Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/UK_8KIQwoDwPYLpqDidgI3Dy6eg.mft
File: UK_8KIQwoDwPYLpqDidgI3Dy6eg.mft (raw, json)
Hash identifier: 1t+9i6bZizRs62A6GZEO648SJAq9xtqFBdKE/72ljD0=
Subject key identifier: FC:7E:B7:1B:F6:89:64:A6:57:94:68:35:60:DB:6E:BC:E0:3C:FF:20
Authority key identifier: 50:AF:FC:28:84:30:A0:3C:0F:60:BA:6A:0E:27:60:23:70:F2:E9:E8
Certificate issuer: /CN=50affc288430a03c0f60ba6a0e27602370f2e9e8
Certificate serial: 019D3A5390852F65060F8F293A66938367C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UK_8KIQwoDwPYLpqDidgI3Dy6eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/UK_8KIQwoDwPYLpqDidgI3Dy6eg.mft
Manifest number: 0C18
Signing time: Sun 29 Mar 2026 16:00:48 +0000
Manifest this update: Sun 29 Mar 2026 16:00:48 +0000
Manifest next update: Mon 30 Mar 2026 16:00:48 +0000
Files and hashes: 1: UK_8KIQwoDwPYLpqDidgI3Dy6eg.crl (hash: QOw12yNHgpffHq65gCvIm9BntP9Z3uOMso41dvsTJvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/UK_8KIQwoDwPYLpqDidgI3Dy6eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/UK_8KIQwoDwPYLpqDidgI3Dy6eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UK_8KIQwoDwPYLpqDidgI3Dy6eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:90:85:2f:65:06:0f:8f:29:3a:66:93:83:67:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50affc288430a03c0f60ba6a0e27602370f2e9e8
Validity
Not Before: Mar 29 16:00:48 2026 GMT
Not After : Mar 30 16:00:48 2026 GMT
Subject: CN=fc7eb71bf68964a65794683560db6ebce03cff20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4d:72:dd:de:6f:b0:a9:d4:ef:73:ef:6b:66:
23:90:41:4d:84:9d:7e:37:e4:eb:42:50:0b:37:55:
fe:03:50:e2:e5:03:5e:c6:cb:20:ec:4f:cf:8a:82:
8a:85:55:19:05:24:bc:b7:bb:fe:88:bd:1b:9e:d3:
9d:e6:28:b1:92:c4:59:15:e6:a3:d1:48:52:07:83:
f9:4e:aa:bc:93:43:af:1d:9c:dd:72:c6:17:0b:b6:
dd:6a:b0:e9:fc:dc:41:ed:73:11:9d:0d:c2:4e:0f:
f2:19:0d:3a:0a:4e:d1:79:b9:fc:78:d3:8c:27:bc:
be:2b:b4:eb:44:49:8b:43:22:53:6c:81:40:49:21:
43:2b:4e:e2:e0:6a:37:fd:9f:a6:7a:7a:c2:67:9a:
9e:dd:13:97:26:d5:7b:64:b4:c9:3f:8f:70:1d:7c:
e0:00:5b:e3:47:82:41:3b:aa:8e:57:8c:ef:fd:64:
23:c7:e7:6c:07:fb:ba:2b:a5:de:a3:77:51:db:79:
7a:b5:67:2f:42:25:b4:bd:e9:92:d4:2b:17:68:14:
76:12:86:26:e0:de:b7:91:ca:24:48:42:8b:e4:82:
13:02:06:98:63:47:ca:02:31:fb:c6:a4:18:e8:51:
45:9b:ff:c8:41:51:45:7f:91:6b:cc:13:cf:e2:0c:
46:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7E:B7:1B:F6:89:64:A6:57:94:68:35:60:DB:6E:BC:E0:3C:FF:20
X509v3 Authority Key Identifier:
keyid:50:AF:FC:28:84:30:A0:3C:0F:60:BA:6A:0E:27:60:23:70:F2:E9:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UK_8KIQwoDwPYLpqDidgI3Dy6eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/UK_8KIQwoDwPYLpqDidgI3Dy6eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/UK_8KIQwoDwPYLpqDidgI3Dy6eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f0:41:c5:00:38:6b:ad:bf:e9:30:72:77:34:bb:3f:ff:d6:
d0:a0:e3:d7:28:79:d3:58:7b:5c:87:41:ed:d8:43:a5:05:28:
a4:b3:02:32:4f:1a:45:41:81:88:7d:ec:6a:9b:17:52:0a:db:
37:4f:e7:cc:65:f8:2e:02:95:b1:55:38:6e:da:d9:27:5c:28:
fa:d0:c9:30:07:74:32:88:9d:59:95:55:2b:a9:4e:9d:44:56:
17:24:a8:84:b3:e7:c0:68:30:b2:5d:71:de:23:5d:42:d6:8d:
06:c1:9d:8d:5b:54:c8:6d:b4:02:76:92:1c:f2:82:42:dd:91:
ff:88:96:99:55:86:d5:87:1b:c7:28:7a:05:45:2d:f8:21:95:
5c:5c:6d:e5:84:6d:51:c0:83:24:32:a8:eb:27:a5:fd:72:6f:
0b:46:d0:54:80:72:47:dd:ee:4a:6c:55:52:7c:8a:f5:a8:d0:
f5:08:40:03:86:70:a3:7a:c0:c7:67:c8:3c:ce:8a:12:ea:a2:
62:c6:8a:fe:2e:20:b5:9c:fd:d0:0f:e7:05:77:12:bf:53:71:
92:e0:36:cf:3a:b3:91:6c:8d:1d:f7:6f:ff:04:77:52:37:20:
17:ea:37:72:63:fe:bc:93:d4:9b:be:55:a0:21:90:23:79:06:
ce:5a:47:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:48 2026 by rpki-client