json)
Hash identifier: M6UH5ByjSTXlH5YHWXcnYShGnwJ+sTB2d58eHVlkirs=
Subject key identifier: 2A:73:20:5A:C2:F8:7E:5A:A6:BD:FD:A3:64:44:3C:D8:CD:14:DF:E4
Authority key identifier: 52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
Certificate issuer: /CN=5264f2dd0b987ab75e379f8177a4176a30860068
Certificate serial: 019D9A75208296B6265901B6E2918D7CBFE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
Manifest number: 04FE
Signing time: Fri 17 Apr 2026 08:01:00 +0000
Manifest this update: Fri 17 Apr 2026 08:01:00 +0000
Manifest next update: Sat 18 Apr 2026 08:01:00 +0000
Files and hashes: 1: UmTy3QuYerdeN5-Bd6QXajCGAGg.crl (hash: Ml3cy+rxAo++GD6sHSKntql9fVlYPzp7nYZ5IKCaGaA=)
2: h7aUOqQIAGVx29wKcHsmI73SdWI.roa (hash: nXej1/AfJF2/TdKlqz14CbVM6VY7sIDvsNtbQhZWQmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:20:82:96:b6:26:59:01:b6:e2:91:8d:7c:bf:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5264f2dd0b987ab75e379f8177a4176a30860068
Validity
Not Before: Apr 17 08:01:00 2026 GMT
Not After : Apr 18 08:01:00 2026 GMT
Subject: CN=2a73205ac2f87e5aa6bdfda364443cd8cd14dfe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3a:e2:e7:ce:93:a8:c0:06:d8:c0:c1:41:69:
09:5c:31:b9:fa:29:56:2c:01:e1:31:1f:88:6b:ac:
80:d0:90:8e:20:9d:05:f4:19:ba:7f:90:f4:42:8c:
5f:a9:da:7a:78:47:3c:96:47:21:2e:80:bd:e2:4b:
08:61:df:42:01:8e:44:6d:90:e9:58:4a:36:86:d3:
fa:cc:46:2f:d3:fc:16:4a:25:00:e0:08:79:91:ff:
51:de:bb:88:0a:d8:e9:b4:b1:36:22:78:e4:cf:23:
0f:b6:40:a1:f1:19:1f:2e:d3:7c:f6:ed:cf:9a:3a:
64:53:b1:8e:3f:cc:46:dd:c5:00:ff:c2:26:ce:02:
f5:9e:10:bb:8a:45:03:53:1a:52:40:44:61:9f:c4:
30:2e:07:f0:ec:29:bb:49:62:66:25:b7:28:40:98:
98:f6:8c:31:30:2f:d6:ac:bb:4f:c8:50:25:40:92:
6e:1b:3b:80:15:c7:f5:a1:49:32:34:99:d1:1d:53:
ea:e4:c9:da:86:aa:40:80:9f:1e:d1:0f:c1:0f:30:
5b:2e:c9:46:85:03:0b:5f:05:97:25:19:31:ec:83:
4c:05:06:4e:f1:7e:60:56:39:04:85:c9:b1:c2:55:
30:85:d6:ed:b4:b5:08:c6:65:29:73:91:4c:ca:8c:
0e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:73:20:5A:C2:F8:7E:5A:A6:BD:FD:A3:64:44:3C:D8:CD:14:DF:E4
X509v3 Authority Key Identifier:
keyid:52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:6b:9c:ab:5a:70:b1:92:49:f7:a0:42:1e:ab:da:62:7f:02:
3e:0a:fc:16:94:b7:c1:9b:e9:00:d7:59:65:58:e6:34:39:97:
ad:10:44:0c:b9:6b:2f:99:5d:54:fa:c6:0d:51:89:62:ea:6b:
8f:a5:58:4f:a2:cc:4f:04:c0:51:e7:2e:f1:37:ca:40:f4:27:
60:1f:b9:af:b6:d3:7b:ef:f6:61:e7:02:98:8c:79:25:d2:c1:
9d:9a:a1:df:21:f5:84:db:90:e1:0b:bd:6a:f6:19:09:52:58:
74:7f:86:f9:68:9c:e2:60:a9:a3:4c:c0:0a:1f:60:e7:89:57:
22:86:4c:8a:01:49:d9:99:e6:87:f6:42:af:34:d0:da:aa:99:
18:f6:9e:04:4f:40:76:cd:d9:a2:16:81:fc:4c:27:49:86:41:
10:9e:32:53:35:33:81:b5:a2:d8:05:41:b5:d4:4c:dc:19:0c:
c8:43:9c:68:57:18:92:a6:93:02:0c:12:7f:db:a1:05:cb:33:
50:cc:a0:7f:87:7a:4b:bd:e1:ac:e5:c0:03:dd:9d:ea:bf:14:
9b:4b:77:36:68:d4:b9:92:22:c0:59:a8:8a:64:9c:a4:22:54:
f4:ef:d8:57:e1:0f:42:81:4e:ab:36:30:7b:d9:d7:61:92:0b:
7f:3c:21:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:32:52 2026 by rpki-client