Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
File: ukxoXvpqLBBFY38CejJcCux5wBU.mft (raw, json)
Hash identifier: +XOa1mj0JJ94mOzF2aGJNndTSGz000JB+pxjT+BpfIQ=
Subject key identifier: AE:CE:48:D9:15:CB:A5:40:22:9A:D4:F5:28:15:79:4F:EC:42:94:D5
Authority key identifier: BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
Certificate issuer: /CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Certificate serial: 01A17B848B50AA9FDAB27560D586F6D1CA61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
Manifest number: 0E8B
Signing time: Tue 27 Oct 2026 04:00:46 +0000
Manifest this update: Tue 27 Oct 2026 04:00:46 +0000
Manifest next update: Wed 28 Oct 2026 04:00:46 +0000
Files and hashes: 1: KApK1eZ3dReQSsXRIwoW7xEMCfc.roa (hash: I01yvmR81aVECy/LZF2a4cMND5HAKMaYQMS7oZOPJ6c=)
2: sMxn8ZHV7zGVUdfXdG1zEbgYw2k.roa (hash: ubV13xd7F+TAQ+CmwFI8p32k3paHxp1b+b+S6Z39W1M=)
3: ukxoXvpqLBBFY38CejJcCux5wBU.crl (hash: VdqbAJDXttsgwQvnKW5vmBy3t1JRW/AaqRYCbvc4uHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:84:8b:50:aa:9f:da:b2:75:60:d5:86:f6:d1:ca:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Validity
Not Before: Oct 27 04:00:46 2026 GMT
Not After : Oct 28 04:00:46 2026 GMT
Subject: CN=aece48d915cba540229ad4f52815794fec4294d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:41:52:9c:02:a4:3f:03:b8:e3:93:a4:7f:58:
5d:aa:bd:ae:d2:b6:43:7e:84:21:5c:4d:fe:56:6a:
90:d6:50:7e:5d:f8:a1:5a:33:59:f8:79:a7:03:d9:
27:78:03:d3:fb:74:76:88:1d:07:ae:31:88:e9:00:
d6:25:39:e0:60:04:89:e4:6f:cd:48:dd:8d:87:c2:
bc:21:eb:c9:88:5c:3f:8c:24:e8:b9:34:b0:81:10:
b0:a7:65:95:6b:71:22:34:b7:97:27:c5:a4:62:f5:
e4:e8:65:84:4e:09:5e:35:99:d3:11:77:66:ac:a3:
1d:fa:34:69:98:8e:bd:9f:a2:e6:3a:85:31:ab:16:
f0:66:77:6a:e3:38:46:1e:98:4b:c2:28:45:6d:2a:
81:f4:4b:e0:94:fa:df:e7:58:30:41:36:c6:df:bf:
34:21:76:ca:91:8c:4a:07:64:5e:0d:84:96:db:17:
49:67:da:57:11:88:fb:38:00:08:9c:b4:24:03:63:
6a:36:b1:75:b8:6d:f1:bf:90:25:d3:4c:cd:76:17:
66:89:2d:e4:fe:ec:3d:dd:0c:8b:a6:47:bd:47:85:
cb:7e:01:47:d9:aa:82:0d:db:59:93:87:3a:6d:f2:
a2:11:ca:7f:8c:ef:c8:72:b4:d3:02:61:7f:14:a4:
e5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CE:48:D9:15:CB:A5:40:22:9A:D4:F5:28:15:79:4F:EC:42:94:D5
X509v3 Authority Key Identifier:
keyid:BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:14:e9:5d:89:ef:d3:f4:53:42:e1:ce:7d:5a:c9:19:8e:82:
