Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
File: ukBDlux3brxmOzeQT1O_by22l94.mft (raw, json)
Hash identifier: c4Ea5a877ueFbMwtRc5vLlSYGFqKRU5xpWZBacR8q0o=
Subject key identifier: 29:C0:B6:73:12:9F:1E:FB:F3:92:6A:D6:55:97:EE:34:9F:C5:1F:0A
Authority key identifier: BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE
Certificate issuer: /CN=ba404396ec776ebc663b37904f53bf6f2db697de
Certificate serial: 019DA48B50D3DBA448CFCAFCAF63CF38BC1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
Manifest number: 17D8
Signing time: Sun 19 Apr 2026 07:01:26 +0000
Manifest this update: Sun 19 Apr 2026 07:01:26 +0000
Manifest next update: Mon 20 Apr 2026 07:01:26 +0000
Files and hashes: 1: tS44mZmIyFMs473UjL5U854eiII.roa (hash: KoRk1peqIoiZFVFsXXW3hidWdEm/mtcGGSeO03SIlM8=)
2: ukBDlux3brxmOzeQT1O_by22l94.crl (hash: rpFsz1K5k6ckuSZ2oHHHd7nudPf4ITJGivSwH++l8us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8b:50:d3:db:a4:48:cf:ca:fc:af:63:cf:38:bc:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba404396ec776ebc663b37904f53bf6f2db697de
Validity
Not Before: Apr 19 07:01:26 2026 GMT
Not After : Apr 20 07:01:26 2026 GMT
Subject: CN=29c0b673129f1efbf3926ad65597ee349fc51f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e0:69:ed:a3:bb:48:98:70:0c:29:8a:13:ee:
35:f5:1c:40:1f:d5:4f:86:e9:f6:ef:13:ab:e1:e6:
3f:7a:82:71:b1:99:3c:1a:73:e6:44:f4:92:81:31:
c1:2b:b9:be:d1:6e:1a:2d:4c:48:fb:4e:e6:8d:c5:
3d:cf:16:1d:2f:ff:61:de:9a:7f:7e:bb:b1:4f:64:
46:7e:92:39:73:88:91:fa:d6:f3:8e:9a:bd:5a:09:
8b:11:4f:a5:e5:d4:1f:76:2f:ed:1a:a6:50:43:f7:
a6:50:4e:eb:bb:5b:56:59:05:60:1f:67:44:a9:5d:
79:e1:d1:42:95:28:71:f4:48:2a:db:66:0b:25:3a:
34:d4:1c:db:35:85:13:4d:47:2e:40:07:73:01:e2:
a2:6d:b3:75:f6:5d:ee:5f:18:ad:87:63:0f:00:ba:
bb:50:f9:c4:9f:32:49:ae:0c:46:40:73:96:d6:7b:
8d:8c:ec:a6:c4:cc:57:05:45:cd:43:62:7a:f6:3d:
77:7e:69:13:f9:ee:a7:9a:72:85:5f:45:8c:56:be:
16:bc:94:af:81:67:83:a7:69:44:5c:5e:56:f3:02:
7f:01:40:97:07:90:fa:fc:e6:bd:9a:e0:84:fd:b1:
f3:b9:b6:57:e1:12:3b:57:ee:f3:5a:9b:17:34:0c:
e8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C0:B6:73:12:9F:1E:FB:F3:92:6A:D6:55:97:EE:34:9F:C5:1F:0A
X509v3 Authority Key Identifier:
keyid:BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:79:1f:76:e0:22:a1:fa:2d:64:57:60:60:5c:02:b9:aa:2b:
43:1e:a8:4a:03:58:d1:ee:45:ce:fe:de:d5:6e:15:1b:5b:3b:
03:27:be:62:f7:56:3e:60:95:47:88:c8:70:7e:14:08:b6:a5:
db:48:58:95:ed:44:f7:07:25:b2:e7:f2:8a:0a:5f:d5:92:b7:
a4:0e:b5:4b:a8:7e:34:de:0f:f7:4d:04:10:41:be:97:48:0e:
d7:2c:0d:33:76:ed:23:f6:c1:ed:4d:4a:68:fd:0a:e0:7a:62:
38:ea:ab:e8:8d:ff:57:bf:20:b6:a8:85:d6:4a:06:44:05:45:
04:63:c5:60:f6:b5:32:b6:73:a1:22:b3:f9:08:11:0e:d6:1c:
66:c9:21:45:d4:a7:0d:34:97:71:17:04:51:35:e1:a5:05:30:
47:15:89:01:a4:5e:a8:06:d5:cf:c3:05:17:60:63:0e:ee:79:
e9:2b:21:2c:86:ef:54:68:3d:f0:ef:b8:66:84:ae:a8:07:b9:
c3:b5:5c:bb:a2:9d:84:65:0c:2d:0b:67:a3:0f:c8:eb:a9:21:
d6:b8:6c:df:47:8f:7e:a7:d2:1f:9e:ec:a5:74:e9:27:f2:f4:
90:3d:a5:9d:2c:a3:dd:d6:db:36:16:59:93:ca:a9:e2:32:85:
c3:31:aa:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:59:51 2026 by rpki-client