Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
File: 2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft (raw, json)
Hash identifier: HnLMpCuqoPUdqG/XRmtfNd+JxSp/aHjeCauL/LaYXNI=
Subject key identifier: 48:C1:62:46:4B:C0:48:42:53:D4:A0:2E:EF:A0:AD:63:B1:BB:DC:1A
Authority key identifier: D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9
Certificate issuer: /CN=d94284b94325f5060f8a0e87c1be2827788f18f9
Certificate serial: 019F9323BEC0085647ABA59FCD1163FF7CBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
Manifest number: 170A
Signing time: Fri 24 Jul 2026 08:00:21 +0000
Manifest this update: Fri 24 Jul 2026 08:00:21 +0000
Manifest next update: Sat 25 Jul 2026 08:00:21 +0000
Files and hashes: 1: 2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl (hash: orgNPA+R33JmWKwRhGS0CvzD+SQHA3Vw9rO+inn9H88=)
2: wqVFEVjqEKEx9wlcMLA5-tVt-do.roa (hash: 26IFOLWA08mHoLUA2G9c2LdLUfKfMB5SGvlKCRZq35g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:be:c0:08:56:47:ab:a5:9f:cd:11:63:ff:7c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94284b94325f5060f8a0e87c1be2827788f18f9
Validity
Not Before: Jul 24 08:00:21 2026 GMT
Not After : Jul 25 08:00:21 2026 GMT
Subject: CN=48c162464bc0484253d4a02eefa0ad63b1bbdc1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:23:4a:98:13:b4:23:8f:cf:73:e8:45:79:48:
fd:fb:ef:68:9e:50:62:2c:c5:dc:02:03:93:b4:fa:
79:d4:8d:1b:ce:07:f3:b0:d3:29:95:0d:4e:4b:6c:
42:54:35:1a:0d:18:1b:ae:ca:e0:5f:16:67:07:e4:
74:1e:20:2f:df:b6:8a:97:dc:e8:6e:6e:da:6a:b6:
e9:ae:d9:80:5c:20:d1:5f:4e:fd:57:2b:ab:0c:24:
da:69:3d:5e:eb:c3:62:c3:c3:a0:ab:21:7c:0b:3b:
45:af:1c:f7:64:4e:a3:ae:fc:2a:e1:af:6a:53:24:
12:b7:f6:9b:b7:2f:a4:a4:5a:9a:b6:16:28:6b:18:
56:b9:08:29:b4:a7:26:80:df:cb:36:f9:2c:a2:d6:
ec:6f:e3:09:89:d1:50:1d:61:98:e0:be:66:60:4d:
b5:d8:47:bf:5b:64:51:5d:8b:a6:87:e4:81:fd:13:
35:a5:5a:07:eb:b5:94:ba:cc:9a:09:0a:9f:98:59:
06:69:c1:33:00:03:43:31:98:47:5d:da:fa:d9:8a:
cc:20:df:84:b1:24:9a:32:08:6f:06:b6:8b:92:29:
2d:33:ce:5d:21:9b:47:82:e1:81:40:55:7a:9a:6a:
0e:85:c2:6d:56:a8:c5:43:b8:1e:41:c1:bd:91:28:
8f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C1:62:46:4B:C0:48:42:53:D4:A0:2E:EF:A0:AD:63:B1:BB:DC:1A
X509v3 Authority Key Identifier:
keyid:D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:9c:ec:ea:fa:12:6b:4f:bb:75:d9:43:43:5c:36:79:34:99:
49:e5:1c:df:3e:0d:d4:e2:7c:38:d1:b8:33:1e:99:b3:b2:f1:
b6:95:ed:68:e8:ff:10:e5:d2:d8:cd:1f:08:5b:99:9d:a2:4d:
01:77:d7:c5:42:d5:9a:5d:82:3f:16:78:da:8f:7d:b5:76:99:
04:b1:3f:bf:2c:79:b1:8b:38:eb:17:55:eb:9e:3b:b3:1a:dd:
d0:37:48:97:04:46:ce:e6:52:e7:9a:d0:1b:a4:57:ca:0b:d5:
96:d7:6c:87:34:b7:b2:0f:7e:99:75:1e:27:a8:eb:26:d8:75:
aa:94:f1:7b:18:84:30:c5:bd:c7:89:52:c9:63:f8:7a:65:5e:
72:67:48:25:43:f9:50:5b:4d:9a:68:9f:ab:97:da:13:dd:cf:
e6:19:58:f1:5c:56:6f:f3:21:9f:3c:02:28:7b:86:40:cf:16:
d5:77:ec:48:d5:1d:56:44:a3:2f:5b:d5:44:82:e6:b1:3d:93:
1a:76:b2:56:b3:d0:b6:0f:7b:2d:7e:76:11:eb:40:1b:a9:52:
13:a6:df:af:2b:c5:3a:e3:e3:a7:b5:d8:f0:cf:6a:41:ef:bd:
f2:34:11:12:04:e9:cd:4c:12:58:b3:1f:44:38:e5:f3:36:17:
1f:a7:bb:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:37:39 2026 by rpki-client