Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
File: 2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft (raw, json)
Hash identifier: q6nI1zBZUGJ6PnShcIK9p8g7HsZfzO3TScbMjKesWzw=
Subject key identifier: D9:3E:43:99:C5:D9:43:4C:22:A0:5E:8F:9C:79:AE:8A:6F:A1:16:0F
Authority key identifier: D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9
Certificate issuer: /CN=d94284b94325f5060f8a0e87c1be2827788f18f9
Certificate serial: 019D273AAC9DABAC30C58FB653EE6076B3E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
Manifest number: 15C9
Signing time: Wed 25 Mar 2026 23:00:49 +0000
Manifest this update: Wed 25 Mar 2026 23:00:49 +0000
Manifest next update: Thu 26 Mar 2026 23:00:49 +0000
Files and hashes: 1: 2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl (hash: +cQvypO3Q4GAtDkEmbN8YmrheOZuETtW5WQU04Ig/Yc=)
2: wqVFEVjqEKEx9wlcMLA5-tVt-do.roa (hash: 26IFOLWA08mHoLUA2G9c2LdLUfKfMB5SGvlKCRZq35g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:ac:9d:ab:ac:30:c5:8f:b6:53:ee:60:76:b3:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94284b94325f5060f8a0e87c1be2827788f18f9
Validity
Not Before: Mar 25 23:00:49 2026 GMT
Not After : Mar 26 23:00:49 2026 GMT
Subject: CN=d93e4399c5d9434c22a05e8f9c79ae8a6fa1160f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c9:08:06:e7:0a:a3:d4:92:0b:32:65:88:88:
23:a0:e7:95:3a:c3:41:20:6a:ec:76:af:f2:56:b7:
4a:ff:96:d0:e7:cc:de:ef:28:79:76:04:8f:67:1e:
0c:14:22:67:87:83:35:33:8e:c3:34:7c:da:9f:fb:
9d:cd:ec:4e:49:ee:82:ad:17:63:93:13:fb:07:1a:
97:fe:48:24:44:05:9c:be:62:e5:ca:b1:84:0f:cd:
e8:2d:e9:d2:9a:d0:8b:f2:80:6d:30:af:3d:b9:65:
2d:86:e5:ed:2e:70:7e:bb:b7:97:dc:26:7c:db:65:
99:01:ff:b9:58:36:34:b2:06:d7:af:a0:41:eb:15:
96:ce:85:16:7c:02:03:a0:c1:ab:f7:c5:4e:b9:4c:
02:8c:84:f9:7e:f7:57:96:f1:53:66:80:64:b9:3b:
15:9f:21:99:12:9e:08:7b:79:84:07:cd:c5:0d:7d:
9c:6f:d5:a7:d4:b6:f7:9e:5b:14:81:eb:cd:8b:41:
d0:02:30:06:c9:01:b1:8d:7d:35:ea:d6:5c:a7:dc:
64:a8:f5:b6:aa:34:d6:df:39:9b:b1:28:2a:0b:d4:
fb:6f:92:5f:98:94:0b:85:c1:e6:ad:c8:ce:d3:77:
6a:f7:dd:00:94:42:0f:66:7a:47:8b:1b:5c:13:49:
6c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3E:43:99:C5:D9:43:4C:22:A0:5E:8F:9C:79:AE:8A:6F:A1:16:0F
X509v3 Authority Key Identifier:
keyid:D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:10:92:b2:b0:75:f6:e4:4e:c4:db:5d:87:82:cd:71:07:c6:
