Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
File: 2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft (raw, json)
Hash identifier: LJYH7dhIxX1/IgExabFhV/r70q4k6tpYyHPLxXzIMiM=
Subject key identifier: E7:3E:AF:A4:B7:79:07:5D:BC:1C:C7:D7:DB:CD:0E:25:11:0D:1F:01
Authority key identifier: D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19
Certificate issuer: /CN=d949caba3d4315607f4a6d627ece1ecea8cbc319
Certificate serial: 019D3940BF0C3D71B3720E101F96E5846F86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
Manifest number: 0DCE
Signing time: Sun 29 Mar 2026 11:00:37 +0000
Manifest this update: Sun 29 Mar 2026 11:00:37 +0000
Manifest next update: Mon 30 Mar 2026 11:00:37 +0000
Files and hashes: 1: 2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl (hash: FV9LG80b7XWdjIU3zhpEcEkMpTZZQlcrjErDT+ELy8E=)
2: 8mfySGwTbXk-kyUdS_kN8j97UXs.roa (hash: umX00/QtByILeR56I5S6BuyzviCNwqrKZKDQse00Reo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:bf:0c:3d:71:b3:72:0e:10:1f:96:e5:84:6f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d949caba3d4315607f4a6d627ece1ecea8cbc319
Validity
Not Before: Mar 29 11:00:37 2026 GMT
Not After : Mar 30 11:00:37 2026 GMT
Subject: CN=e73eafa4b779075dbc1cc7d7dbcd0e25110d1f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:10:49:5a:a2:49:49:d7:63:23:a5:a4:f0:9e:
8d:39:f5:c2:76:87:21:95:db:70:f4:bc:14:9e:6e:
77:55:b3:d8:8f:dc:04:95:f0:e7:82:a9:a9:41:98:
1d:1d:7e:18:0d:8d:ba:b1:ab:77:d3:02:c1:4f:92:
d3:37:0a:a8:4b:0d:8d:eb:cd:7d:e7:a1:8f:6b:98:
02:71:34:05:a5:5e:44:f7:39:2d:b3:fa:64:d9:ad:
2e:c6:14:60:6b:a9:bf:dd:09:47:6f:ef:df:ec:03:
ea:84:c7:cc:50:0b:b4:46:98:58:a0:53:66:14:66:
7d:07:1e:9e:a6:db:23:6e:d0:35:65:d0:60:31:f4:
18:88:66:eb:b5:a2:d8:5f:12:87:4c:4e:00:c3:3c:
d1:4f:d5:e9:19:2f:78:f3:2f:a5:1e:56:4c:3e:15:
67:a4:a5:a6:64:1e:69:06:89:9d:70:aa:49:ae:8f:
58:24:ce:b8:74:fd:6c:34:88:15:a4:19:c4:23:d8:
ac:f2:d6:30:a8:63:0c:87:c7:6d:cb:8a:3e:33:08:
65:d4:15:11:da:c2:db:93:f0:97:c8:b2:37:10:11:
c9:b4:25:aa:1e:6a:5d:a8:26:14:d9:36:ee:31:d6:
47:d4:4e:59:04:8e:c9:6f:d3:6b:03:2b:57:09:be:
19:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3E:AF:A4:B7:79:07:5D:BC:1C:C7:D7:DB:CD:0E:25:11:0D:1F:01
X509v3 Authority Key Identifier:
keyid:D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:cf:f0:53:47:c7:a6:8f:76:5b:9d:3a:b5:dc:3b:e3:96:b1:
59:4d:46:a8:5c:e2:3c:2c:38:37:19:4f:2f:a2:24:50:f4:8e:
9c:f9:ac:28:9b:bc:fa:3a:4a:73:cd:2e:56:79:43:e3:13:54:
2a:86:63:d2:a1:c5:f9:f2:7c:78:8b:29:79:79:05:d4:59:ee:
b6:01:13:c3:16:c6:75:f0:5b:38:fc:b4:31:4c:f7:2e:6a:42:
05:f3:6e:3b:79:65:20:d6:61:f4:51:53:19:44:c0:9a:b5:14:
27:5e:7e:f1:ef:33:50:b0:20:ff:1a:ae:1f:d4:63:46:2a:57:
86:1c:78:fb:8a:6c:3d:cb:f6:87:9c:b4:d7:a4:94:ba:18:fd:
e2:b0:55:17:f9:cd:d0:43:90:8e:86:9f:33:a0:24:46:7f:36:
6e:95:37:26:41:74:ee:38:16:2e:70:8c:ee:eb:a4:b2:6a:69:
e9:4b:c2:69:fb:5c:f1:1d:0b:00:70:f4:06:89:d6:b6:a0:3a:
61:68:45:7c:e9:06:fb:08:c0:1e:51:a5:86:d3:2e:97:6f:61:
0b:c5:e1:65:e1:ee:77:be:be:e8:17:3b:aa:84:25:ea:41:4b:
0d:ae:ee:ca:52:4f:68:77:6c:42:fb:8f:ce:8e:6e:0d:3a:3f:
f2:21:6b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:05 2026 by rpki-client