Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
File: ukBDlux3brxmOzeQT1O_by22l94.mft (raw, json)
Hash identifier: lwOvjnVFEhVyCwpGvRG2BC+38rmM70iaxan137p73no=
Subject key identifier: 09:00:A0:FD:E3:06:F7:D7:94:E2:67:B2:08:18:CA:B1:29:C8:97:4E
Authority key identifier: BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE
Certificate issuer: /CN=ba404396ec776ebc663b37904f53bf6f2db697de
Certificate serial: 019DCD1979C1FD736821425F4695E5D0BFB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
Manifest number: 17ED
Signing time: Mon 27 Apr 2026 04:01:32 +0000
Manifest this update: Mon 27 Apr 2026 04:01:32 +0000
Manifest next update: Tue 28 Apr 2026 04:01:32 +0000
Files and hashes: 1: tS44mZmIyFMs473UjL5U854eiII.roa (hash: KoRk1peqIoiZFVFsXXW3hidWdEm/mtcGGSeO03SIlM8=)
2: ukBDlux3brxmOzeQT1O_by22l94.crl (hash: 3i50n5gw5u+inBCAsplNiPXauepYk3Y8ubeuay/ePYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:19:79:c1:fd:73:68:21:42:5f:46:95:e5:d0:bf:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba404396ec776ebc663b37904f53bf6f2db697de
Validity
Not Before: Apr 27 04:01:32 2026 GMT
Not After : Apr 28 04:01:32 2026 GMT
Subject: CN=0900a0fde306f7d794e267b20818cab129c8974e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e2:ae:b3:77:85:72:08:c0:77:82:c7:9c:d0:
6e:1d:48:c1:02:da:3b:97:1a:3a:9a:a0:ee:db:84:
a4:72:25:d0:c6:f5:1a:de:99:fe:d1:98:26:19:df:
d4:e9:ef:94:03:68:15:cf:03:01:54:2d:17:08:d7:
cf:35:9a:f0:38:0e:bd:43:00:40:82:be:d9:f5:ef:
b8:f2:9e:02:9d:18:ef:b6:6f:b8:43:7d:0b:48:f0:
31:15:6c:8a:cb:4b:95:4a:2a:fe:8d:69:dc:6b:71:
24:67:6a:1b:10:e9:2f:98:d4:02:79:6a:e5:67:49:
8f:5b:3b:4d:4c:90:00:5d:c8:29:fc:3c:51:d6:d0:
a9:28:23:44:45:13:b6:4f:90:12:87:e6:7b:c8:1e:
5d:c2:17:0b:2e:04:35:01:e4:66:82:38:54:23:4d:
08:50:5d:00:0f:a7:22:17:3c:97:57:7f:e3:cd:55:
be:71:46:e5:41:4f:f0:a1:b1:7b:4e:19:39:7d:92:
8f:de:18:3b:69:22:72:98:7d:00:a3:2b:3e:5d:9b:
a7:d5:65:f7:c4:bf:cc:24:a9:48:b1:75:bf:e0:94:
51:d0:7d:c9:09:b9:98:36:a5:bb:29:81:bb:0e:d6:
2c:cd:97:05:79:52:88:2b:25:ed:50:de:a0:2b:c2:
d4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:00:A0:FD:E3:06:F7:D7:94:E2:67:B2:08:18:CA:B1:29:C8:97:4E
X509v3 Authority Key Identifier:
keyid:BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:26:da:53:a2:37:6e:b5:3a:37:7e:75:25:e7:ed:49:e3:97:
4a:a0:5c:70:2e:d9:ea:45:66:ed:9f:e5:45:c3:33:ae:67:98:
e7:6e:4e:49:78:21:ba:b5:5c:14:11:a1:ee:fb:58:6d:d5:16:
f3:38:bb:02:82:9a:f3:e5:ca:7e:81:c0:36:6c:a7:96:b1:8f:
fc:e6:c5:1d:e7:6f:81:80:93:77:94:b5:ec:b5:78:97:d5:7a:
1a:2a:79:77:0d:d7:a2:1b:d6:bf:60:1c:1c:cc:d7:6b:d3:fa:
b5:63:d7:c1:2b:ca:f3:1a:6a:f3:a8:f7:8f:46:89:2f:a8:4b:
15:50:1b:42:f2:4d:7b:d5:b1:91:04:ca:1c:d9:28:9d:76:8f:
cb:c6:95:60:bc:e1:20:65:b0:4c:f4:9c:18:51:b9:c4:ad:f9:
79:0a:75:2e:bb:6d:a0:5c:09:36:00:da:d2:20:23:ff:d5:71:
a2:47:ae:cf:b6:e5:7a:d9:5b:af:d4:af:03:fb:80:27:f5:e6:
08:46:0c:b7:e5:01:58:18:57:5d:2a:42:ae:81:c3:45:c3:41:
f6:00:4a:bf:cd:9f:a5:87:5a:c1:29:a9:71:7b:cc:a2:25:36:
b3:fb:da:18:eb:2c:f1:f2:70:4c:e0:2c:a8:38:3d:d8:ca:dd:
a8:ed:9c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:59:28 2026 by rpki-client