Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
File: 2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft (raw, json)
Hash identifier: 8ncDdwGzhZ8BE58aQ6Lykv6RLQVBPMky3W+5beLo+rc=
Subject key identifier: 7F:D2:BE:B3:6F:E4:08:A0:C9:E2:01:92:6F:14:E8:C5:84:5E:DD:06
Authority key identifier: D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19
Certificate issuer: /CN=d949caba3d4315607f4a6d627ece1ecea8cbc319
Certificate serial: 01A0D83BF9906322397A5E2C60161778A7AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
Manifest number: 0FAE
Signing time: Fri 25 Sep 2026 11:03:24 +0000
Manifest this update: Fri 25 Sep 2026 11:03:24 +0000
Manifest next update: Sat 26 Sep 2026 11:03:24 +0000
Files and hashes: 1: 2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl (hash: enIOZbYM7Cnqx+qjPF00+/BLXkobS1NbK14H7XPK4Qg=)
2: 8mfySGwTbXk-kyUdS_kN8j97UXs.roa (hash: umX00/QtByILeR56I5S6BuyzviCNwqrKZKDQse00Reo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3b:f9:90:63:22:39:7a:5e:2c:60:16:17:78:a7:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d949caba3d4315607f4a6d627ece1ecea8cbc319
Validity
Not Before: Sep 25 11:03:24 2026 GMT
Not After : Sep 26 11:03:24 2026 GMT
Subject: CN=7fd2beb36fe408a0c9e201926f14e8c5845edd06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1d:22:c8:96:94:e0:8a:f9:7a:be:8e:2b:80:
9e:57:bd:41:6c:74:89:92:d3:24:69:7b:f0:51:0f:
58:42:f1:c8:e9:27:0a:3e:6c:87:42:81:99:9c:4d:
76:57:e0:82:09:f6:b6:ed:f9:55:10:f6:31:a2:6f:
5e:53:7c:ed:e5:4f:15:e5:a7:d1:3a:b1:c2:77:20:
46:1b:b8:52:aa:94:00:4f:99:70:66:71:59:5e:21:
62:ab:e4:fb:ad:b9:6d:20:19:1e:fb:ca:8c:89:13:
95:8a:d3:15:57:04:01:2c:bc:dc:fa:78:06:fe:cd:
31:06:67:3a:41:da:04:c9:a1:13:8c:a5:6a:ee:59:
94:22:3c:be:26:a7:47:c5:b4:97:3a:30:9c:ab:a7:
39:22:80:00:26:c5:50:1c:e7:61:90:b5:94:4f:4e:
01:9e:11:78:75:8d:8a:2d:19:61:0a:5f:58:46:fd:
9a:a5:a4:c3:27:e4:4b:54:dd:aa:b5:a7:26:7f:bd:
fc:5d:97:65:71:e3:10:cd:28:db:2a:f6:ba:55:51:
36:40:d0:93:96:c5:b4:a6:97:01:a7:b9:ca:9f:b0:
d8:4e:1b:c2:46:cb:c1:37:da:a7:fe:47:68:ff:89:
2b:c9:d1:c1:39:08:a3:28:8f:9c:eb:f4:6e:cd:57:
59:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D2:BE:B3:6F:E4:08:A0:C9:E2:01:92:6F:14:E8:C5:84:5E:DD:06
X509v3 Authority Key Identifier:
keyid:D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:17:20:09:de:e8:f2:19:68:97:c0:24:3b:46:16:58:84:8a:
95:88:c4:c3:b5:65:95:81:1b:07:4c:7e:a0:05:6e:e3:f7:73:
3e:ea:29:f5:24:38:10:a3:55:20:6b:cc:59:b9:2a:c1:e8:01:
32:d3:ce:01:c2:37:19:72:ff:11:5f:b1:b4:75:f1:64:ae:16:
be:ad:60:1c:30:88:9b:ea:27:e5:3a:ad:8f:78:2e:90:4f:d3:
34:c4:03:64:09:56:cf:36:a3:42:5c:1e:83:78:f2:31:83:ba:
59:1b:95:dd:83:f4:be:61:31:2f:c3:2f:ed:c4:d3:f0:62:03:
aa:77:66:d3:cb:f1:27:ae:42:b8:f4:3e:18:e9:75:ca:4f:0b:
a6:c2:1e:9d:9a:61:00:ae:44:c3:51:36:5a:32:ef:85:a9:15:
ea:29:37:20:76:3a:bf:6b:39:8e:32:e0:a5:3d:9d:fb:94:8a:
83:fd:bf:b5:0e:3d:4b:74:38:bd:8b:26:c8:21:6c:f8:f9:5a:
f1:26:c5:48:33:19:79:b0:10:5b:01:3c:1b:e7:10:12:e1:ce:
05:40:cd:65:80:9a:99:9a:f4:db:c8:0f:b6:90:be:98:c4:8d:
f5:81:0f:9a:a2:2d:50:59:94:2e:5f:95:23:40:f7:0d:01:bd:
d0:ef:9b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:56:46 2026 by rpki-client