Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
File: 2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft (raw, json)
Hash identifier: CfE2or8cGeCo1G29wkQxAcxW6zi53NQzuDgnCphjE5I=
Subject key identifier: F4:FD:1F:25:52:BF:26:7C:4A:4D:9A:38:AD:39:D8:A5:63:66:02:F3
Authority key identifier: D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9
Certificate issuer: /CN=d94284b94325f5060f8a0e87c1be2827788f18f9
Certificate serial: 019D9B19E423D12117EC00419F3C781AB1EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
Manifest number: 1605
Signing time: Fri 17 Apr 2026 11:00:58 +0000
Manifest this update: Fri 17 Apr 2026 11:00:58 +0000
Manifest next update: Sat 18 Apr 2026 11:00:58 +0000
Files and hashes: 1: 2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl (hash: MqSXGHJSSZxagso7636XBRItQsWPJf7JXcxSMDUWMt8=)
2: wqVFEVjqEKEx9wlcMLA5-tVt-do.roa (hash: 26IFOLWA08mHoLUA2G9c2LdLUfKfMB5SGvlKCRZq35g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:e4:23:d1:21:17:ec:00:41:9f:3c:78:1a:b1:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94284b94325f5060f8a0e87c1be2827788f18f9
Validity
Not Before: Apr 17 11:00:58 2026 GMT
Not After : Apr 18 11:00:58 2026 GMT
Subject: CN=f4fd1f2552bf267c4a4d9a38ad39d8a5636602f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:77:b1:4e:ea:df:0d:bd:6f:7a:d1:00:60:07:
c3:d4:f6:81:4d:02:72:ba:69:08:cb:a8:79:08:18:
5c:a8:54:8d:86:21:25:72:b2:cb:7f:a3:17:18:ea:
69:73:d3:34:d4:a7:39:3d:eb:f3:90:54:50:2a:d6:
c9:98:40:16:90:98:13:2b:ce:24:d4:30:f4:dd:fd:
8f:0d:02:03:13:89:f6:03:92:25:ba:fa:62:21:9f:
8d:c1:1f:07:4b:22:a8:29:5d:db:5f:b2:2e:aa:d3:
8e:a1:51:1c:70:ca:9d:16:18:f3:15:fe:e0:fa:c3:
4d:50:57:e3:19:f2:2b:30:cb:b0:f9:ca:30:b7:80:
0d:f2:f3:e9:07:0c:74:d3:c3:bb:a6:d0:59:c5:ad:
86:b7:5e:97:23:08:58:80:b0:7e:cf:f5:e4:5b:e6:
3d:45:ff:93:ab:7d:8b:5b:bd:30:a6:60:5c:75:51:
54:26:d4:15:27:2b:ed:15:07:da:6e:b4:8d:77:f0:
fb:cc:0e:1d:3e:fd:67:e5:f3:61:5c:8f:b8:c0:81:
6c:63:be:5a:76:27:7a:6e:1e:b6:37:e4:d6:7f:24:
46:80:64:58:b5:3f:2d:f6:d5:5d:21:8d:55:c2:13:
1f:25:49:88:08:96:47:47:c9:36:f5:15:9d:f8:92:
85:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FD:1F:25:52:BF:26:7C:4A:4D:9A:38:AD:39:D8:A5:63:66:02:F3
X509v3 Authority Key Identifier:
keyid:D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ff:d2:b5:bd:a5:74:eb:f3:ef:e4:5b:59:09:0f:72:99:68:
8d:df:02:df:25:de:69:2d:15:e4:a0:be:43:11:a0:97:1c:94:
10:66:fc:25:f1:64:4a:1e:63:82:74:a3:fe:93:b6:8a:c5:23:
4a:6d:65:25:10:71:e9:a1:36:d8:ae:de:10:28:44:d8:89:5b:
1b:62:5d:12:0e:39:7d:7e:50:0c:76:84:b2:d7:d1:6a:92:80:
cf:8e:5a:0d:58:f5:1d:82:71:3b:42:4d:d9:0d:5d:d7:1a:4c:
1f:e6:9a:32:7c:65:92:3a:04:82:18:79:74:c5:ff:2f:e2:0d:
25:f7:c0:31:10:00:9c:e4:9d:10:ad:1e:b6:b1:05:f1:48:a5:
32:31:53:e1:3f:28:2d:26:fb:40:c5:64:a1:f5:2e:df:ee:f8:
dd:52:78:48:d1:02:f8:22:0d:de:c7:b1:8c:71:fa:d4:16:f7:
88:cf:f7:53:13:f4:fc:05:4c:5c:de:e4:6e:f3:64:9b:c6:cb:
b5:6f:22:e3:62:39:de:27:ab:48:83:55:2d:a1:32:a7:f7:54:
43:06:a2:92:cd:c0:59:69:0d:64:0a:96:ef:bf:45:12:9d:be:
49:19:71:c8:7b:bb:2b:40:38:e7:3c:38:0f:3e:ed:32:f5:ba:
ef:2e:29:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:57:52 2026 by rpki-client