Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.mft
File: ukQzhlmFp7teJpw3lK5vFkz8Lds.mft (raw, json)
Hash identifier: 6XERuvFYucpKe7hcywVkwDRFHDRctcGaaaffgoXeCWo=
Subject key identifier: A4:7C:70:96:BE:D3:6C:5B:0B:BF:4D:69:43:CF:6D:80:4E:83:93:5D
Authority key identifier: BA:44:33:86:59:85:A7:BB:5E:26:9C:37:94:AE:6F:16:4C:FC:2D:DB
Certificate issuer: /CN=ba4433865985a7bb5e269c3794ae6f164cfc2ddb
Certificate serial: 01A1385BCCAC7E43988F5D77EC18A676418B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukQzhlmFp7teJpw3lK5vFkz8Lds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.mft
Manifest number: 0A81
Signing time: Wed 14 Oct 2026 03:01:42 +0000
Manifest this update: Wed 14 Oct 2026 03:01:42 +0000
Manifest next update: Thu 15 Oct 2026 03:01:42 +0000
Files and hashes: 1: UfxnZEwkQdyHN4gibAtk_ce1zeI.roa (hash: Bl9GgITeZ3znWiaIE2fwC3TQwsJfWdhy5zENaMdMELI=)
2: ukQzhlmFp7teJpw3lK5vFkz8Lds.crl (hash: UUoe8D4V+NGuDXP52peovpE22Jya/r9Z35P2dvH4ygM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukQzhlmFp7teJpw3lK5vFkz8Lds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:5b:cc:ac:7e:43:98:8f:5d:77:ec:18:a6:76:41:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4433865985a7bb5e269c3794ae6f164cfc2ddb
Validity
Not Before: Oct 14 03:01:42 2026 GMT
Not After : Oct 15 03:01:42 2026 GMT
Subject: CN=a47c7096bed36c5b0bbf4d6943cf6d804e83935d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:db:3c:19:d3:0b:f4:17:d4:12:c9:0a:5a:29:
d7:61:6e:3e:16:c2:cf:68:66:2b:f8:c8:2f:4b:90:
44:32:6c:62:f5:ce:a1:a1:5a:0d:90:76:cf:0a:cc:
20:3b:b8:88:8b:76:19:14:48:dd:88:5b:3e:95:65:
a0:96:26:f9:c5:0f:bb:6f:24:bc:91:34:e5:81:21:
57:7f:d1:15:fc:22:aa:e3:d5:cc:ee:82:57:76:7b:
5a:af:e1:72:98:f9:8d:e5:57:e0:b0:6f:43:5c:f5:
3c:8d:26:3d:77:6b:6d:90:e8:cb:01:cc:df:e5:a7:
c8:48:0e:3d:1b:9f:1b:32:e5:9e:5f:c4:46:bb:46:
ce:d8:a9:9d:d1:fa:26:37:b8:4b:aa:53:30:40:6e:
7f:d7:f6:e9:fc:79:a0:a6:da:73:98:f8:2f:00:99:
ae:dc:ac:d5:7c:00:a4:2c:86:90:9b:b8:22:83:5d:
11:7a:91:79:1e:7b:e1:13:6e:ce:42:4d:9b:9e:84:
35:38:0e:80:85:86:d3:bc:de:5f:2d:38:b4:02:42:
eb:64:52:c5:b3:36:37:a2:1b:06:48:a3:c2:82:85:
21:fc:a1:55:c1:9d:f7:5b:34:0c:b8:f0:ec:b6:37:
c1:a1:0d:3e:c7:2e:73:5b:43:15:17:30:2b:82:b9:
d1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:7C:70:96:BE:D3:6C:5B:0B:BF:4D:69:43:CF:6D:80:4E:83:93:5D
X509v3 Authority Key Identifier:
keyid:BA:44:33:86:59:85:A7:BB:5E:26:9C:37:94:AE:6F:16:4C:FC:2D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukQzhlmFp7teJpw3lK5vFkz8Lds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:0f:cb:ff:bb:bb:c0:2c:a8:0b:e7:f1:30:30:df:ff:b8:ad:
15:46:37:2c:7a:2d:6c:cf:b7:be:c4:30:da:07:8a:cb:a8:7f:
1a:67:64:5a:39:f0:39:1c:43:1a:b1:f9:d9:c1:0a:79:c0:97:
42:52:8d:5b:1a:4f:cf:6d:27:a3:b6:4f:26:51:70:80:b0:a1:
fc:3c:06:37:ea:0b:2a:68:13:94:5f:89:9c:28:3b:f9:0b:7d:
3f:e4:5b:e3:9c:84:04:c0:a7:76:a3:2d:73:02:39:f3:e1:07:
03:28:88:7e:ce:01:db:5e:bd:e0:1c:bc:ce:9b:f4:82:7c:0a:
22:c4:f2:b6:8e:5f:63:e4:9a:71:9a:83:88:ee:84:9f:f7:33:
8a:a5:8e:1d:52:10:b9:7f:cc:c5:84:65:47:5f:10:7c:e3:65:
0d:e1:7f:ca:07:a4:d2:96:cd:b9:46:5f:4c:76:12:f7:be:b7:
bf:b5:6f:bf:66:b7:c0:82:e4:84:00:f4:68:87:1a:d8:99:c9:
ce:f2:4c:33:6c:8a:60:8d:8e:4f:43:ef:89:13:7a:81:d2:2a:
da:30:01:2a:d4:69:bb:eb:62:6d:56:03:c2:55:85:72:16:5b:
ba:bb:a3:72:d5:e2:a0:34:ea:56:99:7e:08:07:c2:a9:02:7e:
d7:4c:97:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 06:29:13 2026 by rpki-client