Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.mft
File: ukQzhlmFp7teJpw3lK5vFkz8Lds.mft (raw, json)
Hash identifier: SnA0OWvDxOYLVeEr6JA/ipVmf8HkHRI8aK9Reebu1fw=
Subject key identifier: FE:66:42:61:A2:09:95:5D:14:A3:6E:AA:20:F0:07:27:5B:A9:06:28
Authority key identifier: BA:44:33:86:59:85:A7:BB:5E:26:9C:37:94:AE:6F:16:4C:FC:2D:DB
Certificate issuer: /CN=ba4433865985a7bb5e269c3794ae6f164cfc2ddb
Certificate serial: 01A128E89F5B1444333052DC085610873C06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukQzhlmFp7teJpw3lK5vFkz8Lds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.mft
Manifest number: 0A79
Signing time: Sun 11 Oct 2026 03:01:35 +0000
Manifest this update: Sun 11 Oct 2026 03:01:35 +0000
Manifest next update: Mon 12 Oct 2026 03:01:35 +0000
Files and hashes: 1: UfxnZEwkQdyHN4gibAtk_ce1zeI.roa (hash: Bl9GgITeZ3znWiaIE2fwC3TQwsJfWdhy5zENaMdMELI=)
2: ukQzhlmFp7teJpw3lK5vFkz8Lds.crl (hash: 6AGQAr/7zYJaaLBu12Ow1fYrwcmaY0Cse0NCPs6tI4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukQzhlmFp7teJpw3lK5vFkz8Lds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:e8:9f:5b:14:44:33:30:52:dc:08:56:10:87:3c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4433865985a7bb5e269c3794ae6f164cfc2ddb
Validity
Not Before: Oct 11 03:01:35 2026 GMT
Not After : Oct 12 03:01:35 2026 GMT
Subject: CN=fe664261a209955d14a36eaa20f007275ba90628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e0:0d:d6:ef:76:c6:51:3f:c3:43:bc:ad:2b:
58:50:d0:d5:f1:91:d5:07:6e:7b:9f:d0:76:48:dd:
05:86:83:42:b8:a8:8e:04:6d:5f:37:9f:60:de:01:
b5:dc:e1:a6:81:d5:b4:b1:20:09:16:56:f6:ed:72:
8f:67:b6:86:d6:eb:ff:97:86:a0:7a:ae:59:cf:d7:
b6:fa:87:1a:b3:e6:74:13:a5:3b:02:b3:fb:60:fc:
6c:cc:e3:74:5a:4c:b8:91:6a:b9:64:40:da:80:cd:
87:d9:03:ed:0f:1a:3a:19:4d:20:13:84:62:81:38:
33:ed:bc:37:f6:a9:80:fb:ee:f1:34:93:a8:69:6f:
06:e3:69:71:0c:bd:72:01:c4:cb:d8:ea:3e:a0:de:
31:ae:d0:8f:32:54:35:52:02:53:3b:1c:9f:16:29:
3c:9d:c4:ba:7f:a8:69:b1:84:42:b2:51:63:3f:66:
16:fc:c9:9e:24:cf:be:be:d0:b2:41:0b:86:4b:5a:
d4:d8:e8:9a:f1:09:c9:ce:4f:61:54:af:50:d0:56:
a0:0a:52:b7:05:b3:41:c9:4f:18:0c:e4:37:60:66:
5a:b2:b2:16:3e:5f:63:9c:4d:89:78:4e:ff:05:18:
e4:3f:56:33:e8:8e:09:e1:75:b5:78:b2:15:e5:cd:
86:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:66:42:61:A2:09:95:5D:14:A3:6E:AA:20:F0:07:27:5B:A9:06:28
X509v3 Authority Key Identifier:
keyid:BA:44:33:86:59:85:A7:BB:5E:26:9C:37:94:AE:6F:16:4C:FC:2D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukQzhlmFp7teJpw3lK5vFkz8Lds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:10:a5:4d:79:00:1e:df:ab:1f:2c:dc:c6:ea:49:37:d1:b3:
ea:7f:65:9f:63:9d:58:d6:fd:05:c5:ca:97:60:1d:4c:a6:12:
a8:36:85:ea:c8:2c:09:a6:45:82:05:bd:bc:eb:a3:fe:87:93:
f3:c8:a2:e8:d6:7d:5a:27:55:4d:32:cd:e2:4c:50:b6:4f:7b:
1f:93:f7:ac:ad:0b:b0:61:b2:15:13:a6:d0:81:08:51:b6:cc:
09:33:79:c4:d8:49:9c:49:95:68:57:8c:f9:82:2f:83:82:8b:
2c:bd:7e:02:34:a5:ad:9d:c2:cf:9d:21:3e:71:7e:94:b7:60:
5a:4e:6d:b5:c0:f4:23:32:f4:33:1f:65:31:f4:e9:ba:39:e3:
eb:84:3f:68:c1:10:83:0a:6d:ec:ad:82:2b:d4:ac:69:73:39:
73:6c:b6:e5:5a:78:ea:a1:4a:52:df:49:35:80:b5:93:3c:df:
91:62:bf:83:49:5c:95:8e:05:ce:88:b4:2e:90:01:50:73:ed:
77:26:35:6b:95:81:70:c9:6d:98:81:cd:52:a5:df:c5:65:e8:
74:08:1e:b8:f1:95:9c:42:fe:f6:6f:f9:5d:e3:c2:ae:8f:a2:
53:78:0e:7b:81:67:87:f2:87:c0:7b:0f:c1:f0:80:1c:47:f8:
71:34:83:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:21:31 2026 by rpki-client