Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft
File: umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft (raw, json)
Hash identifier: KHWceTq2pQoHNHZg8gz+Zc1VFkqB1Vhtma1mpIamfq0=
Subject key identifier: E2:5B:2F:31:A4:F2:61:F4:65:6B:05:B6:2B:B1:BF:98:4A:C8:DC:12
Authority key identifier: BA:68:59:59:97:90:0D:ED:30:0E:99:25:70:9D:A6:27:E9:3F:36:3A
Certificate issuer: /CN=ba68595997900ded300e9925709da627e93f363a
Certificate serial: 01A155C11B72E37BC3AD6B4A5840F35DCC62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/umhZWZeQDe0wDpklcJ2mJ-k_Njo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft
Manifest number: 134E
Signing time: Mon 19 Oct 2026 20:01:20 +0000
Manifest this update: Mon 19 Oct 2026 20:01:20 +0000
Manifest next update: Tue 20 Oct 2026 20:01:20 +0000
Files and hashes: 1: 6Lv0ELrWKZzM2WUhjrrfSxrLv5I.roa (hash: b+tPMLvT0wTQ8KNZFO7LFZXenP25HBtSk8cAgN48xuk=)
2: umhZWZeQDe0wDpklcJ2mJ-k_Njo.crl (hash: eca8BfNUJJqXoEnV4sW13Xu6MzwVoI/Ynji7td9M6vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft
rsync://rpki.ripe.net/repository/DEFAULT/umhZWZeQDe0wDpklcJ2mJ-k_Njo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 20:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:c1:1b:72:e3:7b:c3:ad:6b:4a:58:40:f3:5d:cc:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba68595997900ded300e9925709da627e93f363a
Validity
Not Before: Oct 19 20:01:20 2026 GMT
Not After : Oct 20 20:01:20 2026 GMT
Subject: CN=e25b2f31a4f261f4656b05b62bb1bf984ac8dc12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7b:6b:92:ff:66:77:78:6a:42:0b:d0:af:05:
b6:f6:e0:b8:7f:d2:3c:b1:86:63:2c:61:49:2c:dc:
ed:20:81:af:97:cd:af:ab:9c:b5:6e:75:2b:74:2e:
89:a4:0e:54:d7:61:9a:a5:a7:ea:33:99:c6:4f:bf:
6c:8c:8f:6a:a7:0e:31:32:a2:6e:77:44:51:e2:48:
83:3a:08:9b:ce:d0:ea:b4:44:e3:7e:e3:41:89:cb:
03:37:76:de:cb:72:0a:01:81:14:90:b5:ed:76:e3:
d5:f6:32:ac:3f:dc:2f:9f:69:8e:f7:d0:19:84:1c:
6e:d2:c3:a3:a6:f8:68:94:e1:31:2f:75:3e:38:a9:
b1:83:d3:06:f5:03:44:be:97:20:44:60:cd:f8:5b:
ea:07:2c:86:a1:18:60:21:12:a7:d3:fd:85:fd:23:
4a:7f:de:23:ff:cb:33:8e:62:4b:20:5e:3b:08:e1:
df:be:21:96:a4:1d:e7:3d:2c:c3:9c:6a:be:50:12:
3a:e4:b1:ae:bf:17:41:e7:b3:eb:c5:72:4d:27:30:
a7:9c:60:db:9f:00:e1:b5:6d:2b:90:35:9c:d4:67:
93:6b:cc:ca:2f:05:90:d0:00:08:ba:ca:6e:57:7c:
fe:17:2f:21:c3:ae:9f:4a:2e:86:c1:c6:a5:bf:1e:
c0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5B:2F:31:A4:F2:61:F4:65:6B:05:B6:2B:B1:BF:98:4A:C8:DC:12
X509v3 Authority Key Identifier:
keyid:BA:68:59:59:97:90:0D:ED:30:0E:99:25:70:9D:A6:27:E9:3F:36:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/umhZWZeQDe0wDpklcJ2mJ-k_Njo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:28:49:9f:ed:1f:f8:46:1f:69:b3:d3:b6:4a:b6:38:31:a4:
f0:6b:66:6b:60:dd:8a:3e:91:57:cd:53:d6:4c:17:56:e8:db:
30:e0:7b:bc:86:b1:9d:61:f4:e3:ec:98:e5:2f:f1:45:88:11:
70:01:6b:90:44:44:27:07:cd:fb:55:b5:ea:25:87:57:e8:41:
41:fe:a1:d8:42:ed:c6:38:a1:52:d0:e1:14:5d:42:46:c3:91:
51:b8:39:02:ab:9f:93:18:5e:6b:0c:f6:71:b4:ac:ac:41:1f:
11:11:d3:21:e3:32:ef:e8:25:93:4f:6a:28:30:71:54:af:cb:
25:7d:87:d6:c3:d4:5c:cf:4e:c0:88:72:5e:24:76:51:16:7e:
89:20:62:af:dc:16:52:55:92:76:62:bb:92:5e:6a:c0:7c:5e:
41:f4:49:8a:b1:a4:66:91:67:08:6c:45:c9:4c:ed:c8:93:ac:
57:5e:12:20:ff:4d:6f:aa:17:ef:34:ba:97:ac:83:6e:30:0a:
0f:54:ae:37:36:ad:ff:ea:57:0a:cd:22:05:7c:71:3c:b5:aa:
73:2a:6e:f3:a1:ba:14:d2:bd:0c:29:95:1d:8c:71:76:a0:32:
9e:dd:13:3f:4c:95:1c:6e:d0:c5:15:48:e1:07:87:99:f4:0a:
a5:87:a7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:58:43 2026 by rpki-client