Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
File: 2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft (raw, json)
Hash identifier: RQQfZw9/CAV/ty1EgU8zF6LncN6dbzuQyQoqr20u7+E=
Subject key identifier: 8A:05:F1:01:2B:CD:7C:42:D0:06:99:B0:CF:76:A1:59:10:27:0E:83
Authority key identifier: D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9
Certificate issuer: /CN=d94284b94325f5060f8a0e87c1be2827788f18f9
Certificate serial: 019FAA50781EBE0461427A68EF5B493C1FE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
Manifest number: 1716
Signing time: Tue 28 Jul 2026 20:00:27 +0000
Manifest this update: Tue 28 Jul 2026 20:00:27 +0000
Manifest next update: Wed 29 Jul 2026 20:00:27 +0000
Files and hashes: 1: 2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl (hash: RI01RpFxx89w3BJTvIW++c5z4PFBkvnvAi8Z5X95jjQ=)
2: wqVFEVjqEKEx9wlcMLA5-tVt-do.roa (hash: 26IFOLWA08mHoLUA2G9c2LdLUfKfMB5SGvlKCRZq35g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:78:1e:be:04:61:42:7a:68:ef:5b:49:3c:1f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94284b94325f5060f8a0e87c1be2827788f18f9
Validity
Not Before: Jul 28 20:00:27 2026 GMT
Not After : Jul 29 20:00:27 2026 GMT
Subject: CN=8a05f1012bcd7c42d00699b0cf76a15910270e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a0:e0:88:d6:f1:af:5f:27:6f:78:f2:f7:ac:
e3:0d:60:ce:41:07:d8:f8:88:a2:b9:96:97:ba:e4:
53:89:54:71:99:85:9d:8c:f0:ca:05:ae:68:61:d6:
32:61:0f:8f:e9:d6:9e:35:42:f6:a5:c3:43:52:f3:
8e:60:54:4c:96:fa:37:c3:fb:ce:17:fc:6c:81:8f:
cb:ae:a0:4c:b0:2d:c2:fb:d0:86:b7:2c:86:06:e3:
f3:21:d7:b4:f5:e1:68:65:66:8a:b3:ba:ad:a5:02:
45:56:ac:d7:18:bf:c1:2b:de:b9:6d:58:0b:3e:2e:
12:d7:aa:35:22:cc:eb:ee:0a:8d:20:50:76:c7:97:
2b:80:61:2b:8a:f5:a4:59:1c:88:46:4a:ee:c2:f6:
c0:81:74:49:23:ab:7a:47:90:9d:ad:0b:e0:ad:ad:
46:45:7d:79:7f:20:ac:04:39:1d:63:a9:ab:24:96:
23:b8:fa:5e:fc:5d:27:74:be:fb:b3:2f:13:11:a7:
78:7a:74:8c:1d:c4:f2:1b:90:49:0f:98:15:c6:66:
d2:6b:20:ec:be:e3:32:11:be:33:da:37:02:bb:d2:
6b:bc:ab:a6:00:42:21:2a:72:09:27:93:88:dc:17:
c5:b5:fb:d0:68:56:03:fe:68:8d:8d:a5:b5:be:28:
04:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:05:F1:01:2B:CD:7C:42:D0:06:99:B0:CF:76:A1:59:10:27:0E:83
X509v3 Authority Key Identifier:
keyid:D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:cb:b2:26:bf:ac:2f:5c:cb:fe:14:78:2d:57:0a:7f:bd:8c:
bc:2e:8f:89:0b:64:90:f7:04:20:a7:3e:29:cc:ef:c9:61:a5:
44:f0:65:d2:02:d7:36:7e:6a:bb:b9:c0:55:19:de:f1:b2:ea:
f5:82:ff:34:d2:ee:c2:04:9b:99:ea:dd:13:44:1c:54:a7:11:
62:55:ff:e3:ff:05:d9:43:e7:89:3f:d1:fc:d5:cc:5c:64:95:
8b:82:43:a8:8d:61:79:3e:49:f7:b7:73:df:96:b7:2c:97:4e:
ac:04:41:4f:12:18:21:d5:7d:cf:bc:0c:ba:75:d3:73:ad:6c:
0c:1a:33:bf:d0:cf:33:9e:e9:ad:32:dd:7b:59:08:04:9a:e1:
db:e6:23:0d:41:c2:c5:c0:88:28:b8:ed:9e:cb:17:a3:5b:f5:
10:34:65:f2:2b:90:db:c0:70:a2:fd:13:8b:48:0e:5a:80:4c:
6b:fc:d0:1e:bc:19:09:36:6a:30:91:9b:78:6a:b2:2b:28:e3:
e7:6e:2d:ed:dd:da:38:46:e5:90:bd:b8:ca:f6:e2:a0:38:96:
3d:df:99:f5:eb:8f:d6:ed:60:e2:ff:40:33:63:34:bf:95:87:
e7:22:89:e2:bb:2f:e3:f3:f5:47:b9:e0:db:3c:96:e2:f1:8e:
72:a4:a8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:15:07 2026 by rpki-client