
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
File: ukBDlux3brxmOzeQT1O_by22l94.mft (raw, json)
Hash identifier: 4njdnRVk+GuS6rHuXEV9SpbcPld9B/U3/4nSJb020YU=
Subject key identifier: D2:59:77:4B:CE:4E:2D:5D:3A:59:2D:C7:78:B5:F9:4A:E8:D5:DF:C1
Authority key identifier: BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE
Certificate issuer: /CN=ba404396ec776ebc663b37904f53bf6f2db697de
Certificate serial: 019CE36C4BE0CCF67B6D75A85A258367708F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
Manifest number: 1774
Signing time: Thu 12 Mar 2026 19:00:51 +0000
Manifest this update: Thu 12 Mar 2026 19:00:51 +0000
Manifest next update: Fri 13 Mar 2026 19:00:51 +0000
Files and hashes: 1: tS44mZmIyFMs473UjL5U854eiII.roa (hash: KoRk1peqIoiZFVFsXXW3hidWdEm/mtcGGSeO03SIlM8=)
2: ukBDlux3brxmOzeQT1O_by22l94.crl (hash: Gtvt6qTo1r8a5jRekmWbcfLh92QPrCsdFYppgpsD1og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 19:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:6c:4b:e0:cc:f6:7b:6d:75:a8:5a:25:83:67:70:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba404396ec776ebc663b37904f53bf6f2db697de
Validity
Not Before: Mar 12 19:00:51 2026 GMT
Not After : Mar 13 19:00:51 2026 GMT
Subject: CN=d259774bce4e2d5d3a592dc778b5f94ae8d5dfc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e0:f0:5f:68:16:64:31:0f:7e:f0:2a:6c:08:
50:94:bd:b4:94:9e:99:8e:f9:65:7f:6c:db:18:2a:
7e:5e:3b:69:36:4a:d4:26:80:ba:fc:ff:77:50:71:
e4:1c:5b:96:ef:b7:49:c1:4a:92:10:f4:b6:ca:ba:
13:18:6a:90:d5:be:ab:3c:ef:b7:df:c3:47:0c:32:
73:00:5c:e9:7d:01:12:70:9e:f6:33:d3:77:be:d3:
b1:2d:76:6c:20:c3:5c:6f:80:47:d2:90:f6:a2:c0:
14:e6:f4:1f:87:12:18:fb:8d:92:51:40:21:3d:f3:
56:d9:f8:cd:04:f9:f6:12:99:09:55:2e:09:41:a5:
fb:cd:01:cc:ca:84:2a:c0:bf:28:9c:60:4e:df:17:
e3:53:1d:96:e4:16:ec:21:02:4d:d0:e2:d2:79:17:
d4:cd:80:73:b1:e7:52:16:8f:ce:f1:ca:72:3d:96:
56:51:be:96:d2:2b:03:4d:82:01:90:8f:e1:09:ec:
ce:27:6b:51:7e:3a:5d:96:bf:a0:e3:c1:0a:f4:4b:
a5:46:d9:09:1a:60:77:83:23:45:0d:e1:e3:3c:c9:
3d:a6:06:69:f8:8e:c3:16:c4:42:5f:86:f9:b8:24:
87:a7:79:a8:7e:f0:e6:53:80:59:43:2f:b8:56:e7:
e9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:59:77:4B:CE:4E:2D:5D:3A:59:2D:C7:78:B5:F9:4A:E8:D5:DF:C1
X509v3 Authority Key Identifier:
keyid:BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:1c:05:51:9b:22:11:e9:c4:c5:2e:f0:df:ff:56:db:54:5d:
6d:a9:48:38:b6:31:ed:d5:0b:bc:c7:1a:5a:78:8d:31:e4:56:
40:7b:89:b8:6c:32:5d:07:30:d1:ad:26:17:21:e6:6a:57:e5:
c7:66:7e:1f:5f:99:1c:c6:72:7c:ab:a1:73:fc:b7:b6:0b:4f:
fd:cd:01:86:0b:69:49:0d:91:8d:6d:2d:cc:45:92:30:40:24:
4e:2a:be:9a:09:ba:00:86:50:2a:9b:33:fb:9b:fa:44:41:66:
d6:c2:b4:9a:8d:21:58:59:64:e5:89:3f:27:b3:bd:ab:f4:47:
c1:11:ee:bb:a8:ab:d9:b9:c0:ec:77:f9:67:1c:73:3c:4f:73:
81:0a:8e:19:f4:2b:40:53:73:72:c3:5d:f6:90:67:73:1a:8e:
8b:b0:e4:2d:b4:8f:d6:ce:4e:df:1d:b8:63:fc:96:8e:13:cf:
65:53:29:f2:f7:e4:df:33:66:ad:b5:bd:d0:4d:1b:67:b9:ef:
48:a0:5d:8c:40:1f:53:7c:17:f7:df:c0:4a:9c:3c:c3:b6:3f:
11:71:42:c1:27:f7:f7:96:3f:90:e7:d8:2b:ff:c3:d8:e4:1c:
52:14:2f:0c:b2:32:b3:23:03:b2:ac:b9:f8:2e:37:01:62:47:
12:a3:f8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 04:16:26 2026 by rpki-client