Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
File: ukxoXvpqLBBFY38CejJcCux5wBU.mft (raw, json)
Hash identifier: gSloxNMF4L5+jfkAqoVpUDRQpjhz7W15bdKKtko7G3k=
Subject key identifier: 48:77:A4:DC:73:F9:3B:C3:D5:CE:5D:35:86:7A:8A:D6:B2:FE:30:5F
Authority key identifier: BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
Certificate issuer: /CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Certificate serial: 019EC25B98D4503B16A545DF60C663AFCFE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
Manifest number: 0D22
Signing time: Sat 13 Jun 2026 19:00:43 +0000
Manifest this update: Sat 13 Jun 2026 19:00:43 +0000
Manifest next update: Sun 14 Jun 2026 19:00:43 +0000
Files and hashes: 1: KApK1eZ3dReQSsXRIwoW7xEMCfc.roa (hash: I01yvmR81aVECy/LZF2a4cMND5HAKMaYQMS7oZOPJ6c=)
2: sMxn8ZHV7zGVUdfXdG1zEbgYw2k.roa (hash: ubV13xd7F+TAQ+CmwFI8p32k3paHxp1b+b+S6Z39W1M=)
3: ukxoXvpqLBBFY38CejJcCux5wBU.crl (hash: kZJFIpNCY2CiV9rl5taXTIBxofkQNvo5Ko0x0NEqcsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:5b:98:d4:50:3b:16:a5:45:df:60:c6:63:af:cf:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Validity
Not Before: Jun 13 19:00:43 2026 GMT
Not After : Jun 14 19:00:43 2026 GMT
Subject: CN=4877a4dc73f93bc3d5ce5d35867a8ad6b2fe305f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1b:9d:1a:db:59:89:f5:7e:cf:61:7f:c0:b9:
cb:23:e7:ad:be:19:33:31:62:26:94:46:23:26:2a:
a4:07:7e:95:ea:66:00:ce:47:f0:30:52:c6:d0:a9:
71:3d:42:40:b2:ef:ea:a1:12:d7:b0:39:61:6f:e6:
74:69:bd:81:c9:db:9c:aa:60:ca:09:55:48:dc:32:
ce:af:31:64:51:24:bb:fb:06:e4:e6:f3:3c:d2:de:
56:df:05:c3:fa:42:f7:73:34:e7:22:65:52:db:d3:
63:5e:b2:7e:76:d9:c0:0f:96:c6:8b:f4:f0:f1:21:
23:3d:7f:d0:27:d4:bf:8d:c5:60:16:b3:08:ea:86:
c3:9e:85:89:d4:7b:9b:c0:3b:a7:8b:01:fd:31:2b:
d9:17:3f:15:48:a5:8a:e2:d0:c3:ac:4f:b3:e8:5c:
08:9b:8f:32:c8:89:b5:0e:57:54:64:59:7d:02:fb:
30:b7:78:0e:45:ed:ef:b3:f5:a5:f3:4d:fb:41:25:
91:32:03:27:1f:4a:cb:b9:c4:cd:18:51:27:ce:58:
09:e8:13:2e:fc:b7:de:e3:c3:6c:ea:d9:e0:0a:f9:
14:6f:23:3e:e2:34:f4:f6:95:dd:6b:b3:21:3b:b8:
ab:15:f5:a8:69:da:7f:04:43:db:2c:2e:c7:17:5c:
5e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:77:A4:DC:73:F9:3B:C3:D5:CE:5D:35:86:7A:8A:D6:B2:FE:30:5F
X509v3 Authority Key Identifier:
keyid:BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:2d:35:3b:4e:10:bc:e0:7d:7f:eb:37:a6:4c:3b:2f:88:b6:
