Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
File: UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft (raw, json)
Hash identifier: Kls88/4p2my0i+rGYNhbpp4t15H/+fbtCYXf23pbXpY=
Subject key identifier: 21:15:38:62:BA:80:7B:1D:D3:BB:0A:BD:66:0C:8E:7A:B0:24:88:A7
Authority key identifier: 50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
Certificate issuer: /CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Certificate serial: 019FAA88659AD1DB74EEF58B5122B042375E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
Manifest number: 19D6
Signing time: Tue 28 Jul 2026 21:01:33 +0000
Manifest this update: Tue 28 Jul 2026 21:01:33 +0000
Manifest next update: Wed 29 Jul 2026 21:01:33 +0000
Files and hashes: 1: 1cBPHp07EJ-UJNHMiRbTHD2251k.roa (hash: NcGpm88oPiijUJeByynWEeZDrBUROTCD4N4d0hBuT0w=)
2: O0z1dWysTLckLSWa-xjk4iWOyJo.roa (hash: xfK3oB04u+nOy6dQDoBykL7MzhjzL+9xzN4TDIDbuCg=)
3: UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl (hash: dpt8a8DIjXPoZdeqFbsl6op4llybkDBn1yDuZQy89Jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:65:9a:d1:db:74:ee:f5:8b:51:22:b0:42:37:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Validity
Not Before: Jul 28 21:01:33 2026 GMT
Not After : Jul 29 21:01:33 2026 GMT
Subject: CN=21153862ba807b1dd3bb0abd660c8e7ab02488a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a7:f2:e9:6e:6e:70:67:4d:38:08:fa:79:04:
c2:81:61:a1:0d:3d:22:65:43:a0:d2:45:69:0a:29:
42:ee:a9:93:12:68:b6:87:63:45:22:a3:42:6d:1d:
a7:71:40:c2:34:9a:6b:49:ec:c9:05:dd:f7:c3:14:
02:20:f4:f3:d0:a4:ae:77:43:5c:3a:a4:79:df:98:
d1:22:c9:2a:9b:f8:e7:4a:6e:04:34:4d:e0:2e:4b:
5e:04:f2:1d:ec:20:4a:90:ce:53:d7:06:0a:61:a7:
ad:d3:0a:93:91:ac:51:1e:62:19:54:ef:53:00:5e:
69:1b:e4:13:fa:aa:34:96:ea:48:99:10:07:be:47:
4b:be:74:66:a7:97:b2:01:45:a8:3f:d0:b7:2e:52:
07:1b:f0:49:6a:92:69:b6:84:4c:1f:70:73:17:f9:
fc:40:cd:70:2d:38:a7:fc:c6:6e:3d:fd:31:ea:c5:
9f:22:41:7d:41:db:f2:98:77:ba:ef:e6:63:8a:0f:
95:87:c7:e2:57:7e:11:3b:af:54:c0:37:9f:78:ca:
a1:8c:97:16:75:19:b8:d4:24:a7:9d:c5:07:4f:f4:
10:29:03:20:11:90:c2:7c:4f:ad:c7:a8:71:28:e9:
ed:c8:79:40:68:03:5f:0a:af:62:ff:74:fc:12:b5:
a0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:15:38:62:BA:80:7B:1D:D3:BB:0A:BD:66:0C:8E:7A:B0:24:88:A7
X509v3 Authority Key Identifier:
keyid:50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:15:0a:be:b5:3c:f6:c1:68:9f:b3:fa:50:f4:f9:7d:ec:99:
29:de:a1:6d:b8:55:43:6d:8d:3d:83:a1:5a:94:7c:0f:26:65:
d8:ef:8e:98:74:6f:3b:79:a5:7a:3f:6b:f5:6b:b8:d1:6b:3c:
48:ae:06:66:9d:44:f3:cf:83:70:57:d8:dc:5f:fd:a9:55:f0:
4e:f7:22:89:9c:5d:a6:fd:2c:68:39:85:35:18:ef:9a:7a:48:
7e:3a:01:ba:20:1d:5a:70:ab:16:be:01:ca:a6:43:64:d1:3a:
cf:83:8b:ab:21:28:fb:d0:32:42:85:3b:0c:1d:99:1d:f2:fc:
2d:26:33:ee:e1:1b:39:46:14:a1:fd:df:f0:1f:16:b6:a3:4d:
fb:07:c8:34:fe:a5:d2:f4:ad:59:d0:53:28:98:9b:86:ee:fc:
05:a9:0a:16:4c:c5:e5:af:a6:0a:d0:b5:d1:91:79:96:a6:08:
e6:11:d8:21:e5:6e:f9:0f:b5:29:47:e5:b8:c9:e5:55:6a:0e:
3b:f3:68:ce:4f:db:e4:89:db:49:23:76:9d:90:de:b9:e1:56:
b6:91:71:b7:dd:b4:fe:53:7b:28:27:66:2d:21:9d:77:a4:e1:
f8:8f:7e:15:0c:78:54:9c:d3:0a:1f:a0:24:3a:04:a7:07:a2:
56:b7:ad:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:41:06 2026 by rpki-client