Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
File: 2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft (raw, json)
Hash identifier: Dwo4/bd3pY78tyA5Ped028udPte4Zg0v/lB0+CKVDJs=
Subject key identifier: FC:22:1E:32:E7:DA:93:5C:B3:80:FF:BB:3D:F8:E0:C1:E5:01:12:AB
Authority key identifier: D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19
Certificate issuer: /CN=d949caba3d4315607f4a6d627ece1ecea8cbc319
Certificate serial: 019FA906E8D98F8A8E7D51E2C7ADF43AEFBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
Manifest number: 0F11
Signing time: Tue 28 Jul 2026 14:00:30 +0000
Manifest this update: Tue 28 Jul 2026 14:00:30 +0000
Manifest next update: Wed 29 Jul 2026 14:00:30 +0000
Files and hashes: 1: 2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl (hash: Bgy1vCe/y5q8nzRKzKisF8Qun7y2Rs72isT6JSupMo8=)
2: 8mfySGwTbXk-kyUdS_kN8j97UXs.roa (hash: umX00/QtByILeR56I5S6BuyzviCNwqrKZKDQse00Reo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:e8:d9:8f:8a:8e:7d:51:e2:c7:ad:f4:3a:ef:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d949caba3d4315607f4a6d627ece1ecea8cbc319
Validity
Not Before: Jul 28 14:00:30 2026 GMT
Not After : Jul 29 14:00:30 2026 GMT
Subject: CN=fc221e32e7da935cb380ffbb3df8e0c1e50112ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bf:13:f1:4d:9a:c5:ae:4a:65:f1:e5:95:73:
51:34:5f:54:3d:d5:40:f5:af:27:11:a7:a2:73:97:
d1:2c:47:af:e7:a8:a5:cf:54:45:62:84:72:c8:04:
c4:fc:47:b3:f4:11:b9:3c:1b:d3:b6:1c:03:d9:d5:
5b:e7:13:1f:27:04:fb:80:1d:c2:63:9e:4d:71:b4:
c7:db:38:29:ee:60:98:f6:73:ab:26:0f:93:5e:f1:
ee:37:60:19:0e:96:49:2f:e9:ab:6e:bd:de:da:9c:
ca:13:4f:b5:58:ec:4b:a4:80:be:97:22:4b:bb:68:
c6:a3:a6:b7:0d:f5:8e:87:50:4e:a3:0c:f9:4e:ad:
3f:bc:51:f3:03:9b:62:95:6e:8a:9a:d3:aa:5d:2d:
e4:23:1c:65:24:57:78:7b:ae:89:ad:4c:d7:bd:1d:
c3:9b:bd:01:a0:6d:66:22:24:ac:eb:2e:6f:32:5e:
3e:79:ff:5d:9d:c9:fc:f5:d7:62:d5:23:5c:70:0d:
07:a2:fa:bd:85:64:4d:ec:12:87:f8:82:7c:f9:75:
25:d2:ed:cd:5d:71:d9:3e:62:13:79:c7:6c:61:d5:
b3:fa:c6:36:7a:6d:70:a8:62:a2:23:6d:0c:32:d0:
44:08:ba:33:96:8b:c3:2b:10:3a:c2:92:33:63:45:
26:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:22:1E:32:E7:DA:93:5C:B3:80:FF:BB:3D:F8:E0:C1:E5:01:12:AB
X509v3 Authority Key Identifier:
keyid:D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:2f:81:95:85:f8:40:7f:d8:9f:e0:2a:5a:7f:f4:a4:23:9b:
b8:28:e7:53:f5:96:58:56:7e:9b:e6:e3:d3:1e:6a:a8:66:7b:
08:6f:9c:40:fc:54:8c:50:20:9c:ff:24:0c:e5:df:15:8a:03:
c6:d7:d7:a7:0c:45:49:ec:96:4b:40:66:cb:2c:e6:1d:31:1f:
9c:61:46:5a:4b:18:70:ad:01:13:0b:6c:d8:bb:3e:d3:44:49:
2c:46:f7:f2:62:ef:9e:06:32:27:62:8d:c7:94:e6:be:1e:1c:
41:e6:74:03:4b:01:0a:a4:7a:ef:4c:d0:9a:e1:b9:e4:9f:90:
24:f1:0c:02:e6:9b:c0:81:e4:d9:5d:04:df:00:76:b9:35:32:
62:21:8a:56:82:30:8e:65:b4:32:98:6a:d7:ab:dc:ce:90:52:
f0:36:4b:9f:17:f9:22:ba:ad:7c:c6:8f:d2:f3:39:2f:52:6c:
47:a2:ab:c4:4d:e7:5b:54:36:fe:b2:b7:4c:0e:bd:c2:6d:e0:
f5:d2:c8:60:7a:64:31:81:0b:c2:5a:f9:d2:c9:db:51:27:8d:
16:f4:6b:09:d5:99:16:60:57:b2:b1:fb:37:37:19:f7:df:2c:
aa:fb:c5:cb:c5:cb:1c:65:37:ce:02:d0:2f:83:d3:67:01:f5:
b5:9a:43:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:15:43 2026 by rpki-client