Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
File: ukxoXvpqLBBFY38CejJcCux5wBU.mft (raw, json)
Hash identifier: KJzSMxdbbkDkL+WcgpfWYCtlZ1RLiMHfQs/w9gNM7uo=
Subject key identifier: CF:88:58:49:36:28:4B:12:9A:E5:E5:E8:9B:87:41:52:5A:52:CA:E4
Authority key identifier: BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
Certificate issuer: /CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Certificate serial: 019E8E375CF0230192BAC4521D2D0CCC32F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
Manifest number: 0D07
Signing time: Wed 03 Jun 2026 16:00:53 +0000
Manifest this update: Wed 03 Jun 2026 16:00:53 +0000
Manifest next update: Thu 04 Jun 2026 16:00:53 +0000
Files and hashes: 1: KApK1eZ3dReQSsXRIwoW7xEMCfc.roa (hash: I01yvmR81aVECy/LZF2a4cMND5HAKMaYQMS7oZOPJ6c=)
2: sMxn8ZHV7zGVUdfXdG1zEbgYw2k.roa (hash: ubV13xd7F+TAQ+CmwFI8p32k3paHxp1b+b+S6Z39W1M=)
3: ukxoXvpqLBBFY38CejJcCux5wBU.crl (hash: pyT/tBtIoVL2X/PF990lDn8UFF+buETJwBLEeHdU/jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 13:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8e:37:5c:f0:23:01:92:ba:c4:52:1d:2d:0c:cc:32:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Validity
Not Before: Jun 3 16:00:53 2026 GMT
Not After : Jun 4 16:00:53 2026 GMT
Subject: CN=cf88584936284b129ae5e5e89b8741525a52cae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:89:39:2d:cc:1a:9a:82:de:58:b9:05:68:5b:
32:6f:e2:53:46:96:2f:fa:1e:ca:dc:dc:eb:7f:3f:
ab:7f:db:dc:bd:9d:84:d1:06:13:ef:39:a8:af:60:
ad:93:67:cd:04:dc:f3:8e:d3:a4:84:02:af:01:2c:
22:16:84:3f:a2:72:0e:2e:66:f0:88:7c:f1:8f:8a:
92:3d:62:80:00:56:c2:b4:44:ef:3e:69:05:99:8b:
89:4e:cd:28:34:25:45:f3:5b:23:e1:89:33:80:a7:
43:50:bb:36:c9:55:eb:cb:83:fc:9c:a8:9f:59:32:
37:47:91:d2:70:98:85:a1:a2:72:f2:7e:e2:20:6f:
bd:2c:40:fa:27:7c:73:d3:77:43:02:86:70:ab:c9:
fc:19:e4:86:2b:9f:63:98:2b:78:39:58:11:ce:70:
6a:5e:e7:48:10:11:50:43:99:a2:85:36:93:b6:88:
07:3c:a6:97:7d:bc:40:13:93:ba:17:b3:2a:3f:6e:
de:7f:79:c4:1a:be:f4:83:b0:76:21:0e:ed:1e:cf:
dc:18:2c:9e:51:56:2e:4d:3c:b6:0f:05:8f:13:b3:
71:39:1b:76:33:44:0f:ef:31:c3:10:79:52:5f:17:
7e:d4:ce:8d:44:b7:00:3b:a4:5a:ca:21:eb:3a:5a:
9c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:88:58:49:36:28:4B:12:9A:E5:E5:E8:9B:87:41:52:5A:52:CA:E4
X509v3 Authority Key Identifier:
keyid:BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b0:d7:d6:ba:ce:22:f0:b4:51:f9:a2:69:f9:d8:3c:8a:fd:
bd:18:c4:84:f2:94:25:c3:f0:ef:11:ad:86:2b:3f:70:94:36:
d2:ea:8e:cb:b8:4e:77:e8:27:f5:2c:16:86:22:44:bd:28:37:
c0:be:12:40:67:94:ce:f5:fa:e0:73:78:04:4a:23:fb:71:2a:
80:88:1a:cd:31:c4:fc:6f:18:1e:83:c8:00:31:a0:bd:2b:8a:
ca:7d:e0:da:29:01:cb:41:2d:54:94:6f:8e:78:48:7b:93:45:
f0:c5:ae:95:b6:63:34:41:e3:27:17:72:59:8a:01:16:32:74:
0d:4e:02:9e:7a:2d:3e:22:85:5e:ac:ba:f2:bd:05:c9:87:72:
eb:34:70:b8:8e:07:8e:f3:a3:ef:bb:a5:9b:7f:b6:44:dc:f3:
36:ee:cb:c1:50:76:7e:7b:2c:b3:c1:54:5a:65:f6:5e:45:43:
8a:4b:2f:be:a5:8c:ec:e6:a6:54:1e:68:9c:67:7f:89:d4:ee:
c2:68:9c:80:d2:34:2b:20:09:1f:62:77:9a:34:21:c7:22:cb:
29:cf:f7:02:8f:12:80:7b:86:8e:bc:37:ef:8b:01:03:68:0f:
d6:97:ec:98:20:8a:56:96:14:3e:81:d3:1e:f4:0a:24:4f:e2:
bd:b4:8a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 20:02:12 2026 by rpki-client