Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
File: 2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft (raw, json)
Hash identifier: LHYLN/6aF4c/6tNToDw99vQ4RQdslZxPD/FB19pOItU=
Subject key identifier: 5C:EE:AD:13:BE:00:CC:6E:9A:38:B0:AC:15:94:28:F3:53:A5:F8:2B
Authority key identifier: D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19
Certificate issuer: /CN=d949caba3d4315607f4a6d627ece1ecea8cbc319
Certificate serial: 019D27DF5F49779D9D024523032E206CF39D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
Manifest number: 0DC5
Signing time: Thu 26 Mar 2026 02:00:43 +0000
Manifest this update: Thu 26 Mar 2026 02:00:43 +0000
Manifest next update: Fri 27 Mar 2026 02:00:43 +0000
Files and hashes: 1: 2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl (hash: d3mY3L/HhN+HFAp1wu+1P+F5UkoLug2//YvVVz1VE3w=)
2: 8mfySGwTbXk-kyUdS_kN8j97UXs.roa (hash: umX00/QtByILeR56I5S6BuyzviCNwqrKZKDQse00Reo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:5f:49:77:9d:9d:02:45:23:03:2e:20:6c:f3:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d949caba3d4315607f4a6d627ece1ecea8cbc319
Validity
Not Before: Mar 26 02:00:43 2026 GMT
Not After : Mar 27 02:00:43 2026 GMT
Subject: CN=5ceead13be00cc6e9a38b0ac159428f353a5f82b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e1:7a:cb:ad:ff:3f:42:84:fb:a8:60:f2:32:
7f:f7:a0:20:da:ac:a7:88:8b:58:de:57:29:42:9e:
51:1d:5d:71:ff:cf:1f:61:0a:94:e0:97:a0:d8:48:
65:a8:6f:90:9a:35:99:39:00:6d:65:79:13:de:06:
c0:03:33:a3:b8:05:fb:a0:47:4e:56:8f:fd:1b:ad:
97:14:46:18:c6:4d:ec:2b:d6:29:11:57:e3:d9:cd:
84:c9:e7:d8:93:98:dc:c3:96:70:82:20:2a:a1:9a:
c0:89:c7:cf:9b:1a:67:92:ff:ce:6f:29:b7:d4:67:
cc:71:07:e5:29:a8:ae:d8:11:e8:a3:89:1e:90:03:
0b:5f:61:9d:0d:0c:28:52:77:4d:73:0e:01:7e:34:
2e:5e:3c:6e:88:3f:59:e0:21:01:fe:c7:20:b1:23:
5f:ed:e2:0f:bb:68:a0:6e:a5:6f:04:02:74:31:ad:
7b:74:7a:19:11:93:a5:c5:99:8d:8d:22:c2:42:09:
f8:2b:6f:59:30:d6:2e:87:c0:69:09:3a:34:c3:3c:
5b:a6:cd:33:5a:c8:15:b1:69:c5:98:37:9e:8b:9c:
0d:69:0e:ca:47:7a:1a:45:68:34:c3:d4:7f:06:f8:
ec:8b:c7:9d:b9:a9:65:53:8f:d2:a9:3f:37:23:53:
c9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EE:AD:13:BE:00:CC:6E:9A:38:B0:AC:15:94:28:F3:53:A5:F8:2B
X509v3 Authority Key Identifier:
keyid:D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e7:90:69:0a:64:1a:57:ad:01:e9:6a:b0:a8:c3:1a:53:62:
3e:52:ea:ff:99:d9:49:92:15:35:d5:7d:80:09:1c:d3:63:ed:
af:ce:74:b1:8a:4d:fa:6a:5c:17:f1:b8:7b:ec:22:99:f1:f8:
31:b3:99:8b:6c:71:b0:dc:63:ef:d7:37:83:b7:c4:fd:e4:65:
d7:1a:9f:e0:bb:d5:ec:04:3d:67:9a:65:3b:76:20:36:6d:85:
81:b2:ea:65:9b:7e:0e:e3:6d:b0:1b:89:b9:dd:8e:1d:80:69:
09:eb:c6:f9:24:38:67:87:76:f0:0b:a9:37:d0:d4:38:a3:0e:
ab:6a:4a:cb:da:30:34:6c:c5:2b:e8:e9:e8:0f:cc:fd:55:35:
1e:f3:f9:d1:75:28:c6:8d:f0:9b:98:e7:31:49:80:23:65:78:
ed:bc:a3:44:bd:69:a6:57:2a:78:80:fa:80:5e:3a:79:6f:fa:
89:a3:51:4c:44:e0:dd:75:a8:94:f4:5c:e9:21:ec:e5:96:9f:
3e:1f:95:fb:ff:c8:4a:ab:c5:41:df:1d:61:27:f5:65:4d:65:
62:f1:c2:69:8b:95:1d:19:3d:1e:6a:ce:f1:0e:6e:ea:c6:2d:
0f:d7:81:b8:21:5e:2d:82:79:58:c7:7d:08:ca:ee:83:62:69:
df:d5:9b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:10:21 2026 by rpki-client