Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
File: uksi0igKF9DVTGhsm0M_C1tYAk8.mft (raw, json)
Hash identifier: ZOsOAxvx4xjgZM23WeCpqEoG9Nuj4CLmzr2j5vA0Ugc=
Subject key identifier: 83:9B:36:7B:CA:C0:33:07:5D:83:5D:26:C0:35:CA:96:00:8B:F3:E2
Authority key identifier: BA:4B:22:D2:28:0A:17:D0:D5:4C:68:6C:9B:43:3F:0B:5B:58:02:4F
Certificate issuer: /CN=ba4b22d2280a17d0d54c686c9b433f0b5b58024f
Certificate serial: 019CACB4EB327BD0F2D505A56B7B2487C365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
Manifest number: 172E
Signing time: Mon 02 Mar 2026 04:01:03 +0000
Manifest this update: Mon 02 Mar 2026 04:01:03 +0000
Manifest next update: Tue 03 Mar 2026 04:01:03 +0000
Files and hashes: 1: uksi0igKF9DVTGhsm0M_C1tYAk8.crl (hash: 0xU8ug6bwZ5ZS7I0wtv7was2dF08jh8yQPh24mBemng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:eb:32:7b:d0:f2:d5:05:a5:6b:7b:24:87:c3:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4b22d2280a17d0d54c686c9b433f0b5b58024f
Validity
Not Before: Mar 2 04:01:03 2026 GMT
Not After : Mar 3 04:01:03 2026 GMT
Subject: CN=839b367bcac033075d835d26c035ca96008bf3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:03:32:29:aa:d8:15:ec:18:01:00:db:1d:52:
3b:75:6e:58:67:4a:d4:9e:4d:52:c5:10:2f:b1:3e:
38:ba:ab:80:c1:a1:ce:83:f1:56:19:d4:2e:5e:11:
de:4a:55:ff:d7:02:36:b4:77:b1:7a:b5:e9:4a:b1:
0a:2d:e9:0b:fe:9e:53:82:fa:e7:d7:3b:b6:04:7b:
79:b2:f8:96:1c:71:87:7a:86:14:c5:4a:66:6c:4e:
fb:51:74:69:66:99:78:da:4b:38:48:bb:9f:ea:c0:
3b:05:25:56:f1:47:f3:18:20:8d:8f:56:6f:d3:1f:
72:fa:70:d1:ba:77:f1:c9:ef:28:f5:3b:67:d0:c5:
a9:5c:07:ec:b0:8c:e5:e2:6e:a2:a1:76:9d:af:74:
55:ff:01:c7:8f:a8:32:4d:a9:5a:6b:e0:59:b0:52:
e9:7d:db:5b:57:2e:ac:6a:08:38:26:ed:16:1c:f6:
dc:6c:db:1e:d6:64:45:13:30:c7:78:60:ed:c9:c5:
39:4e:fa:ac:4a:35:79:f4:80:37:6a:95:07:55:97:
48:53:48:60:f5:33:f1:94:6c:7e:8c:83:a8:10:7b:
e3:a5:d4:17:ab:64:18:3c:90:e0:97:8c:46:c7:00:
33:26:01:b1:ef:85:0f:eb:ba:03:e0:ce:a5:47:43:
ed:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9B:36:7B:CA:C0:33:07:5D:83:5D:26:C0:35:CA:96:00:8B:F3:E2
X509v3 Authority Key Identifier:
keyid:BA:4B:22:D2:28:0A:17:D0:D5:4C:68:6C:9B:43:3F:0B:5B:58:02:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:78:43:07:93:34:17:4f:d5:b5:3d:fa:9d:83:7d:b8:fe:3c:
5b:95:ec:47:b2:09:4f:31:d1:4e:51:ee:38:68:da:a3:19:14:
7c:24:40:27:dc:d2:ae:47:00:bc:62:0f:82:6f:d7:8e:72:f7:
b4:3b:8e:0e:1e:71:f7:4f:91:ad:76:81:3b:20:38:19:f4:aa:
e3:63:0d:87:8c:66:3f:41:ac:69:49:17:a7:16:22:d2:01:50:
c7:96:b0:1c:08:5a:26:37:d2:78:69:fc:54:a2:48:04:9e:a4:
c0:ec:72:0d:16:08:0e:7c:2f:00:9d:04:37:58:f4:ef:32:e3:
0d:25:2f:1b:61:8b:4f:bd:54:d5:e0:08:72:d4:cb:03:c4:1a:
b2:36:2e:96:89:23:0f:48:76:0a:71:36:6b:bc:e7:19:e1:94:
54:76:7d:01:e5:33:b3:2e:52:a9:a9:4d:92:0e:e7:69:58:4d:
51:bc:0e:14:a8:fc:2f:bd:88:68:d2:ee:b0:11:5d:46:55:bb:
96:6b:50:86:c8:3f:b4:7a:1d:20:5d:d3:77:9e:7b:2b:ac:cd:
0f:44:61:a3:ee:18:69:90:57:46:01:ff:f4:2b:fc:df:b5:cf:
55:b5:58:95:b6:9c:40:ad:86:18:7f:03:f3:80:0a:40:02:d1:
1d:45:c3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:53 2026 by rpki-client