Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
File: ukxoXvpqLBBFY38CejJcCux5wBU.mft (raw, json)
Hash identifier: PMjWvD8vxppsaUNKwUIFtPGhV91MxIhucXNf/qIuBgQ=
Subject key identifier: C0:59:42:B6:8F:A3:43:6C:3F:BE:EE:5D:43:6B:B8:40:00:5A:12:E9
Authority key identifier: BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
Certificate issuer: /CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Certificate serial: 019F8379D564DDCBC6FA8A6AE5514429962F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
Manifest number: 0D86
Signing time: Tue 21 Jul 2026 07:00:27 +0000
Manifest this update: Tue 21 Jul 2026 07:00:27 +0000
Manifest next update: Wed 22 Jul 2026 07:00:27 +0000
Files and hashes: 1: KApK1eZ3dReQSsXRIwoW7xEMCfc.roa (hash: I01yvmR81aVECy/LZF2a4cMND5HAKMaYQMS7oZOPJ6c=)
2: sMxn8ZHV7zGVUdfXdG1zEbgYw2k.roa (hash: ubV13xd7F+TAQ+CmwFI8p32k3paHxp1b+b+S6Z39W1M=)
3: ukxoXvpqLBBFY38CejJcCux5wBU.crl (hash: rQBXV7yp0/5gUoei0rRRLlnLmSyw6xtxbVkWeFfO5ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:79:d5:64:dd:cb:c6:fa:8a:6a:e5:51:44:29:96:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Validity
Not Before: Jul 21 07:00:27 2026 GMT
Not After : Jul 22 07:00:27 2026 GMT
Subject: CN=c05942b68fa3436c3fbeee5d436bb840005a12e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:38:87:98:5e:26:fd:51:d8:e0:d8:f0:fe:1c:
40:98:70:8e:01:c1:4b:e7:2c:49:9e:40:2a:a8:e7:
d6:70:3f:48:e6:e7:77:87:c1:2f:c9:4f:14:7b:d8:
86:ab:bd:c0:88:9e:2d:82:e8:62:d0:a7:b9:2f:8a:
3f:93:88:b6:2a:b8:7c:d9:f7:52:e4:9f:66:ed:55:
7a:fb:c6:28:a8:8c:16:cc:78:06:8f:e1:99:34:e7:
53:42:79:31:42:3e:e0:ba:0d:71:eb:95:2a:2f:52:
3e:41:21:06:d9:16:c2:45:4a:8c:27:06:7d:58:3f:
28:bf:b7:09:26:a6:3d:48:39:d1:96:be:b3:53:4c:
65:52:be:f6:b3:a9:c7:79:72:46:da:99:62:4d:6c:
d8:ff:e6:08:62:59:bd:11:8b:07:80:39:04:c3:f7:
d3:f0:ca:d2:8f:da:16:59:38:b0:32:b7:e6:fd:b1:
eb:9c:36:42:9b:57:c2:7d:3d:6c:ba:c1:32:ef:39:
8e:6f:16:bf:7b:3c:cd:3d:4c:1b:0b:fc:03:d2:11:
ab:0c:74:8c:6b:f6:be:87:6b:07:42:72:a0:dd:83:
9e:7f:81:36:35:31:69:a8:be:1a:02:7a:e3:0e:e7:
0d:3f:ba:c8:b8:4b:4b:48:9a:df:ae:6e:69:39:86:
2d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:59:42:B6:8F:A3:43:6C:3F:BE:EE:5D:43:6B:B8:40:00:5A:12:E9
X509v3 Authority Key Identifier:
keyid:BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:a3:99:a8:fc:fc:fd:79:1f:d2:1f:65:80:47:49:74:e7:79:
04:a4:57:04:be:14:ab:87:4d:bb:57:6f:01:15:46:ee:67:66:
d4:0e:2c:32:f0:a7:b3:f8:61:5a:da:63:46:59:51:3d:85:a0:
e6:70:8b:1d:c9:b2:76:ad:14:8a:87:da:8d:4c:39:41:7c:db:
d8:60:8c:3f:5b:e7:cb:34:f6:00:af:1b:06:25:09:f0:c3:a6:
29:be:a5:21:c3:17:5a:0f:cd:9d:64:ae:37:4f:c1:02:da:fc:
49:d9:67:44:d0:09:50:58:67:aa:02:b9:0e:a9:dd:3f:bf:01:
7e:5d:90:07:e6:97:10:a5:50:c6:92:e2:a4:d5:8a:db:c6:e9:
fe:55:cc:74:69:da:21:bd:43:4b:67:0a:1d:18:12:9d:c4:61:
6c:ad:f4:55:00:b2:4e:da:c0:1a:93:2c:f3:09:1c:e4:a8:bb:
1c:52:a1:81:68:78:0d:6d:c2:2b:bf:17:23:77:da:46:7b:d6:
b1:ab:29:51:90:49:77:3e:02:21:ab:c1:f0:5f:2f:e9:c7:39:
20:dc:8e:37:17:bf:fa:b5:65:63:7e:53:ee:87:dc:21:f9:52:
64:db:d8:a5:94:92:39:c7:e6:15:be:99:d9:8c:4d:97:73:c8:
55:93:00:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:45:21 2026 by rpki-client