60:b6:4f:2f:c1:92:7f:15:9e:94:17:31:e6:ee:aa:5e:13:3d:
c8:ce:24:32:ce:73:8c:19:03:32:d1:3e:96:2f:be:aa:14:c8:
14:9a:57:2e:16:aa:e1:13:c4:03:5b:ca:52:57:1c:ac:59:50:
29:6c:3e:df:6c:f7:2f:4c:72:ca:29:50:b4:58:91:21:40:eb:
69:ca:29:65:32:85:f8:92:07:bc:ab:5c:f8:1c:ac:2d:ed:9f:
09:1f:1f:b2:d1:58:25:fa:82:41:3d:dd:17:6c:43:c0:7f:a2:
1e:25:cf:98:d4:7d:6f:09:c0:6a:10:b0:f4:8f:8a:6b:9d:32:
ab:6a:c1:df:18:5e:e1:fb:23:f5:8b:bd:6e:42:f5:cf:c5:9b:
31:50:18:f0:3f:aa:98:fe:82:67:6e:a8:4e:5f:69:16:e9:45:
e2:cb:03:04:0f:ca:92:f1:a1:30:73:3a:97:bd:f5:30:15:48:
49:a1:10:1e:13:33:e0:27:d7:38:b2:2e:a4:06:8f:bd:dd:b3:
33:f8:58:51:28:80:59:6f:02:3d:ea:82:f7:97:fe:1c:ff:64:
67:d2:a2:7e:20:c0:4c:d1:0c:be:dd:b2:1f:c3:d6:4b:c1:5d:
25:d7:53:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOqydq6wwxY+2U+5gdrPmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NDI4NGI5NDMyNWY1MDYwZjhhMGU4N2MxYmUyODI3Nzg4
ZjE4ZjkwHhcNMjYwMzI1MjMwMDQ5WhcNMjYwMzI2MjMwMDQ5WjAzMTEwLwYDVQQD
EyhkOTNlNDM5OWM1ZDk0MzRjMjJhMDVlOGY5Yzc5YWU4YTZmYTExNjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMkIBucKo9SSCzJliIgjoOeVOsNB
IGrsdq/yVrdK/5bQ58ze7yh5dgSPZx4MFCJnh4M1M47DNHzan/udzexOSe6CrRdj
kxP7BxqX/kgkRAWcvmLlyrGED83oLenSmtCL8oBtMK89uWUthuXtLnB+u7eX3CZ8
22WZAf+5WDY0sgbXr6BB6xWWzoUWfAIDoMGr98VOuUwCjIT5fvdXlvFTZoBkuTsV
nyGZEp4Ie3mEB83FDX2cb9Wn1Lb3nlsUgevNi0HQAjAGyQGxjX016tZcp9xkqPW2
qjTW3zmbsSgqC9T7b5JfmJQLhcHmrcjO03dq990AlEIPZnpHixtcE0lsOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNk+Q5nF2UNMIqBej5x5ropvoRYPMB8GA1UdIwQY
MBaAFNlChLlDJfUGD4oOh8G+KCd4jxj5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlVLRXVVTWw5UVlQaWc2SHdiNG9KM2lQR1BrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hMjQwOTUtMDkwOC00ODg0LTkyNDQt
OTVkNTk0NjVlOWE4LzEvMlVLRXVVTWw5UVlQaWc2SHdiNG9KM2lQR1BrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9hMjQwOTUtMDkwOC00ODg0LTkyNDQtOTVkNTk0NjVlOWE4
LzEvMlVLRXVVTWw5UVlQaWc2SHdiNG9KM2lQR1BrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUxCSsrB1
9uROxNtdh4LNcQfGYLZPL8GSfxWelBcx5u6qXhM9yM4kMs5zjBkDMtE+li++qhTI
FJpXLhaq4RPEA1vKUlccrFlQKWw+32z3L0xyyilQtFiRIUDracopZTKF+JIHvKtc
+BysLe2fCR8fstFYJfqCQT3dF2xDwH+iHiXPmNR9bwnAahCw9I+Ka50yq2rB3xhe
4fsj9Yu9bkL1z8WbMVAY8D+qmP6CZ26oTl9pFulF4ssDBA/KkvGhMHM6l731MBVI
SaEQHhMz4CfXOLIupAaPvd2zM/hYUSiAWW8CPeqC95f+HP9kZ9KifiDATNEMvt2y
H8PWS8FdJddT8g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:34 2026 by rpki-client