Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
File: UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft (raw, json)
Hash identifier: A6kdXRt4183BiW8+DwHVmlAuF+Vsyphh0WNdqHabsU8=
Subject key identifier: C5:DE:6C:97:96:4F:6E:C2:AD:65:6D:65:42:3B:BE:FA:93:22:33:87
Authority key identifier: 50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
Certificate issuer: /CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Certificate serial: 019D9962617EB0A16970B5EB269FEC7B7986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 03:00:54 +0000
Manifest this update: Fri 17 Apr 2026 03:00:54 +0000
Manifest next update: Sat 18 Apr 2026 03:00:54 +0000
Files and hashes: 1: 1cBPHp07EJ-UJNHMiRbTHD2251k.roa (hash: NcGpm88oPiijUJeByynWEeZDrBUROTCD4N4d0hBuT0w=)
2: O0z1dWysTLckLSWa-xjk4iWOyJo.roa (hash: xfK3oB04u+nOy6dQDoBykL7MzhjzL+9xzN4TDIDbuCg=)
3: UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl (hash: IcfIvxDz1+0bgakZhZA+70BGlumT5Ot7AtuSdsx7arI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:61:7e:b0:a1:69:70:b5:eb:26:9f:ec:7b:79:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Validity
Not Before: Apr 17 03:00:54 2026 GMT
Not After : Apr 18 03:00:54 2026 GMT
Subject: CN=c5de6c97964f6ec2ad656d65423bbefa93223387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6a:ad:3e:20:6c:99:a6:1f:ac:9f:74:ed:56:
ec:40:66:83:44:69:ad:b5:24:65:1f:29:bc:a2:d6:
29:17:74:27:18:26:03:88:4d:40:57:b6:3e:fa:51:
ce:a9:80:e7:54:45:44:cb:15:63:2c:2b:2f:22:84:
e1:c8:e4:7a:39:56:d6:a4:aa:d5:66:ec:15:37:f4:
a2:81:e6:2d:cc:44:de:f9:d4:6e:14:10:f5:05:95:
9c:de:f2:a7:3f:97:3f:93:b6:d5:6b:9b:18:f6:b4:
cb:d8:1b:ee:bf:3a:9a:08:c4:18:37:74:12:9c:d6:
9c:dd:de:0b:39:c3:8c:54:f4:70:85:a8:9f:8c:25:
82:b3:db:48:f5:af:12:f5:d9:92:4f:2d:d4:06:73:
04:98:88:1a:6d:46:98:37:34:23:9b:16:86:a6:09:
b8:58:77:3f:81:00:c4:08:8d:e4:c5:cf:eb:11:e9:
0b:1c:09:b8:04:e5:1a:db:46:b5:86:7c:9f:2e:f7:
e6:20:69:3e:d8:f3:8d:1d:a4:99:5e:f7:24:31:59:
2d:08:43:24:b6:c7:ac:1d:e5:23:e5:86:d1:eb:66:
f9:f0:06:48:ce:57:02:cb:26:92:26:26:2d:d4:ab:
d6:6c:40:e7:42:8c:ad:b4:1e:ab:9a:f7:1f:4c:4c:
d6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DE:6C:97:96:4F:6E:C2:AD:65:6D:65:42:3B:BE:FA:93:22:33:87
X509v3 Authority Key Identifier:
keyid:50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c8:d5:14:9c:92:0b:f2:56:6e:f9:bb:72:42:31:ad:ce:78:
f7:82:3e:b2:ed:5a:69:ce:43:fc:cf:a7:7b:f3:4a:e8:b3:bb:
e7:84:88:83:dd:c2:15:57:cd:e8:0f:2c:67:2c:f7:ab:58:30:
72:61:3f:7b:b0:c4:3a:19:3d:6d:a5:1b:a5:08:e3:85:44:de:
ae:cb:8c:ca:ff:ef:cd:55:b8:d8:f5:55:8d:ca:f4:8a:6a:a3:
b8:3a:24:b6:b9:f7:cd:cc:9d:1b:46:ff:56:85:63:d6:85:e7:
73:bc:bb:fe:4e:ef:4c:54:78:74:8f:0a:2d:c0:2c:0a:8d:db:
4e:82:8a:41:1f:d5:d5:97:e6:6f:d8:c5:67:1a:67:00:15:4c:
b9:d1:c8:b4:3d:bb:9e:83:11:f2:73:7f:63:bb:8d:fd:15:31:
64:08:2a:24:fe:32:6a:ff:4d:8e:4c:51:e3:e9:4f:2b:37:57:
c3:fc:2b:f8:08:bb:f4:08:9b:5f:7c:27:9e:d5:b7:4f:e4:e6:
5f:ac:b6:d1:7a:60:2c:91:8e:39:e5:79:5c:8a:84:40:3a:c1:
bf:4e:fa:5b:7c:a2:df:95:9e:fa:d7:1b:3b:45:d5:6f:79:23:
aa:df:1b:07:1f:ea:f4:6f:89:ca:10:8e:0b:91:54:41:3f:93:
de:ff:e9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:08:57 2026 by rpki-client