Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
File: uksi0igKF9DVTGhsm0M_C1tYAk8.mft (raw, json)
Hash identifier: StPNlmnWciO4CiZRMeKl4+ljp3wDjJjmvt7BASW7Q6M=
Subject key identifier: 5A:5E:74:63:CC:EA:AE:CB:4A:4E:78:A9:9E:45:67:F4:8E:81:7B:B4
Authority key identifier: BA:4B:22:D2:28:0A:17:D0:D5:4C:68:6C:9B:43:3F:0B:5B:58:02:4F
Certificate issuer: /CN=ba4b22d2280a17d0d54c686c9b433f0b5b58024f
Certificate serial: 019D37C0639FD010D28A71EDF8F6D938D1EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
Manifest number: 1776
Signing time: Sun 29 Mar 2026 04:00:48 +0000
Manifest this update: Sun 29 Mar 2026 04:00:48 +0000
Manifest next update: Mon 30 Mar 2026 04:00:48 +0000
Files and hashes: 1: uksi0igKF9DVTGhsm0M_C1tYAk8.crl (hash: 9LxNnbuZzJBEiijIh/Jf6caZtgobvoNbq7ijUF6FDfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:63:9f:d0:10:d2:8a:71:ed:f8:f6:d9:38:d1:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4b22d2280a17d0d54c686c9b433f0b5b58024f
Validity
Not Before: Mar 29 04:00:48 2026 GMT
Not After : Mar 30 04:00:48 2026 GMT
Subject: CN=5a5e7463cceaaecb4a4e78a99e4567f48e817bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:07:ed:c0:c2:dd:78:93:2b:db:87:66:c4:87:
f5:5a:36:cb:b8:68:ac:09:27:17:0d:ad:77:5f:0c:
6f:92:61:57:c5:5f:e3:f5:ca:c8:48:0d:30:9d:97:
47:21:28:f6:30:ba:26:e2:3b:db:29:8b:19:1b:5f:
e9:86:fa:3b:09:a8:f1:79:b5:68:25:f0:54:e2:ca:
af:d8:dc:5f:50:37:35:16:5b:3e:1d:c6:c1:96:a3:
67:7a:c5:58:bd:a0:2e:09:bc:56:0d:f4:a0:d7:00:
2c:02:d0:7f:ce:ac:15:d0:f3:98:58:1a:a8:91:73:
07:e6:82:79:0f:bb:d6:5c:77:ad:95:8b:cf:13:38:
d4:ac:01:55:d3:29:b4:70:fa:28:92:d1:d3:77:cc:
ba:d8:69:d2:99:f9:74:44:63:64:68:c7:85:01:28:
1a:07:20:db:b8:4b:aa:05:30:11:12:22:1e:ac:21:
a8:c1:b9:3b:18:5a:6e:93:c9:dd:34:4b:85:4a:6f:
e1:ef:0d:e5:d2:62:a0:59:01:ae:ab:49:9c:37:8a:
71:43:f4:5f:e7:d5:ba:61:61:37:d1:e8:2b:27:b7:
55:c1:f9:b0:40:70:6d:11:0a:13:cb:2a:16:62:2c:
71:1f:ef:57:f7:d9:d4:aa:1a:9d:a8:20:93:62:63:
34:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5E:74:63:CC:EA:AE:CB:4A:4E:78:A9:9E:45:67:F4:8E:81:7B:B4
X509v3 Authority Key Identifier:
keyid:BA:4B:22:D2:28:0A:17:D0:D5:4C:68:6C:9B:43:3F:0B:5B:58:02:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:94:a0:3f:aa:01:43:27:45:c1:ca:ba:23:75:8f:3f:bc:20:
0e:2d:6c:fa:81:d4:ae:ad:be:e8:29:04:8d:75:ed:72:95:ac:
6e:55:f0:e8:0e:3a:5e:75:43:e7:97:dc:b4:6b:cd:58:41:bc:
17:1c:18:8c:74:d7:83:c7:7c:2b:e8:ee:d5:87:be:4e:3c:f3:
6c:5b:39:28:48:d6:59:cc:2c:95:ee:e7:ee:f7:ce:d7:9e:d8:
b6:cb:de:cd:83:65:0f:2c:e0:2d:e4:51:56:23:52:06:d1:91:
4b:f1:74:4f:60:04:08:9b:70:9c:05:6d:2f:b9:2c:ab:ad:d3:
b3:b8:f5:73:65:53:36:13:31:5b:c0:85:78:db:d8:90:f3:e4:
75:d1:b5:a0:60:fb:ec:34:16:06:40:7d:01:f4:81:5c:52:bf:
05:2f:0e:44:4f:5e:06:40:ea:db:5c:e4:fe:2d:75:9e:ad:85:
74:74:f4:92:77:7f:43:a2:c9:4a:7d:6b:17:ea:ae:71:f5:49:
a5:9d:07:3f:0e:97:28:5e:e2:ec:b2:e2:d3:82:41:ad:d6:30:
5f:5c:de:c1:52:de:e2:71:03:7c:56:43:ba:db:c2:ac:c9:21:
56:4d:a7:24:97:da:28:c6:1b:52:e6:95:04:c5:b9:eb:68:75:
e3:72:6b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:44 2026 by rpki-client