Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
File: 2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft (raw, json)
Hash identifier: RO0wExbGBwCpoGO1lzwzKRGQsYPKE/b8cO+WyFXMq+k=
Subject key identifier: 9E:57:52:51:BE:39:56:10:73:87:50:44:5F:23:32:17:AA:54:BC:8B
Authority key identifier: D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9
Certificate issuer: /CN=d94284b94325f5060f8a0e87c1be2827788f18f9
Certificate serial: 01A13DEF1D5F7FD18153694E8D0EFC676C19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
Manifest number: 17E7
Signing time: Thu 15 Oct 2026 05:00:43 +0000
Manifest this update: Thu 15 Oct 2026 05:00:43 +0000
Manifest next update: Fri 16 Oct 2026 05:00:43 +0000
Files and hashes: 1: 2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl (hash: BEPkmTj1mhLYkymm/Qq89lowRoMFAeu8dxfjg0a+ECk=)
2: wqVFEVjqEKEx9wlcMLA5-tVt-do.roa (hash: 26IFOLWA08mHoLUA2G9c2LdLUfKfMB5SGvlKCRZq35g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ef:1d:5f:7f:d1:81:53:69:4e:8d:0e:fc:67:6c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94284b94325f5060f8a0e87c1be2827788f18f9
Validity
Not Before: Oct 15 05:00:43 2026 GMT
Not After : Oct 16 05:00:43 2026 GMT
Subject: CN=9e575251be395610738750445f233217aa54bc8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:43:21:73:4a:b6:e2:c6:4d:27:e5:9e:b4:1d:
23:f6:10:14:e9:7a:ba:aa:60:30:ff:35:a7:ac:3c:
da:63:18:dd:bf:ad:41:97:45:4c:d3:2b:c7:3e:75:
7f:00:84:b0:63:2a:3a:f4:48:5b:de:2b:7e:af:0c:
31:25:a2:33:57:0a:31:a2:26:a8:45:9e:29:33:35:
ed:e9:7f:7f:9a:ab:64:8e:3a:9f:f0:a3:b5:da:e3:
87:21:78:8e:78:95:ec:ad:e4:6d:8d:54:22:95:e7:
8f:c0:f7:bf:29:ae:f5:4c:12:99:d1:b2:ab:74:d9:
f8:a6:61:9e:c3:af:03:03:36:68:1d:b5:1b:38:27:
25:d2:4c:94:3c:de:24:5b:1b:fb:ba:0e:71:5c:45:
56:ac:25:a7:f0:5a:c9:ac:88:c2:79:73:ea:c6:f4:
f8:53:c4:12:f1:f4:59:b8:76:af:02:98:65:bf:59:
b9:4c:61:f3:de:7c:d5:11:ed:bb:93:76:a0:eb:f0:
cd:9c:ff:4f:21:79:81:d8:2e:32:74:1b:9d:1b:2d:
bf:af:ee:22:a6:f6:11:c5:6e:55:b6:22:9f:1d:0f:
4f:96:ba:68:c9:3b:06:fd:13:52:26:3d:e9:a1:24:
1c:98:ab:82:8e:1d:b9:48:c2:ab:e8:d6:83:c0:fc:
f1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:57:52:51:BE:39:56:10:73:87:50:44:5F:23:32:17:AA:54:BC:8B
X509v3 Authority Key Identifier:
keyid:D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:5e:2b:26:2f:07:69:69:24:c4:37:e0:c8:54:16:9a:4e:90:
99:85:c1:67:25:98:fc:a7:f7:f1:5b:8a:8f:ce:40:32:02:9b:
3c:94:62:f4:f6:f5:b4:9e:86:60:40:80:8b:76:e5:6b:85:88:
bd:1b:5e:2a:c5:bb:5e:d3:3c:3d:04:c2:80:04:bc:13:c4:01:
56:24:26:51:8f:84:b7:f7:d0:63:c8:58:f2:08:84:c1:ce:72:
59:db:c3:cc:94:f8:17:56:62:20:e6:da:29:de:f8:39:b2:11:
79:4f:42:61:4a:f3:db:3b:f8:10:4f:8e:8d:54:39:39:a1:d7:
5e:df:ab:1e:f0:4d:c5:17:0d:24:49:ca:a7:dd:e9:3f:77:24:
ab:96:76:dc:81:79:00:8f:e0:53:0d:fe:b5:ea:6a:8e:87:e7:
d9:cb:37:34:47:68:62:db:8d:2b:31:f5:9e:fc:46:b0:38:78:
fc:37:b0:08:08:80:29:30:b0:96:0b:c1:cb:5e:f6:08:b9:9e:
42:09:4f:f8:99:08:52:51:fb:17:19:34:cc:b4:40:b9:54:b1:
1e:08:ef:27:2a:be:e0:01:49:18:17:bf:c1:d3:6f:59:60:98:
9e:95:b0:d2:89:73:e5:c2:9c:0b:1d:bc:48:6d:88:d2:ea:7c:
00:25:93:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:25:58 2026 by rpki-client