Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
File: UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft (raw, json)
Hash identifier: Y+g5P1Wo+vbgyt8Xxxrve/uzwP8mUegRlAgD7DvrrvI=
Subject key identifier: 10:15:B6:38:0F:5F:3C:0E:0C:5C:8D:20:AC:74:6E:77:D8:A1:40:BC
Authority key identifier: 50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
Certificate issuer: /CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Certificate serial: 019CABD9DABA1FE07B67F349A8344E407647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 00:01:47 +0000
Manifest this update: Mon 02 Mar 2026 00:01:47 +0000
Manifest next update: Tue 03 Mar 2026 00:01:47 +0000
Files and hashes: 1: 1cBPHp07EJ-UJNHMiRbTHD2251k.roa (hash: NcGpm88oPiijUJeByynWEeZDrBUROTCD4N4d0hBuT0w=)
2: O0z1dWysTLckLSWa-xjk4iWOyJo.roa (hash: xfK3oB04u+nOy6dQDoBykL7MzhjzL+9xzN4TDIDbuCg=)
3: UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl (hash: 9TpHihNiggU0tzifaLdP0hQeLf3goBsciUf/g4jc2Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:da:ba:1f:e0:7b:67:f3:49:a8:34:4e:40:76:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Validity
Not Before: Mar 2 00:01:47 2026 GMT
Not After : Mar 3 00:01:47 2026 GMT
Subject: CN=1015b6380f5f3c0e0c5c8d20ac746e77d8a140bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:66:ae:10:63:c2:fc:93:26:05:76:72:11:fb:
4f:a3:c7:95:dc:1c:48:86:ff:b5:bf:dc:a9:9e:cc:
17:8b:f6:b1:de:9f:3a:70:14:c5:a4:31:c1:53:46:
1b:e9:de:85:c9:9a:ce:ef:28:b4:aa:2f:0a:6e:69:
71:80:8f:c7:11:46:ad:df:b8:c7:55:8c:ea:a6:15:
5c:9a:ca:45:91:8b:e4:e8:09:51:43:1f:bc:dd:53:
a9:ad:71:32:c6:25:89:f1:1e:f8:bc:e8:4c:8a:6e:
5f:5c:8a:4e:55:a5:40:b7:bf:11:be:c4:e9:8a:03:
d3:3f:eb:0d:6f:5c:a3:6c:f8:c1:71:82:b2:fd:ab:
fd:1e:ed:eb:1c:3d:26:f9:bd:dd:92:6c:3c:09:f3:
fd:f1:9a:10:48:6d:be:b7:09:b7:00:37:57:e6:0b:
1e:81:b5:e2:54:5b:19:8a:1c:7f:2a:4e:62:50:13:
9b:b3:e1:29:c9:7b:5f:59:ed:3f:25:0a:20:57:5c:
1f:2c:d1:2b:4e:f3:1a:64:1b:cf:7a:c9:90:1e:14:
29:4e:cf:c6:c2:27:d0:d2:33:e2:06:ec:3d:b0:f9:
3f:66:2d:c8:31:9b:a3:48:b1:4e:1d:04:ff:9f:45:
fb:7c:c6:5e:48:da:02:24:c8:bc:a3:b0:b6:b8:6d:
60:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:15:B6:38:0F:5F:3C:0E:0C:5C:8D:20:AC:74:6E:77:D8:A1:40:BC
X509v3 Authority Key Identifier:
keyid:50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:5b:23:ba:9f:d4:a2:bf:7a:0f:6d:af:cc:b7:66:5f:f7:e6:
