Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
File: ukxoXvpqLBBFY38CejJcCux5wBU.mft (raw, json)
Hash identifier: ipKV+AHoBgXRZIo9nhAHVwSETyGGqdXSNW7vQIdsMDI=
Subject key identifier: 64:01:D7:C4:00:3D:93:EA:AA:9D:39:45:A9:E5:B9:16:DB:7F:E4:57
Authority key identifier: BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
Certificate issuer: /CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Certificate serial: 019D9AE2BD8785C030544C74998954AE389F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
Manifest number: 0C89
Signing time: Fri 17 Apr 2026 10:00:44 +0000
Manifest this update: Fri 17 Apr 2026 10:00:44 +0000
Manifest next update: Sat 18 Apr 2026 10:00:44 +0000
Files and hashes: 1: KApK1eZ3dReQSsXRIwoW7xEMCfc.roa (hash: I01yvmR81aVECy/LZF2a4cMND5HAKMaYQMS7oZOPJ6c=)
2: sMxn8ZHV7zGVUdfXdG1zEbgYw2k.roa (hash: ubV13xd7F+TAQ+CmwFI8p32k3paHxp1b+b+S6Z39W1M=)
3: ukxoXvpqLBBFY38CejJcCux5wBU.crl (hash: F0v2I3QQkd8vBpHHXN6U1YKah1PbwlEkA9AfFEY2yGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:bd:87:85:c0:30:54:4c:74:99:89:54:ae:38:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Validity
Not Before: Apr 17 10:00:44 2026 GMT
Not After : Apr 18 10:00:44 2026 GMT
Subject: CN=6401d7c4003d93eaaa9d3945a9e5b916db7fe457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d2:7b:83:d6:69:e8:68:bf:fc:0d:51:9a:cd:
6d:2a:9e:de:1d:3f:43:c9:e4:95:50:19:7c:36:4f:
e1:cf:4b:f2:a1:b0:64:9b:fa:8a:a9:99:3b:5c:a9:
a8:0c:f0:21:1c:5e:18:b2:1f:e8:6a:0f:bf:24:f3:
0a:1d:b2:e4:da:ca:4d:1f:62:35:7e:bf:64:b3:91:
66:95:d2:ff:85:6e:b4:35:75:77:75:05:38:fc:d1:
70:33:65:d2:61:53:ed:d7:ce:70:f6:47:13:5d:2c:
c0:96:fe:43:b1:51:c2:f2:eb:5d:7e:1e:4d:05:75:
b4:83:4d:7b:50:9a:ad:ea:31:d9:76:8f:8b:e3:3e:
92:a1:09:40:c2:aa:ca:e6:0b:5d:40:bc:b3:27:2f:
8f:32:d8:69:eb:bf:f5:0c:c7:45:9d:5e:56:36:7c:
57:cb:ac:d1:ce:fb:e4:b7:7b:ae:dc:e7:a7:c2:f1:
96:21:47:e4:90:06:1d:f6:0a:a7:7e:34:4b:6a:36:
88:55:27:cf:99:be:1d:d4:ee:30:36:c2:7e:e5:a1:
c8:ac:6d:aa:4b:41:bd:2a:49:c4:c9:c0:13:7d:c9:
39:d5:d3:fd:a1:29:c4:8a:fe:59:78:41:21:13:2e:
06:10:a1:0c:6c:2a:e1:71:75:e3:5e:ab:07:b7:25:
42:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:01:D7:C4:00:3D:93:EA:AA:9D:39:45:A9:E5:B9:16:DB:7F:E4:57
X509v3 Authority Key Identifier:
keyid:BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:44:7e:4b:10:74:60:d8:cc:27:84:08:9c:7e:c1:fb:5a:aa:
f4:61:d0:e6:0c:55:51:d5:ea:9f:49:64:2b:08:1b:90:df:c3:
81:97:1b:c9:44:6d:b6:d1:84:1b:13:ae:85:0d:2c:87:70:da:
c4:91:ec:44:a2:74:d0:c8:35:38:bc:05:16:68:f8:8e:f3:da:
9d:d0:70:4d:36:88:98:ac:59:bc:f1:26:07:10:ff:b4:64:92:
84:20:01:90:c6:39:66:05:ea:60:29:45:b4:d9:1c:64:8d:50:
e4:8d:02:8c:b7:85:1d:c8:c2:c5:86:da:ef:4b:ee:ab:7f:53:
a4:20:c5:9f:7f:94:ff:77:35:43:74:c2:02:17:c4:c4:0f:21:
46:7b:37:4d:d0:bb:99:e9:bb:51:8a:e1:ed:54:4a:f6:a8:84:
14:cb:9f:eb:e6:24:31:20:74:f3:e9:fd:d6:a4:8a:e2:b5:43:
ec:3a:37:e0:dc:2e:09:6f:ea:74:14:91:65:ce:2a:cb:46:8d:
e1:b5:6d:45:fe:e9:0b:5a:42:af:10:aa:0f:9e:09:be:dd:53:
40:dd:9d:63:db:1c:5f:10:b8:ee:bc:5d:1b:d6:fc:d7:34:91:
5a:ae:7e:ba:9d:85:22:16:58:af:5f:f4:3e:31:ee:33:3c:0b:
b2:6d:b9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:45:11 2026 by rpki-client