Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
File: ukxoXvpqLBBFY38CejJcCux5wBU.mft (raw, json)
Hash identifier: 9yeaL129sTJQePU27ih47CQO+XF+qabc1X0M0EHNH+0=
Subject key identifier: 81:20:3D:9B:6B:E2:70:08:6E:72:F5:E2:7E:06:E9:4C:16:7A:FC:0B
Authority key identifier: BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
Certificate issuer: /CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Certificate serial: 019D9CD1E775115461AECE9B51F25B19288D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
Manifest number: 0C8A
Signing time: Fri 17 Apr 2026 19:01:34 +0000
Manifest this update: Fri 17 Apr 2026 19:01:34 +0000
Manifest next update: Sat 18 Apr 2026 19:01:34 +0000
Files and hashes: 1: KApK1eZ3dReQSsXRIwoW7xEMCfc.roa (hash: I01yvmR81aVECy/LZF2a4cMND5HAKMaYQMS7oZOPJ6c=)
2: sMxn8ZHV7zGVUdfXdG1zEbgYw2k.roa (hash: ubV13xd7F+TAQ+CmwFI8p32k3paHxp1b+b+S6Z39W1M=)
3: ukxoXvpqLBBFY38CejJcCux5wBU.crl (hash: jW0Xt0gKeUSQ7CfSZmRUs1wCJFmPRxEztqVGkHB1oDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d1:e7:75:11:54:61:ae:ce:9b:51:f2:5b:19:28:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Validity
Not Before: Apr 17 19:01:34 2026 GMT
Not After : Apr 18 19:01:34 2026 GMT
Subject: CN=81203d9b6be270086e72f5e27e06e94c167afc0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:64:e2:14:72:75:ee:40:81:e4:de:26:7a:4d:
b4:1f:a4:d5:03:9c:b6:b9:01:1f:75:8a:e2:e9:4a:
a4:0c:89:2c:71:30:be:d2:56:1a:5f:84:c4:6b:98:
a7:72:f2:e5:06:14:7a:c1:75:5d:a6:b7:80:5f:e1:
c0:d0:ea:22:9d:17:1e:4b:a5:59:0a:c1:57:33:52:
f5:20:ca:ae:31:1a:1a:78:a0:fb:c0:b5:35:b9:36:
2d:e7:ae:de:db:62:6f:91:17:2a:5f:00:87:83:62:
70:a6:d7:af:9a:92:43:6f:59:42:ca:96:e0:be:a6:
09:bf:d1:7c:98:10:8e:57:aa:b5:40:6d:9b:d6:91:
2c:20:22:f8:f5:55:fa:26:11:02:31:7b:06:96:d8:
98:9d:97:81:38:44:86:13:67:45:56:56:ee:0b:93:
27:09:1c:f9:66:be:69:8e:e2:25:bc:0b:c6:ea:18:
ed:b6:cd:80:68:25:f3:b9:ee:bd:3c:56:87:dd:8b:
e3:d5:6e:c0:dd:e1:de:67:7d:74:9a:27:43:5e:4d:
c4:da:34:f4:e9:83:68:89:e7:aa:d4:a0:58:e6:e1:
7a:94:07:a0:7f:f1:8f:d6:7e:08:ee:6d:6a:ee:6e:
1d:ff:48:aa:db:25:5b:8d:8d:4f:20:36:b9:72:1c:
c7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:20:3D:9B:6B:E2:70:08:6E:72:F5:E2:7E:06:E9:4C:16:7A:FC:0B
X509v3 Authority Key Identifier:
keyid:BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:fd:e1:85:04:d6:c2:c2:c2:98:30:f9:5a:84:9c:e6:26:ca:
1d:6a:bf:6b:c9:50:04:6c:f4:be:e0:79:13:95:dc:f8:b5:49:
a2:57:84:b1:f6:e9:7c:50:ce:8d:a6:8c:ba:05:65:13:18:c8:
d3:22:fa:03:8e:35:be:1c:58:82:d0:1c:ed:54:f1:45:3f:1e:
c1:e0:1c:c3:aa:06:4e:a6:04:0a:e5:75:76:48:d4:3c:3c:b3:
e6:f5:35:86:7a:3d:de:70:6b:d3:74:df:86:41:a4:d4:e3:7a:
8f:b3:1e:b8:27:b1:25:e0:5e:dd:75:a6:b4:1c:ef:1f:69:58:
99:3b:09:b1:1d:98:91:66:0a:3e:45:ff:8c:c3:aa:86:7d:9c:
a1:58:1f:0b:08:cf:74:6d:b6:e0:f6:6e:a7:85:81:90:e7:80:
c0:a4:27:83:3b:b5:de:07:00:5c:3a:e6:80:8c:c1:08:e7:9b:
12:85:c8:71:c7:85:9f:9b:10:d2:ed:dc:17:eb:3c:e0:c0:85:
a2:8e:58:fd:a6:28:90:db:f0:3e:63:0d:ee:03:7c:76:23:5c:
22:5f:35:5c:20:2b:58:63:1e:3a:6c:3b:d8:a0:39:99:5d:6f:
2b:da:a8:b7:a7:b8:d6:e3:c5:bf:e0:5d:63:ee:cc:df:9f:36:
5b:0e:d0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:06:06 2026 by rpki-client