Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.mft
File: ukQzhlmFp7teJpw3lK5vFkz8Lds.mft (raw, json)
Hash identifier: wmp+rARHoYID0C0gGUqDBLPmuDa5jCA+clYw8mJAVj4=
Subject key identifier: 88:20:85:1E:C1:3C:E0:07:83:23:D2:6D:17:74:42:34:8E:92:3D:DE
Authority key identifier: BA:44:33:86:59:85:A7:BB:5E:26:9C:37:94:AE:6F:16:4C:FC:2D:DB
Certificate issuer: /CN=ba4433865985a7bb5e269c3794ae6f164cfc2ddb
Certificate serial: 019E2E1611F94442BE7782451B00AE3516C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukQzhlmFp7teJpw3lK5vFkz8Lds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.mft
Manifest number: 08EE
Signing time: Sat 16 May 2026 00:00:58 +0000
Manifest this update: Sat 16 May 2026 00:00:58 +0000
Manifest next update: Sun 17 May 2026 00:00:58 +0000
Files and hashes: 1: UfxnZEwkQdyHN4gibAtk_ce1zeI.roa (hash: Bl9GgITeZ3znWiaIE2fwC3TQwsJfWdhy5zENaMdMELI=)
2: ukQzhlmFp7teJpw3lK5vFkz8Lds.crl (hash: vN8QFfix7V10IjfzAYahuP9tstblQjZJCjNLn7lIa8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukQzhlmFp7teJpw3lK5vFkz8Lds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2e:16:11:f9:44:42:be:77:82:45:1b:00:ae:35:16:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4433865985a7bb5e269c3794ae6f164cfc2ddb
Validity
Not Before: May 16 00:00:58 2026 GMT
Not After : May 17 00:00:58 2026 GMT
Subject: CN=8820851ec13ce0078323d26d177442348e923dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:db:74:d4:19:38:f8:96:9b:73:d5:4b:80:3b:
d6:94:33:da:15:01:0d:cf:3b:72:20:10:d6:5e:5c:
29:ec:ca:4d:b9:4b:95:2e:3e:d2:83:6e:8c:20:bd:
48:34:23:b3:a9:0f:63:3a:dd:fc:26:d0:34:56:3d:
dd:c7:09:10:cf:ce:0c:35:f0:33:f8:cd:f4:6a:fe:
af:ea:6b:11:a3:fb:8b:75:ff:68:e7:91:cf:af:36:
46:ec:8f:af:1d:2d:4e:1b:a0:ee:4d:67:df:0c:38:
93:ec:86:76:70:98:02:9d:f7:bb:54:85:ad:a7:7b:
e1:e7:3f:15:de:c7:8a:01:41:e7:6a:07:30:5a:0b:
1b:3e:ca:51:51:da:2b:e7:35:80:1d:1f:78:0a:d9:
80:87:90:91:57:1a:99:f7:19:46:f3:f1:46:fe:b2:
b6:58:2f:55:5d:e2:cc:04:3c:ee:76:19:e7:c7:b7:
c1:8f:34:27:f1:d0:5a:38:8b:40:de:8d:37:5b:96:
d0:23:12:64:7e:21:01:0d:0c:49:d9:20:41:2e:58:
06:e4:69:52:81:55:ae:ab:fe:20:ef:65:ec:2c:dd:
27:0a:ee:a2:ee:0e:2e:6e:73:c3:cd:ff:69:b6:6a:
b9:c0:44:f9:97:3e:66:1f:f0:50:b3:8c:58:bb:88:
18:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:20:85:1E:C1:3C:E0:07:83:23:D2:6D:17:74:42:34:8E:92:3D:DE
X509v3 Authority Key Identifier:
keyid:BA:44:33:86:59:85:A7:BB:5E:26:9C:37:94:AE:6F:16:4C:FC:2D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukQzhlmFp7teJpw3lK5vFkz8Lds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:54:89:07:05:9e:22:f8:22:58:1f:c1:c7:f0:4a:d3:13:f8:
