Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
File: uksi0igKF9DVTGhsm0M_C1tYAk8.mft (raw, json)
Hash identifier: KGOSNv9V7TbuiDn6jBnu1IS5P+eOyP7OOZRrVnXBuf0=
Subject key identifier: 76:92:AE:AD:DF:30:7F:29:DE:19:12:4B:70:1C:97:18:1E:41:26:6D
Authority key identifier: BA:4B:22:D2:28:0A:17:D0:D5:4C:68:6C:9B:43:3F:0B:5B:58:02:4F
Certificate issuer: /CN=ba4b22d2280a17d0d54c686c9b433f0b5b58024f
Certificate serial: 019DA3E61906F613DDB652010B2D329B0367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
Manifest number: 17AE
Signing time: Sun 19 Apr 2026 04:00:58 +0000
Manifest this update: Sun 19 Apr 2026 04:00:58 +0000
Manifest next update: Mon 20 Apr 2026 04:00:58 +0000
Files and hashes: 1: uksi0igKF9DVTGhsm0M_C1tYAk8.crl (hash: vcZrchVOr2A2oWZ2bNRKQSb94mp6nnMOugkZBGXsq3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:19:06:f6:13:dd:b6:52:01:0b:2d:32:9b:03:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4b22d2280a17d0d54c686c9b433f0b5b58024f
Validity
Not Before: Apr 19 04:00:58 2026 GMT
Not After : Apr 20 04:00:58 2026 GMT
Subject: CN=7692aeaddf307f29de19124b701c97181e41266d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:77:a2:e8:2a:86:69:bc:d2:53:c9:f7:99:0e:
02:29:49:57:f6:54:ac:3a:c6:08:94:41:8a:4b:a7:
27:16:64:75:65:8f:aa:2d:0e:b5:f2:ce:7e:6f:55:
19:7a:e8:e4:79:49:4b:86:f5:12:04:41:55:cd:02:
20:66:ef:37:ad:91:c2:fe:b4:60:bc:86:c6:b2:3e:
0a:3d:13:00:3e:4e:00:cc:ca:fc:09:e0:dd:f1:00:
1e:93:b1:b6:38:ae:a8:35:e6:60:c3:a7:38:60:f1:
8f:28:80:1d:e4:fc:61:7b:6e:29:58:2c:01:3c:f6:
f9:12:1f:40:d6:7d:da:a4:5e:c3:bb:ae:da:90:f7:
44:94:02:f9:48:52:06:7c:d5:ad:27:48:6b:46:d4:
86:09:06:37:97:89:bb:b7:e7:36:df:f0:df:a8:93:
a4:b7:c2:4f:90:97:58:a1:f0:65:19:65:09:c9:50:
3b:ee:58:a8:6c:94:f5:50:ca:aa:ca:02:54:9a:03:
dc:31:27:e8:18:e8:b6:b8:10:06:80:49:c5:a5:30:
7a:d8:e4:42:d8:9a:98:61:f9:db:93:c9:30:9d:63:
42:29:8a:63:07:0a:b9:b5:cf:98:9a:d0:e3:79:e5:
90:78:35:89:9b:4f:a5:44:b9:7d:68:e2:31:f0:2c:
b1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:92:AE:AD:DF:30:7F:29:DE:19:12:4B:70:1C:97:18:1E:41:26:6D
X509v3 Authority Key Identifier:
keyid:BA:4B:22:D2:28:0A:17:D0:D5:4C:68:6C:9B:43:3F:0B:5B:58:02:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ed:22:ad:bf:47:5e:95:2e:10:f0:8c:ed:85:94:11:a4:25:
fd:4d:26:6a:46:0f:5f:e7:d4:f4:fd:f5:93:80:ea:ef:8b:cc:
5b:b0:8c:15:cd:77:fc:b7:9c:44:48:e1:7e:03:f1:36:13:4f:
f7:d0:56:28:67:84:b2:d9:49:92:3a:cd:63:11:09:8f:40:c7:
52:ba:89:f5:9a:d6:3e:5b:54:aa:8d:74:a4:72:43:43:27:e4:
75:82:a2:ed:ba:37:ae:c8:ae:fb:c6:06:1c:db:d8:2b:54:cf:
4d:07:60:19:18:72:07:67:b6:76:e9:36:60:a5:78:3e:1c:19:
74:71:2e:7f:19:fe:77:d7:00:c6:f2:ef:09:b4:4f:09:55:4b:
64:43:90:7d:5e:f1:ed:30:b1:ef:0f:e2:b0:75:4d:02:24:d0:
67:62:e8:fb:cb:1d:59:9e:e5:2f:66:68:2e:3e:05:c7:80:a3:
74:3b:e6:eb:61:70:56:09:6d:0f:55:2b:0c:95:4d:27:42:48:
a7:54:af:b8:1f:ab:13:d9:b5:0b:bf:14:47:d8:ff:fe:a0:6e:
0a:1c:24:f3:44:04:5e:d1:72:7b:d7:ab:23:18:7a:1a:c1:03:
b7:7b:fd:c2:ae:19:f1:51:be:54:0d:6b:93:64:70:22:69:95:
d8:0b:e0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:44:03 2026 by rpki-client