Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
File: 2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft (raw, json)
Hash identifier: YZqELAgd95Mht8s7cygMEapyNkAzRcidtD+tvPieH4A=
Subject key identifier: 85:B0:17:16:84:58:70:51:61:97:E8:88:59:DB:C1:69:14:68:95:8A
Authority key identifier: D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19
Certificate issuer: /CN=d949caba3d4315607f4a6d627ece1ecea8cbc319
Certificate serial: 01A1408389E5E9CCA4E0402F497B752A5FE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
Manifest number: 0FE4
Signing time: Thu 15 Oct 2026 17:02:04 +0000
Manifest this update: Thu 15 Oct 2026 17:02:04 +0000
Manifest next update: Fri 16 Oct 2026 17:02:04 +0000
Files and hashes: 1: 2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl (hash: uCmmA8wI9vRr70bJo6UYNxQa4VNnIKBxKXQly4Ovtj0=)
2: 8mfySGwTbXk-kyUdS_kN8j97UXs.roa (hash: umX00/QtByILeR56I5S6BuyzviCNwqrKZKDQse00Reo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:83:89:e5:e9:cc:a4:e0:40:2f:49:7b:75:2a:5f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d949caba3d4315607f4a6d627ece1ecea8cbc319
Validity
Not Before: Oct 15 17:02:04 2026 GMT
Not After : Oct 16 17:02:04 2026 GMT
Subject: CN=85b01716845870516197e88859dbc1691468958a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d1:d7:04:e1:c7:81:4d:3a:1f:df:ec:8f:01:
b1:f4:65:04:ce:24:15:1a:51:f4:08:34:90:6b:2f:
96:6e:c1:c2:8e:d2:2e:60:49:03:ce:6f:45:89:bc:
3a:c5:d0:c0:76:09:dd:04:4a:4d:95:cf:7c:76:ec:
56:eb:f4:66:21:9c:cc:04:e0:46:7c:23:3c:0d:ac:
d0:dd:e6:9b:ee:a4:0c:46:0e:c6:e7:18:3f:4e:75:
f7:61:86:e4:c4:ee:99:26:6d:76:93:1a:e7:62:a7:
62:39:44:16:02:5d:c5:17:c1:dd:78:b3:80:88:6d:
41:9d:6f:1d:57:25:99:f0:d5:e5:d4:c8:db:58:84:
6b:78:89:48:00:3f:fa:88:cd:1b:e5:16:44:9f:5b:
d9:8d:5c:50:3b:79:36:18:9e:df:42:ec:f8:46:51:
07:28:ee:f6:7a:e7:51:8f:89:d9:1d:25:79:77:b4:
d6:bf:42:ba:78:ce:b6:3d:3e:6c:c5:2e:8a:47:68:
32:2c:fd:5f:b3:1e:e8:3e:56:21:ae:14:3d:8c:19:
08:3f:6b:3d:5b:65:e5:17:62:d3:04:d2:1b:7f:f7:
6f:4a:e9:6d:90:ce:2d:e0:96:14:c0:10:25:e0:06:
5c:ea:b5:cd:37:dd:c8:13:90:bd:bd:b8:2f:c8:bf:
bc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B0:17:16:84:58:70:51:61:97:E8:88:59:DB:C1:69:14:68:95:8A
X509v3 Authority Key Identifier:
keyid:D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ce:f1:4a:40:ba:97:5f:11:84:0e:d5:3e:d0:4a:e3:b7:1d:
37:2f:c3:ef:0f:ad:c4:6c:24:1a:8e:a7:dc:98:b3:d8:23:29:
e3:2a:4d:53:3f:3d:2c:eb:89:f7:17:9e:07:68:f4:85:6c:86:
2f:6d:d1:de:2b:63:00:0e:39:f9:13:c8:3c:93:2f:d4:61:15:
8d:54:7d:b8:cb:de:52:6a:c9:f4:df:e7:32:96:ed:e3:6a:0c:
c2:9f:12:b0:dd:0f:9d:4c:75:7d:5f:aa:82:45:6a:c9:66:3b:
1e:5c:78:1d:00:3b:1e:f2:4b:0a:54:86:d8:ae:26:2d:f7:29:
c5:fa:18:15:63:8b:89:92:f9:a6:3a:0f:72:cd:ca:11:a0:f9:
94:24:1f:f3:6d:17:83:43:e2:03:a0:aa:84:7b:79:75:26:c3:
2f:57:b3:04:11:c3:a4:3d:5f:dc:31:4f:2f:7a:2b:86:7d:ef:
12:d8:c2:a6:80:3e:b7:3a:14:2c:6d:17:b7:47:35:b5:6d:ca:
90:77:6c:48:59:81:d7:43:21:ae:39:7d:7f:3f:88:f0:4a:94:
8b:e7:53:35:5a:13:f8:79:84:45:95:b3:57:95:a1:88:d4:ea:
6d:8b:25:63:70:0d:2d:dd:78:1c:91:c3:11:72:ff:f7:88:78:
1b:ff:88:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 00:22:34 2026 by rpki-client