Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
File: UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft (raw, json)
Hash identifier: En3sF22VaILhoDn999YI3Sp/fEe1akfyevAFJsU02pk=
Subject key identifier: 0D:3D:AC:83:A0:1C:AB:70:B3:FE:57:C6:9B:3C:15:B6:4F:00:9A:0B
Authority key identifier: 50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
Certificate issuer: /CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Certificate serial: 01A0DBA8F3C87A0BF8472C42448C80DE7FA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
Manifest number: 1A74
Signing time: Sat 26 Sep 2026 03:01:17 +0000
Manifest this update: Sat 26 Sep 2026 03:01:17 +0000
Manifest next update: Sun 27 Sep 2026 03:01:17 +0000
Files and hashes: 1: 1cBPHp07EJ-UJNHMiRbTHD2251k.roa (hash: NcGpm88oPiijUJeByynWEeZDrBUROTCD4N4d0hBuT0w=)
2: O0z1dWysTLckLSWa-xjk4iWOyJo.roa (hash: xfK3oB04u+nOy6dQDoBykL7MzhjzL+9xzN4TDIDbuCg=)
3: UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl (hash: tUlJ6yFcMKdXISbO5bo0qd/0PXn3X6K5HPou33vusjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a8:f3:c8:7a:0b:f8:47:2c:42:44:8c:80:de:7f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Validity
Not Before: Sep 26 03:01:17 2026 GMT
Not After : Sep 27 03:01:17 2026 GMT
Subject: CN=0d3dac83a01cab70b3fe57c69b3c15b64f009a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5e:aa:91:07:0d:18:b4:c0:cb:21:0f:e2:42:
e0:03:7e:8c:77:da:e8:54:ba:01:ac:8e:69:65:a3:
17:08:92:4e:6c:c5:6b:98:7a:13:6c:6d:92:c3:83:
40:f3:73:c2:10:2a:12:b8:dd:db:01:2d:bc:52:43:
27:dc:fd:b9:c8:22:60:c1:8d:bd:44:de:fc:45:f1:
5d:4f:bc:a2:df:b8:67:18:f3:67:85:49:89:fe:5d:
3c:e5:f6:8d:aa:65:7d:a0:10:53:c5:e8:39:0c:78:
c6:08:98:7c:1d:f9:a5:30:67:ed:2b:79:cd:f3:36:
1c:ac:03:b7:c2:bc:6c:fa:08:ce:1c:b4:41:90:f4:
f6:53:19:25:c5:1c:81:2d:a0:c7:27:6a:7f:bd:e0:
aa:da:fa:07:a2:f5:d2:49:8c:bc:32:19:b6:99:f4:
93:db:28:6c:78:fd:86:aa:83:e5:e1:24:c4:af:30:
cc:51:69:99:d7:a6:dd:ed:2a:8f:17:43:9d:55:db:
1c:8e:ad:59:94:22:bd:97:33:c9:f5:34:c5:c7:a7:
7f:a8:59:f7:bf:db:fc:8b:96:2f:4b:a1:ee:fb:ff:
4c:e9:df:17:6c:39:c4:26:98:63:f5:e6:8d:9a:fc:
1d:48:43:06:5f:22:2d:0a:95:b9:8b:f1:33:4b:4d:
f5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3D:AC:83:A0:1C:AB:70:B3:FE:57:C6:9B:3C:15:B6:4F:00:9A:0B
X509v3 Authority Key Identifier:
keyid:50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:5c:7a:c3:57:79:09:ad:18:9a:ab:c1:f4:7e:ab:c0:2b:2f:
cd:88:d1:6d:24:e7:fd:aa:3e:22:5d:7f:09:b1:17:98:85:54:
d8:a4:df:2d:f1:e8:66:94:65:0e:06:8c:c8:5e:28:94:65:4c:
14:72:f8:bc:77:a4:3c:2e:41:3f:cf:9f:f5:6a:f9:72:76:1c:
e2:05:c9:99:5a:07:41:c9:17:2f:9a:9d:8a:c4:5b:14:d6:14:
8c:72:72:81:9b:d0:ce:42:c1:25:f4:60:2d:3a:5a:96:40:5d:
31:8d:fd:25:2a:a9:31:6e:15:79:c5:05:8f:71:ea:53:92:f0:
88:04:45:f2:42:d4:a5:9c:eb:24:dc:cc:5f:3d:e5:ec:23:f8:
7d:da:f7:6b:5a:1d:c0:5e:18:2b:09:cd:c5:a5:61:b3:7b:a7:
64:49:1b:6a:f5:2c:a4:2d:c3:21:5e:17:94:46:9b:c2:34:0f:
3c:a2:a2:d2:21:d2:fc:be:1c:45:35:0a:25:c7:6a:16:0f:67:
9d:37:db:c5:4f:38:2c:9e:7e:3b:93:e9:12:15:cf:47:54:ad:
46:b5:6f:41:d1:4b:d1:65:7f:30:35:7e:63:0b:18:b6:95:29:
59:d5:62:88:31:ee:2f:a9:d9:84:ab:55:ea:be:db:10:dd:91:
a2:ae:d9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:06:33 2026 by rpki-client