Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
File: 2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft (raw, json)
Hash identifier: IEsXe+hU1TDzVOsIEk6ds/5cXS8m3iO/8CeelRxKXNU=
Subject key identifier: 9C:EA:B8:25:AC:B3:46:68:FC:E7:8B:54:F7:AB:CC:42:69:A9:96:0D
Authority key identifier: D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9
Certificate issuer: /CN=d94284b94325f5060f8a0e87c1be2827788f18f9
Certificate serial: 01A128B14F1D54665D44FA151C0924D3A4CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
Manifest number: 17DC
Signing time: Sun 11 Oct 2026 02:01:10 +0000
Manifest this update: Sun 11 Oct 2026 02:01:10 +0000
Manifest next update: Mon 12 Oct 2026 02:01:10 +0000
Files and hashes: 1: 2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl (hash: owoxuTdRKe2M+lim5bhlciwue3v2VceoIQcwXUt63+E=)
2: wqVFEVjqEKEx9wlcMLA5-tVt-do.roa (hash: 26IFOLWA08mHoLUA2G9c2LdLUfKfMB5SGvlKCRZq35g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 02:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:b1:4f:1d:54:66:5d:44:fa:15:1c:09:24:d3:a4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94284b94325f5060f8a0e87c1be2827788f18f9
Validity
Not Before: Oct 11 02:01:10 2026 GMT
Not After : Oct 12 02:01:10 2026 GMT
Subject: CN=9ceab825acb34668fce78b54f7abcc4269a9960d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7a:f8:d8:7e:7c:12:b8:75:24:54:89:88:4e:
8a:7c:d1:12:00:d3:9e:31:3a:96:25:14:2c:a8:18:
d8:36:30:be:4c:dc:45:4b:56:f5:70:e7:d1:af:cc:
31:fc:55:a5:2f:69:46:55:7a:5f:b7:db:41:34:d3:
c7:d1:e5:63:10:88:73:99:b2:7d:d9:d3:91:5c:29:
dc:23:d7:03:20:d5:c3:7a:b7:5b:ed:32:07:ae:19:
cb:18:b4:fe:fb:32:f2:33:52:2f:21:f5:e2:01:a9:
9e:5c:de:f3:0f:f2:84:f8:4d:40:27:a9:ae:35:de:
45:f5:90:ed:0b:9c:98:6a:84:aa:13:b9:7e:8b:ee:
65:da:03:12:8a:dd:4d:72:e0:81:f4:9f:b8:d3:3c:
0d:26:7e:68:8b:86:96:a0:39:08:4a:4e:73:33:64:
6a:6b:0c:9b:cf:b2:af:ff:78:da:8a:7a:5b:e2:de:
da:8c:b0:ad:d0:30:9d:0e:4b:f9:a6:c9:74:1e:40:
a5:39:53:4a:91:89:23:fe:0c:fc:95:c8:72:1d:10:
1f:b3:96:cb:21:52:2a:11:70:52:d6:ce:84:71:0f:
d6:e2:51:cb:ff:e3:ba:32:43:35:16:3f:11:d2:96:
e7:f2:cb:05:55:87:41:c3:3e:5f:5e:99:6f:4c:75:
3b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:EA:B8:25:AC:B3:46:68:FC:E7:8B:54:F7:AB:CC:42:69:A9:96:0D
X509v3 Authority Key Identifier:
keyid:D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:25:33:50:67:c7:01:66:f8:60:28:22:1c:e6:7a:c3:55:1b:
cb:53:a5:05:ba:0b:b4:e7:dc:72:b1:05:73:5f:9a:a7:f4:32:
2b:a7:3b:e8:dd:07:43:4b:85:f6:46:c7:80:b9:1e:70:e3:ad:
de:86:34:c2:c3:9a:8d:28:f6:1c:df:4d:1b:3f:51:44:20:6f:
f7:df:8f:05:4d:f2:29:60:73:24:cd:d2:a6:27:d7:67:74:e8:
3c:75:b7:b7:2a:56:36:f7:24:fe:b8:6e:cb:f1:8c:14:3a:e6:
ee:25:83:33:75:5c:b4:e3:18:77:f8:52:63:80:7a:e7:e1:2e:
99:85:48:e6:53:6d:79:17:78:48:36:0d:87:70:f5:e1:ae:d9:
e6:ae:56:2d:2e:68:9c:0b:7a:21:e2:69:8f:62:40:55:4d:71:
77:b2:2e:ba:9a:6f:0b:1a:9d:33:75:72:27:28:bc:8c:6d:32:
97:24:77:8c:02:ef:73:04:98:cf:b9:4e:f6:bf:37:eb:76:f8:
0a:1f:85:a4:0a:7c:b6:97:72:13:f9:e0:06:ba:4f:c6:bf:b5:
2f:33:38:59:2c:91:56:15:fc:e0:f9:82:76:f2:76:68:aa:e1:
8c:7c:5e:f9:90:a8:fe:91:bc:1c:b6:21:9b:be:f6:03:a8:64:
93:91:77:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:54:04 2026 by rpki-client