Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
File: 2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft (raw, json)
Hash identifier: bw5iOnxX/8SBe2XsclvK72b4Z8kEqMPs6TZ+bELBpYs=
Subject key identifier: 5D:DA:01:39:F6:E4:7A:CC:41:65:05:E5:59:45:2B:86:C0:F6:B0:1D
Authority key identifier: D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9
Certificate issuer: /CN=d94284b94325f5060f8a0e87c1be2827788f18f9
Certificate serial: 019E1C7D75A7090C3DCDF29F2FB42FFE013C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
Manifest number: 1648
Signing time: Tue 12 May 2026 14:00:44 +0000
Manifest this update: Tue 12 May 2026 14:00:44 +0000
Manifest next update: Wed 13 May 2026 14:00:44 +0000
Files and hashes: 1: 2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl (hash: Cta1MDwimbsnDNyFVP9/runx/8W6nZtjnPDtO4hvUmg=)
2: wqVFEVjqEKEx9wlcMLA5-tVt-do.roa (hash: 26IFOLWA08mHoLUA2G9c2LdLUfKfMB5SGvlKCRZq35g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:75:a7:09:0c:3d:cd:f2:9f:2f:b4:2f:fe:01:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94284b94325f5060f8a0e87c1be2827788f18f9
Validity
Not Before: May 12 14:00:44 2026 GMT
Not After : May 13 14:00:44 2026 GMT
Subject: CN=5dda0139f6e47acc416505e559452b86c0f6b01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:20:ca:92:77:fa:fd:a6:38:4a:e6:4d:e6:f8:
a1:bf:86:82:fc:d3:70:98:26:14:29:13:1b:a2:69:
d4:26:7c:6f:79:94:ad:39:3b:cf:de:ff:0d:ca:af:
ed:4d:f5:5f:3b:68:51:3e:43:92:cb:7c:e7:bb:40:
43:41:ec:df:c5:2d:93:e5:fb:06:86:2c:2a:7a:fd:
16:cb:f9:19:ab:1d:75:a9:b6:b4:6a:3d:77:00:77:
fd:fb:4d:74:e1:28:4e:f5:3f:a0:12:b8:cf:d4:15:
77:34:8c:dc:ac:17:27:42:e7:97:e7:16:90:60:74:
df:a5:2b:b2:51:cf:07:45:83:35:3b:7a:29:fe:a1:
04:7c:cb:47:7e:50:95:36:84:08:2f:8b:dc:0d:42:
e2:11:a2:05:c3:fa:4b:7e:12:ca:4a:3a:cc:5f:a5:
47:db:d4:59:c4:44:f8:74:45:f9:c8:85:06:9a:1b:
dc:bc:95:75:37:56:82:fb:86:1b:7f:58:ab:0e:9e:
08:68:71:24:0c:80:88:e2:9e:2b:7b:ed:d4:55:f5:
33:f6:e0:6a:3c:70:db:e2:b5:c4:fa:24:75:cc:17:
22:da:cb:62:3a:58:e7:1b:67:42:41:2a:03:07:7a:
93:72:a7:4b:04:38:c6:ea:84:75:ee:d1:47:8e:26:
51:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DA:01:39:F6:E4:7A:CC:41:65:05:E5:59:45:2B:86:C0:F6:B0:1D
X509v3 Authority Key Identifier:
keyid:D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:59:ec:c3:23:2f:4c:76:41:c9:51:94:57:05:f6:0c:7e:3b:
9f:b4:fb:5d:83:30:70:58:c4:3c:ff:a7:e8:65:ea:ad:52:4b:
02:cc:74:7f:39:b6:03:3f:f0:4b:23:4b:48:cc:60:a4:a5:6a:
58:6d:8a:9a:80:62:bc:80:bc:80:bb:64:34:30:be:e9:ef:37:
68:f0:82:41:95:62:4c:17:c0:5c:8c:be:32:2e:ee:5c:e9:3f:
e2:d6:13:bf:a2:3c:fd:de:f1:3c:c2:4d:00:62:77:41:a8:92:
8f:dd:96:5e:45:da:e6:49:ca:14:d2:8e:46:57:c8:22:8d:f0:
5b:4a:df:a3:e9:d4:39:fa:84:5b:11:18:f3:7e:51:e7:9c:19:
c2:3f:69:dd:be:d3:07:30:f3:10:ef:2d:21:9d:ea:cc:51:9e:
5c:99:d1:2d:75:96:bf:fd:66:21:12:30:a1:95:eb:ce:9a:e3:
7c:72:8b:56:4d:db:42:58:ec:c3:6a:52:09:52:1c:e2:ab:09:
0a:d2:f6:cf:a6:b6:e0:b3:36:9b:18:68:d2:3a:eb:15:ca:07:
10:d6:fb:cb:62:bd:d9:d4:5c:24:fe:74:85:0f:ff:7a:24:ba:
8a:97:d9:b4:b0:c3:bb:03:ac:f9:dd:36:4c:97:57:f8:6e:75:
09:73:00:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:34:11 2026 by rpki-client