Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.mft
File: ukQzhlmFp7teJpw3lK5vFkz8Lds.mft (raw, json)
Hash identifier: sKVeyZM9wArVBSuZvrb/W+bTFctZOw3GwuRAjKw+zzs=
Subject key identifier: 33:9B:E8:8F:B3:77:16:A2:29:DF:5D:8B:53:BF:A3:D6:58:4F:D6:05
Authority key identifier: BA:44:33:86:59:85:A7:BB:5E:26:9C:37:94:AE:6F:16:4C:FC:2D:DB
Certificate issuer: /CN=ba4433865985a7bb5e269c3794ae6f164cfc2ddb
Certificate serial: 019F19B146BC75B9267EB25239563E54FE84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukQzhlmFp7teJpw3lK5vFkz8Lds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.mft
Manifest number: 0968
Signing time: Tue 30 Jun 2026 18:01:15 +0000
Manifest this update: Tue 30 Jun 2026 18:01:15 +0000
Manifest next update: Wed 01 Jul 2026 18:01:15 +0000
Files and hashes: 1: UfxnZEwkQdyHN4gibAtk_ce1zeI.roa (hash: Bl9GgITeZ3znWiaIE2fwC3TQwsJfWdhy5zENaMdMELI=)
2: ukQzhlmFp7teJpw3lK5vFkz8Lds.crl (hash: IRzTEj4jXtta8ukSnPzG5D+BBpAJKwnu4cB5MBO2y0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukQzhlmFp7teJpw3lK5vFkz8Lds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:b1:46:bc:75:b9:26:7e:b2:52:39:56:3e:54:fe:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4433865985a7bb5e269c3794ae6f164cfc2ddb
Validity
Not Before: Jun 30 18:01:15 2026 GMT
Not After : Jul 1 18:01:15 2026 GMT
Subject: CN=339be88fb37716a229df5d8b53bfa3d6584fd605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:af:86:dd:3e:76:9c:2a:b0:c0:cc:17:46:fc:
c9:f3:d7:79:e9:73:e9:9a:8c:ff:80:8c:32:d1:b0:
9f:5f:48:fc:99:60:62:bf:c8:80:df:51:39:bb:5c:
95:65:6f:03:bc:56:ca:08:52:3f:76:c6:29:98:5e:
5c:df:f7:2e:99:6d:6a:4c:f1:f6:ef:6e:87:7c:d4:
03:f6:2e:51:61:d2:95:86:73:a1:8a:9d:be:88:0e:
16:4b:73:f8:ce:f5:16:93:41:48:94:05:95:e1:95:
2d:a2:0e:7b:de:24:5c:26:06:4b:1c:6f:f6:d0:35:
51:4e:d1:a4:a4:d9:cc:45:c5:c2:b8:df:6d:9a:ad:
4a:41:c9:86:32:cf:a2:cc:9c:56:4d:40:80:2a:17:
d6:32:40:57:04:08:57:92:0d:b5:8c:74:72:0c:32:
f2:87:ec:2f:77:9e:50:63:bc:d0:2d:06:b7:76:8f:
de:07:e2:02:a9:52:93:5b:16:0c:4e:de:20:27:7a:
b6:69:f0:9e:b4:e0:44:c7:8f:11:6f:3b:1b:b1:01:
a4:ef:12:01:80:8e:b4:35:51:a0:92:e5:cc:72:e5:
f6:ff:fc:20:cd:db:21:cb:c6:7f:bb:44:f1:e0:13:
d4:5a:96:09:16:c1:8b:de:3b:c8:e2:f6:d9:5b:35:
e8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9B:E8:8F:B3:77:16:A2:29:DF:5D:8B:53:BF:A3:D6:58:4F:D6:05
X509v3 Authority Key Identifier:
keyid:BA:44:33:86:59:85:A7:BB:5E:26:9C:37:94:AE:6F:16:4C:FC:2D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukQzhlmFp7teJpw3lK5vFkz8Lds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:3f:e0:c9:31:36:2a:6c:a5:4f:40:5c:09:05:43:ad:ad:75:
c7:93:e2:ed:23:69:94:7f:a2:33:8e:16:ec:47:8d:30:c6:29:
94:8a:89:33:35:0e:f6:79:82:c9:36:6f:64:3e:cf:6f:d2:cc:
59:8e:09:93:5a:26:b9:8f:bb:4a:dd:96:3b:bb:b5:74:10:ab:
eb:5c:b3:dd:79:9c:44:32:01:11:49:7e:7b:4b:02:3a:77:4e:
42:6a:0b:76:4a:20:a9:ae:a0:31:6d:16:51:cb:ac:8c:cd:87:
0e:b7:7a:89:7e:5f:21:a9:ab:be:04:92:57:3c:b1:6b:e5:e9:
e9:7c:ca:36:49:52:22:93:67:31:a6:79:c9:22:22:9e:2c:1a:
4d:aa:f5:8c:15:7d:51:6d:bd:79:bd:2f:ab:77:30:77:f7:85:
7f:ef:24:6f:9b:c7:0d:fe:31:fb:0d:7d:db:1b:f2:04:02:31:
87:6d:2e:c5:22:56:ef:8b:93:f9:2b:30:6a:9c:42:d9:af:15:
bb:34:3f:2c:d8:19:42:8d:a6:8e:ce:82:77:8b:dd:57:91:70:
47:a8:ea:e4:75:bd:d0:c8:ee:c0:5c:27:d9:08:97:cd:b9:81:
e7:6a:1d:1b:ac:df:74:eb:42:64:bd:21:9e:bd:57:0b:69:00:
d8:4c:3e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:36:54 2026 by rpki-client