Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
File: 2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft (raw, json)
Hash identifier: 0XHbu501Du/8qHCqhuwmaKuFzRhCtdxQ5aMbyPjYFas=
Subject key identifier: C0:E1:B2:E9:2B:CF:18:98:04:08:BD:AF:6A:88:9D:23:03:20:92:D6
Authority key identifier: D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19
Certificate issuer: /CN=d949caba3d4315607f4a6d627ece1ecea8cbc319
Certificate serial: 019E3072C464760A66F3344839B7EF3584F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
Manifest number: 0E4E
Signing time: Sat 16 May 2026 11:01:28 +0000
Manifest this update: Sat 16 May 2026 11:01:28 +0000
Manifest next update: Sun 17 May 2026 11:01:28 +0000
Files and hashes: 1: 2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl (hash: RqYCeNg1KRrpdiPB37Z1aGzEf7UpbC3faqav+khhYF8=)
2: 8mfySGwTbXk-kyUdS_kN8j97UXs.roa (hash: umX00/QtByILeR56I5S6BuyzviCNwqrKZKDQse00Reo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:c4:64:76:0a:66:f3:34:48:39:b7:ef:35:84:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d949caba3d4315607f4a6d627ece1ecea8cbc319
Validity
Not Before: May 16 11:01:28 2026 GMT
Not After : May 17 11:01:28 2026 GMT
Subject: CN=c0e1b2e92bcf18980408bdaf6a889d23032092d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f9:e9:6e:09:3d:61:19:a2:71:c5:29:9e:8c:
02:4e:0e:d1:9c:35:a4:36:c9:41:a3:a3:e4:80:28:
be:69:75:e8:46:b8:d0:6d:e2:99:a4:ee:77:bd:9c:
d2:8c:9e:43:d5:67:43:e0:08:d9:dc:be:b6:4e:ab:
46:a5:cf:25:b9:fa:62:59:79:82:d8:55:b8:4d:41:
90:60:3d:ea:12:60:d6:25:4b:f1:20:5c:a3:70:dc:
cd:d8:58:13:4d:c2:e9:61:5b:e4:d4:75:cd:cc:cc:
97:88:44:ed:1f:0d:e4:a7:3a:fd:e7:ab:ac:f4:f2:
e1:55:b4:99:7b:95:4b:49:0a:1b:20:ee:de:52:b3:
85:c8:23:f8:8c:40:8c:14:ca:4a:af:14:14:7a:34:
f6:78:30:be:cd:0f:23:71:c7:de:09:77:8c:cc:75:
44:ed:a9:b2:68:3f:ae:1c:db:91:64:b8:6b:a2:e5:
65:ed:cf:51:14:c2:ce:36:8e:c8:55:6e:f5:0c:a7:
15:4b:85:74:b2:58:4e:47:2d:c7:b6:fb:8f:1d:dc:
76:e2:e3:56:30:e6:7c:e7:38:89:10:82:17:88:11:
09:5c:3e:55:7e:4b:3f:64:f4:77:26:b6:d2:78:f0:
b1:87:fa:67:5e:53:8c:0a:7d:a9:ef:77:b2:2b:cc:
80:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E1:B2:E9:2B:CF:18:98:04:08:BD:AF:6A:88:9D:23:03:20:92:D6
X509v3 Authority Key Identifier:
keyid:D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:9b:0d:16:40:dc:0f:48:30:ba:7b:0b:f9:5f:42:80:c8:a0:
6a:c8:f9:13:0f:06:dc:76:d6:c2:f3:6c:b2:e1:b3:8a:b4:67:
ec:43:ee:fc:25:d2:19:3e:72:17:26:f4:8c:c0:db:90:7a:60:
89:1d:d2:32:fb:ff:ef:c9:b4:1e:05:c3:3e:ea:6a:79:ed:4b:
2d:78:3e:a0:25:f2:95:11:1d:1f:76:7f:4b:e3:0b:02:1f:c7:
d1:16:53:35:a0:14:d8:56:9d:29:60:84:32:f7:cb:73:fe:16:
72:7e:fd:f3:cf:7b:47:f5:ef:ca:db:12:c7:81:9d:9f:36:1f:
66:df:1e:d5:ef:56:47:79:59:7f:f0:fe:2e:b3:2d:97:50:4d:
43:db:7c:0e:77:d2:ba:01:45:4d:8d:bb:43:b1:e2:a2:65:cf:
71:db:fa:79:1e:da:7a:bc:76:a6:42:5e:56:2b:d3:f2:f6:4b:
56:ae:98:07:6d:85:25:fd:f4:e7:fd:ab:9c:68:bc:c8:0a:68:
df:f6:d9:02:a7:db:81:86:15:fc:2f:8d:d8:7d:ef:05:98:f9:
8d:17:1a:ee:1c:2f:fc:0f:02:35:13:6b:cc:a7:27:42:e2:3a:
0b:5a:4a:5f:34:83:e2:0b:d9:2e:54:9b:dd:51:03:9c:20:c9:
6d:fb:30:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wcsRkdgpm8zRIObfvNYTzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NDljYWJhM2Q0MzE1NjA3ZjRhNmQ2MjdlY2UxZWNlYThj
YmMzMTkwHhcNMjYwNTE2MTEwMTI4WhcNMjYwNTE3MTEwMTI4WjAzMTEwLwYDVQQD
EyhjMGUxYjJlOTJiY2YxODk4MDQwOGJkYWY2YTg4OWQyMzAzMjA5MmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/npbgk9YRmiccUpnowCTg7RnDWk
NslBo6PkgCi+aXXoRrjQbeKZpO53vZzSjJ5D1WdD4AjZ3L62TqtGpc8lufpiWXmC
2FW4TUGQYD3qEmDWJUvxIFyjcNzN2FgTTcLpYVvk1HXNzMyXiETtHw3kpzr956us
9PLhVbSZe5VLSQobIO7eUrOFyCP4jECMFMpKrxQUejT2eDC+zQ8jccfeCXeMzHVE
7amyaD+uHNuRZLhrouVl7c9RFMLONo7IVW71DKcVS4V0slhORy3HtvuPHdx24uNW
MOZ85ziJEIIXiBEJXD5Vfks/ZPR3JrbSePCxh/pnXlOMCn2p73eyK8yAgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDhsukrzxiYBAi9r2qInSMDIJLWMB8GA1UdIwQY
MBaAFNlJyro9QxVgf0ptYn7OHs6oy8MZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlVuS3VqMURGV0JfU20xaWZzNGV6cWpMd3hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9mZTY5MDQtZWI1Ni00NDkzLTkyOWMt
MWE5ZGYzOGY1OTAxLzEvMlVuS3VqMURGV0JfU20xaWZzNGV6cWpMd3hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9mZTY5MDQtZWI1Ni00NDkzLTkyOWMtMWE5ZGYzOGY1OTAx
LzEvMlVuS3VqMURGV0JfU20xaWZzNGV6cWpMd3hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV5sNFkDc
D0gwunsL+V9CgMigasj5Ew8G3HbWwvNssuGzirRn7EPu/CXSGT5yFyb0jMDbkHpg
iR3SMvv/78m0HgXDPupqee1LLXg+oCXylREdH3Z/S+MLAh/H0RZTNaAU2FadKWCE
MvfLc/4Wcn798897R/XvytsSx4GdnzYfZt8e1e9WR3lZf/D+LrMtl1BNQ9t8DnfS
ugFFTY27Q7HiomXPcdv6eR7aerx2pkJeVivT8vZLVq6YB22FJf305/2rnGi8yApo
3/bZAqfbgYYV/C+N2H3vBZj5jRca7hwv/A8CNRNrzKcnQuI6C1pKXzSD4gvZLlSb
3VEDnCDJbfsw9g==
-----END CERTIFICATE-----
Generated at Sat May 16 15:39:59 2026 by rpki-client