1b:0c:64:2b:1a:b1:bf:74:c4:c7:cc:c5:16:9d:83:65:f6:1b:
2a:12:00:0a:e8:8a:dd:57:4b:e7:c1:33:7f:f9:ec:24:00:40:
84:f9:49:3c:89:cd:28:70:59:87:ab:7a:a8:17:48:21:4c:f0:
95:8a:be:c6:22:b8:b6:51:27:f6:01:e0:3a:0d:c8:fc:2f:92:
91:91:fd:f6:18:25:82:6e:97:83:51:fd:ba:a8:52:61:3f:c8:
7c:76:cc:a1:76:e7:c8:fc:13:1b:1b:1a:8a:18:8d:7a:c2:32:
91:c2:ae:f2:fb:21:f8:c4:eb:70:01:d7:76:41:78:d1:d9:80:
e0:aa:12:d8:d8:cc:62:3d:b5:c0:f9:f5:ea:f1:42:48:29:9c:
92:6d:4d:2c:0b:8b:77:a0:17:5c:2e:49:6a:7d:df:57:72:f4:
63:c5:fd:46:9c:c1:14:2f:2a:f1:a2:96:7e:5f:bc:fa:de:4f:
50:2a:e3:f0:cd:66:29:5f:af:fc:01:47:21:a5:43:cc:51:c6:
71:26:2a:07:d8:ec:27:ad:85:67:7f:4d:fd:83:2c:7c:2a:77:
73:10:2a:b3:f4:16:06:b8:9d:85:ec:e6:95:3a:63:74:7e:db:
56:54:2c:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CW5jUUDsWpUXfYMZjr8/oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNGM2ODVlZmE2YTJjMTA0NTYzN2YwMjdhMzI1YzBhZWM3
OWMwMTUwHhcNMjYwNjEzMTkwMDQzWhcNMjYwNjE0MTkwMDQzWjAzMTEwLwYDVQQD
Eyg0ODc3YTRkYzczZjkzYmMzZDVjZTVkMzU4NjdhOGFkNmIyZmUzMDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hudGttZifV+z2F/wLnLI+etvhkz
MWImlEYjJiqkB36V6mYAzkfwMFLG0KlxPUJAsu/qoRLXsDlhb+Z0ab2ByducqmDK
CVVI3DLOrzFkUSS7+wbk5vM80t5W3wXD+kL3czTnImVS29NjXrJ+dtnAD5bGi/Tw
8SEjPX/QJ9S/jcVgFrMI6obDnoWJ1HubwDuniwH9MSvZFz8VSKWK4tDDrE+z6FwI
m48yyIm1DldUZFl9Avswt3gORe3vs/Wl8037QSWRMgMnH0rLucTNGFEnzlgJ6BMu
/Lfe48Ns6tngCvkUbyM+4jT09pXda7MhO7irFfWoadp/BEPbLC7HF1xeTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEh3pNxz+TvD1c5dNYZ6itay/jBfMB8GA1UdIwQY
MBaAFLpMaF76aiwQRWN/AnoyXArsecAVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWt4b1h2cHFMQkJGWTM4Q2VqSmNDdXg1d0JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS80Mjg3MmEtNTYxNy00ZWMyLWFiOGQt
Yzg2MDQ3MjA2NDJkLzEvdWt4b1h2cHFMQkJGWTM4Q2VqSmNDdXg1d0JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS80Mjg3MmEtNTYxNy00ZWMyLWFiOGQtYzg2MDQ3MjA2NDJk
LzEvdWt4b1h2cHFMQkJGWTM4Q2VqSmNDdXg1d0JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHi01O04Q
vOB9f+s3pkw7L4i2GwxkKxqxv3TEx8zFFp2DZfYbKhIACuiK3VdL58Ezf/nsJABA
hPlJPInNKHBZh6t6qBdIIUzwlYq+xiK4tlEn9gHgOg3I/C+SkZH99hglgm6Xg1H9
uqhSYT/IfHbMoXbnyPwTGxsaihiNesIykcKu8vsh+MTrcAHXdkF40dmA4KoS2NjM
Yj21wPn16vFCSCmckm1NLAuLd6AXXC5Jan3fV3L0Y8X9RpzBFC8q8aKWfl+8+t5P
UCrj8M1mKV+v/AFHIaVDzFHGcSYqB9jsJ62FZ39N/YMsfCp3cxAqs/QWBridhezm
lTpjdH7bVlQsbg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:44:21 2026 by rpki-client