08:d1:eb:9a:23:e5:b3:7b:f0:cb:7b:2d:a5:06:50:fa:56:b7:
17:47:14:74:90:a4:d2:00:f1:f5:8a:e1:71:e8:1a:30:67:af:
73:17:23:8e:14:b1:8b:32:ed:fe:b2:a9:94:d2:84:2f:93:e9:
df:39:a1:d8:ca:7a:98:ea:e4:3a:6b:8f:97:ce:c7:9a:7b:24:
71:e5:af:48:7c:c9:cc:ef:5d:bb:cc:58:45:a5:f3:ef:18:7e:
15:3b:c5:94:f8:2d:04:ff:62:2b:06:20:08:04:8b:60:7a:26:
1d:c8:2a:2d:f7:50:12:8b:68:ec:57:8f:76:96:d4:c9:25:42:
20:98:4d:11:7e:4d:91:4c:a5:88:14:66:7d:20:0a:e2:bf:6a:
5e:b7:08:20:3a:4e:d9:65:50:68:94:9e:c7:41:62:9d:2e:d1:
f0:e7:29:7a:78:4f:d8:6d:8d:92:fc:9e:b5:e4:08:ed:f1:8b:
4a:81:86:e5:a1:2d:88:a2:f4:11:f6:c0:31:08:70:a9:46:22:
b4:bd:9f:db:f0:c7:ce:e8:d5:cd:fa:33:b4:d2:77:99:31:47:
86:61:be:5f:fa:e8:69:94:e2:a7:2e:c4:3d:e6:57:d6:25:b2:
bd:09:c5:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2dq6H+B7Z/NJqDROQHZHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYTA2YTQ1M2ZjZDVmMjZmYWY0ODIyYzRiNDU5MDk4ZGNh
ZmYwMzkwHhcNMjYwMzAyMDAwMTQ3WhcNMjYwMzAzMDAwMTQ3WjAzMTEwLwYDVQQD
EygxMDE1YjYzODBmNWYzYzBlMGM1YzhkMjBhYzc0NmU3N2Q4YTE0MGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mauEGPC/JMmBXZyEftPo8eV3BxI
hv+1v9ypnswXi/ax3p86cBTFpDHBU0Yb6d6FyZrO7yi0qi8KbmlxgI/HEUat37jH
VYzqphVcmspFkYvk6AlRQx+83VOprXEyxiWJ8R74vOhMim5fXIpOVaVAt78RvsTp
igPTP+sNb1yjbPjBcYKy/av9Hu3rHD0m+b3dkmw8CfP98ZoQSG2+twm3ADdX5gse
gbXiVFsZihx/Kk5iUBObs+EpyXtfWe0/JQogV1wfLNErTvMaZBvPesmQHhQpTs/G
wifQ0jPiBuw9sPk/Zi3IMZujSLFOHQT/n0X7fMZeSNoCJMi8o7C2uG1gjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAVtjgPXzwODFyNIKx0bnfYoUC8MB8GA1UdIwQY
MBaAFFCgakU/zV8m+vSCLEtFkJjcr/A5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUtCcVJUX05YeWI2OUlJc1MwV1FtTnl2OERrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kMzQ4YjUtMTUxYy00YWE1LWJkMDkt
ZWY1ZDUwMTFjYTc3LzEvVUtCcVJUX05YeWI2OUlJc1MwV1FtTnl2OERrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9kMzQ4YjUtMTUxYy00YWE1LWJkMDktZWY1ZDUwMTFjYTc3
LzEvVUtCcVJUX05YeWI2OUlJc1MwV1FtTnl2OERrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVlsjup/U
or96D22vzLdmX/fmCNHrmiPls3vwy3stpQZQ+la3F0cUdJCk0gDx9YrhcegaMGev
cxcjjhSxizLt/rKplNKEL5Pp3zmh2Mp6mOrkOmuPl87HmnskceWvSHzJzO9du8xY
RaXz7xh+FTvFlPgtBP9iKwYgCASLYHomHcgqLfdQEoto7FePdpbUySVCIJhNEX5N
kUyliBRmfSAK4r9qXrcIIDpO2WVQaJSex0FinS7R8OcpenhP2G2NkvyeteQI7fGL
SoGG5aEtiKL0EfbAMQhwqUYitL2f2/DHzujVzfoztNJ3mTFHhmG+X/roaZTipy7E
PeZX1iWyvQnFLw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:07:59 2026 by rpki-client