84:60:d2:b9:8c:98:16:83:75:e4:c4:5e:34:c2:cc:0c:69:ce:
74:ff:f3:06:0a:0b:f5:e3:68:61:23:5c:33:18:f4:63:15:fc:
8a:2f:e4:53:cc:0d:ae:a4:0f:67:5b:2d:3e:cb:6a:dc:aa:b5:
3f:d0:6f:69:39:65:d9:79:07:6c:72:7a:7b:ec:f7:b1:36:c2:
31:68:b1:b8:c2:97:96:73:d8:51:6d:b6:75:2c:ef:c2:10:98:
3b:60:de:7b:58:a1:09:2b:1d:cc:1f:1a:3b:9c:2b:b5:5b:c6:
2e:88:9a:41:ed:a9:b9:17:3d:70:c5:58:b0:28:88:36:97:e6:
58:bf:ec:04:b5:cd:9d:74:68:42:59:af:e7:39:ca:9b:7d:ac:
bd:ae:93:24:c4:ad:6a:f5:81:75:7e:97:c9:de:97:f2:7e:45:
85:b1:f0:b6:bd:e8:88:1e:b2:78:67:65:d2:46:96:f3:ee:ca:
0d:14:f6:80:37:df:57:81:ad:db:85:e6:cc:66:04:cd:01:1b:
69:36:19:dd:aa:1b:69:e8:e5:92:9b:da:ac:b5:5e:27:46:9c:
74:83:f1:10:67:26:a2:4d:ec:74:b0:39:f3:30:f4:f3:24:87:
5c:8f:f0:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4uFhH5REK+d4JFGwCuNRbAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNDQzMzg2NTk4NWE3YmI1ZTI2OWMzNzk0YWU2ZjE2NGNm
YzJkZGIwHhcNMjYwNTE2MDAwMDU4WhcNMjYwNTE3MDAwMDU4WjAzMTEwLwYDVQQD
Eyg4ODIwODUxZWMxM2NlMDA3ODMyM2QyNmQxNzc0NDIzNDhlOTIzZGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdt01Bk4+Jabc9VLgDvWlDPaFQEN
zztyIBDWXlwp7MpNuUuVLj7Sg26MIL1INCOzqQ9jOt38JtA0Vj3dxwkQz84MNfAz
+M30av6v6msRo/uLdf9o55HPrzZG7I+vHS1OG6DuTWffDDiT7IZ2cJgCnfe7VIWt
p3vh5z8V3seKAUHnagcwWgsbPspRUdor5zWAHR94CtmAh5CRVxqZ9xlG8/FG/rK2
WC9VXeLMBDzudhnnx7fBjzQn8dBaOItA3o03W5bQIxJkfiEBDQxJ2SBBLlgG5GlS
gVWuq/4g72XsLN0nCu6i7g4ubnPDzf9ptmq5wET5lz5mH/BQs4xYu4gYgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIgghR7BPOAHgyPSbRd0QjSOkj3eMB8GA1UdIwQY
MBaAFLpEM4ZZhae7XiacN5SubxZM/C3bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWtRemhsbUZwN3RlSnB3M2xLNXZGa3o4TGRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9hYjMyMTktYzY0Yi00NzBlLTgzNDEt
M2ExMjAyNzQwMGU2LzEvdWtRemhsbUZwN3RlSnB3M2xLNXZGa3o4TGRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9hYjMyMTktYzY0Yi00NzBlLTgzNDEtM2ExMjAyNzQwMGU2
LzEvdWtRemhsbUZwN3RlSnB3M2xLNXZGa3o4TGRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQlSJBwWe
IvgiWB/Bx/BK0xP4hGDSuYyYFoN15MReNMLMDGnOdP/zBgoL9eNoYSNcMxj0YxX8
ii/kU8wNrqQPZ1stPstq3Kq1P9BvaTll2XkHbHJ6e+z3sTbCMWixuMKXlnPYUW22
dSzvwhCYO2Dee1ihCSsdzB8aO5wrtVvGLoiaQe2puRc9cMVYsCiINpfmWL/sBLXN
nXRoQlmv5znKm32sva6TJMStavWBdX6Xyd6X8n5FhbHwtr3oiB6yeGdl0kaW8+7K
DRT2gDffV4Gt24XmzGYEzQEbaTYZ3aobaejlkpvarLVeJ0acdIPxEGcmok3sdLA5
8zD08ySHXI/wdA==
-----END CERTIFICATE-----
Generated at Sat May 16 03:54:03 2026 by rpki-client