Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
File: ukxoXvpqLBBFY38CejJcCux5wBU.mft (raw, json)
Hash identifier: 5hGy0g3fePmD5sH/I1rutqknEUfdoHi/rz3p9pPxT6E=
Subject key identifier: DF:26:86:86:15:34:87:17:47:6A:44:F0:52:A2:BA:06:BC:A9:ED:8C
Authority key identifier: BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
Certificate issuer: /CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Certificate serial: 019D386692FA094CABC607C8B17256ECDF2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
Manifest number: 0C56
Signing time: Sun 29 Mar 2026 07:02:19 +0000
Manifest this update: Sun 29 Mar 2026 07:02:19 +0000
Manifest next update: Mon 30 Mar 2026 07:02:19 +0000
Files and hashes: 1: KApK1eZ3dReQSsXRIwoW7xEMCfc.roa (hash: I01yvmR81aVECy/LZF2a4cMND5HAKMaYQMS7oZOPJ6c=)
2: sMxn8ZHV7zGVUdfXdG1zEbgYw2k.roa (hash: ubV13xd7F+TAQ+CmwFI8p32k3paHxp1b+b+S6Z39W1M=)
3: ukxoXvpqLBBFY38CejJcCux5wBU.crl (hash: FBTbnAbKDPWfA5dsmHQaQvKEeT9r0aLUHXHUozdmLoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:92:fa:09:4c:ab:c6:07:c8:b1:72:56:ec:df:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Validity
Not Before: Mar 29 07:02:19 2026 GMT
Not After : Mar 30 07:02:19 2026 GMT
Subject: CN=df26868615348717476a44f052a2ba06bca9ed8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0e:ac:fe:e5:a7:fe:40:f4:b4:68:fe:d9:4f:
07:31:77:84:fa:61:16:de:ab:94:47:ff:82:cd:66:
55:26:89:44:ef:3e:74:c5:15:cd:e8:8b:f3:7b:30:
fa:82:11:49:90:d2:fe:a6:41:fc:f5:38:e3:49:de:
4d:c0:47:b2:4b:bd:88:7f:ae:5b:af:60:30:6a:f5:
42:90:2f:3f:f5:90:aa:e3:a1:a5:48:05:f2:73:9e:
53:16:b9:00:90:a8:db:37:59:49:18:55:57:51:23:
48:52:8c:0c:35:73:6f:bf:54:f3:39:20:ce:3a:2c:
5c:72:e6:14:ff:b7:50:08:67:21:69:cf:a7:60:5f:
1c:b1:66:24:aa:c5:9c:8b:45:e5:0e:7e:02:17:9a:
86:19:4e:25:62:3f:29:b4:34:6f:74:38:48:aa:89:
37:71:97:c4:d7:b2:84:b2:35:81:c3:97:7c:55:e3:
42:08:4f:27:98:47:91:a0:61:98:63:aa:2f:23:86:
02:38:15:71:cd:06:1a:66:9f:ec:02:ad:ff:89:28:
8f:fc:4f:59:e6:5e:06:46:65:ae:5d:ae:54:d5:52:
6f:7e:a7:f5:ef:a4:71:4c:4c:39:98:21:04:05:16:
1b:df:8d:16:25:ec:d1:b9:84:24:7f:72:7c:e8:78:
58:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:26:86:86:15:34:87:17:47:6A:44:F0:52:A2:BA:06:BC:A9:ED:8C
X509v3 Authority Key Identifier:
keyid:BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:93:17:1a:7c:46:3b:e7:33:46:40:ef:fc:95:8f:9b:e7:0e:
35:fa:d2:49:cf:4e:54:04:73:a0:bd:fb:23:c2:3b:28:2e:7a:
06:8b:9b:03:21:7c:d7:36:1e:39:b7:35:89:7f:05:f8:0c:1b:
99:37:a8:90:0f:5c:0b:de:b8:6f:bd:ee:25:c4:fc:70:6a:7b:
45:c6:af:2f:63:48:10:57:8c:80:52:b8:27:e8:3e:27:53:60:
85:55:83:20:ae:1b:f3:5d:5a:c3:33:82:32:6a:9c:67:d7:28:
74:73:46:22:87:7b:85:ab:d6:97:1f:6e:95:97:06:23:fb:0c:
7f:e2:42:9f:0f:89:82:0d:18:f3:27:75:a0:89:00:c8:eb:4b:
41:84:8b:84:97:34:03:4a:28:66:81:96:39:9c:c8:e7:96:6f:
5d:eb:d8:b9:f8:cd:45:c6:ca:d4:ff:37:d9:35:d9:56:50:44:
80:03:45:91:a2:a4:f1:0e:74:3d:3d:44:a2:53:5e:86:51:3d:
05:83:cd:bc:1e:1a:25:c0:60:10:81:49:ac:32:aa:5e:d2:1a:
6d:2a:ef:eb:4c:a3:65:b4:86:f4:bb:68:ab:a3:89:d6:07:16:
53:89:1d:ee:72:cd:9d:95:0b:03:42:0f:f6:0a:2e:fd:3b:74:
ac:e8:ec:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:13 2026 by rpki-client