Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
File: ukxoXvpqLBBFY38CejJcCux5wBU.mft (raw, json)
Hash identifier: XMbXXAjLBZIueTrmBguhArXaeJm5H841Y8HNdP2DUG4=
Subject key identifier: 09:C7:63:46:5B:C2:FA:70:64:CC:82:B1:14:0C:D0:E3:E4:B6:91:7B
Authority key identifier: BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
Certificate issuer: /CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Certificate serial: 019CAD5A27143AFB15BC47ED662C3547BE26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
Manifest number: 0C0E
Signing time: Mon 02 Mar 2026 07:01:32 +0000
Manifest this update: Mon 02 Mar 2026 07:01:32 +0000
Manifest next update: Tue 03 Mar 2026 07:01:32 +0000
Files and hashes: 1: KApK1eZ3dReQSsXRIwoW7xEMCfc.roa (hash: I01yvmR81aVECy/LZF2a4cMND5HAKMaYQMS7oZOPJ6c=)
2: sMxn8ZHV7zGVUdfXdG1zEbgYw2k.roa (hash: ubV13xd7F+TAQ+CmwFI8p32k3paHxp1b+b+S6Z39W1M=)
3: ukxoXvpqLBBFY38CejJcCux5wBU.crl (hash: kYuAePi27DTKiBDpy75mIwnEqF0m3BflNYl7eSeSdNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:27:14:3a:fb:15:bc:47:ed:66:2c:35:47:be:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Validity
Not Before: Mar 2 07:01:32 2026 GMT
Not After : Mar 3 07:01:32 2026 GMT
Subject: CN=09c763465bc2fa7064cc82b1140cd0e3e4b6917b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7e:0a:31:cc:a4:d6:9c:c9:1a:dd:b4:60:66:
8a:ab:5f:5e:3b:cc:0e:bc:8f:14:49:00:82:9a:b5:
38:82:62:b7:e0:ee:35:ab:93:d0:14:82:f8:0c:5f:
3e:2e:ad:a7:87:a3:10:2c:54:15:7b:4c:26:28:30:
e8:fb:9c:7e:35:ea:d9:2a:58:df:49:95:c1:38:0f:
aa:50:54:96:22:61:bb:11:e5:b7:02:10:e1:eb:5e:
e5:b4:5b:d9:03:ac:64:4c:3d:34:8e:55:ce:3d:54:
49:f1:ec:cf:08:b4:5a:ec:b2:18:46:f1:e4:15:3d:
bf:74:e7:b4:c5:37:74:68:a4:c7:78:01:50:e6:de:
12:e7:bd:52:d9:f6:d6:56:40:ab:d2:0b:13:d3:99:
db:51:4c:24:67:77:f9:91:a5:78:3c:17:fd:fd:69:
d9:29:bd:84:0a:72:b2:94:9f:a2:df:84:17:d0:71:
34:b0:ef:59:99:5f:1d:bb:29:72:61:59:c1:47:a7:
21:cb:06:d5:88:76:d5:49:aa:78:58:81:03:e2:2b:
57:e3:0a:f9:f0:7b:da:bd:ff:91:6d:19:08:21:df:
71:f9:00:3b:ff:44:fd:77:76:9d:4c:71:97:b9:3a:
5f:b4:91:8a:a8:00:9a:00:93:0e:0a:8a:75:f4:d1:
ab:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C7:63:46:5B:C2:FA:70:64:CC:82:B1:14:0C:D0:E3:E4:B6:91:7B
X509v3 Authority Key Identifier:
keyid:BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:0e:65:59:85:cd:65:c5:30:6e:64:c1:fc:db:55:3b:e1:7b:
68:da:a5:0e:5e:4d:bd:cb:61:72:a6:da:b7:5a:2f:bc:10:21:
af:83:40:04:9a:0a:57:8a:ec:7f:33:03:ff:d5:e1:5d:08:a3:
2e:16:70:bd:60:61:6a:4b:86:8c:db:d3:53:10:73:9c:3d:f9:
d7:df:8c:23:49:5e:1a:2d:4a:58:c8:ad:30:8b:ce:b2:34:f7:
47:b4:c6:81:e4:9f:3e:62:32:a8:21:9e:4e:2a:14:05:68:4c:
ee:d6:7e:a6:35:84:5d:76:8c:d8:13:d3:06:c3:d3:91:db:c1:
7a:80:60:2d:a9:54:4e:c3:d8:9b:f0:55:be:57:8f:54:c8:bd:
98:d9:dd:7f:2d:89:70:b8:bf:22:1c:ea:f7:49:fe:ba:19:26:
de:ed:01:9f:cd:d1:6a:b9:2f:f0:fd:3e:31:f1:e6:5f:9f:0c:
76:d2:ea:3a:75:42:81:04:ee:52:68:19:35:9f:af:8c:7a:8e:
f3:98:1c:57:2c:84:4b:b6:8e:ee:9a:08:f1:7c:89:ac:85:46:
ee:ea:6a:62:c2:bc:e3:40:80:88:75:9c:fa:af:9a:06:ec:38:
06:67:65:7f:ff:d1:33:3f:b5:ee:cc:62:47:2f:08:fa:ea:ae:
f5:04:0f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:29:44 2026 by rpki-client