ab:bc:2a:78:1d:94:c8:ec:c0:d3:bc:bc:77:15:54:17:07:91:
84:15:ac:97:b5:32:a5:64:b8:63:4a:50:77:c6:07:77:b5:0a:
eb:94:d9:98:c6:a0:72:bb:e8:03:17:be:d4:2f:ff:cf:63:05:
7f:24:a7:3e:3e:11:1e:07:c4:b9:88:f1:86:20:f7:12:ab:a8:
15:aa:62:86:30:fb:d4:63:e5:26:eb:2e:62:13:76:6b:40:6f:
68:b6:40:91:9e:72:0f:8f:21:c6:d7:2e:d0:65:86:62:25:58:
ee:a8:47:b7:ad:e9:e5:10:c4:c6:a8:76:89:8f:6b:b7:da:a8:
76:f8:f1:bd:83:38:c9:a8:12:ec:e2:ae:88:0b:97:a3:cb:89:
11:a9:9d:fd:29:ee:e0:75:d2:9f:79:23:ae:e1:6e:7f:4e:ab:
ed:dd:e9:b0:50:44:0d:c3:03:08:50:bd:ce:bc:0e:8e:af:2d:
0d:7c:31:fe:19:b1:28:66:93:ca:10:d0:36:77:71:1a:7e:75:
c0:d7:ba:21:ce:3d:17:69:cb:3c:09:15:1a:8f:6f:60:0e:81:
d8:8d:3e:4c:c4:6b:10:a3:92:00:d1:68:80:85:bb:e5:c5:12:
af:39:4d:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF7hItQqp/asnVg1Yb20cphMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNGM2ODVlZmE2YTJjMTA0NTYzN2YwMjdhMzI1YzBhZWM3
OWMwMTUwHhcNMjYxMDI3MDQwMDQ2WhcNMjYxMDI4MDQwMDQ2WjAzMTEwLwYDVQQD
EyhhZWNlNDhkOTE1Y2JhNTQwMjI5YWQ0ZjUyODE1Nzk0ZmVjNDI5NGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EFSnAKkPwO445Okf1hdqr2u0rZD
foQhXE3+VmqQ1lB+XfihWjNZ+HmnA9kneAPT+3R2iB0HrjGI6QDWJTngYASJ5G/N
SN2Nh8K8IevJiFw/jCTouTSwgRCwp2WVa3EiNLeXJ8WkYvXk6GWETgleNZnTEXdm
rKMd+jRpmI69n6LmOoUxqxbwZndq4zhGHphLwihFbSqB9EvglPrf51gwQTbG3780
IXbKkYxKB2ReDYSW2xdJZ9pXEYj7OAAInLQkA2NqNrF1uG3xv5Al00zNdhdmiS3k
/uw93QyLpke9R4XLfgFH2aqCDdtZk4c6bfKiEcp/jO/IcrTTAmF/FKTlawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7OSNkVy6VAIprU9SgVeU/sQpTVMB8GA1UdIwQY
MBaAFLpMaF76aiwQRWN/AnoyXArsecAVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWt4b1h2cHFMQkJGWTM4Q2VqSmNDdXg1d0JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS80Mjg3MmEtNTYxNy00ZWMyLWFiOGQt
Yzg2MDQ3MjA2NDJkLzEvdWt4b1h2cHFMQkJGWTM4Q2VqSmNDdXg1d0JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS80Mjg3MmEtNTYxNy00ZWMyLWFiOGQtYzg2MDQ3MjA2NDJk
LzEvdWt4b1h2cHFMQkJGWTM4Q2VqSmNDdXg1d0JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALBTpXYnv
0/RTQuHOfVrJGY6Cq7wqeB2UyOzA07y8dxVUFweRhBWsl7UypWS4Y0pQd8YHd7UK
65TZmMagcrvoAxe+1C//z2MFfySnPj4RHgfEuYjxhiD3EquoFapihjD71GPlJusu
YhN2a0BvaLZAkZ5yD48hxtcu0GWGYiVY7qhHt63p5RDExqh2iY9rt9qodvjxvYM4
yagS7OKuiAuXo8uJEamd/Snu4HXSn3kjruFuf06r7d3psFBEDcMDCFC9zrwOjq8t
DXwx/hmxKGaTyhDQNndxGn51wNe6Ic49F2nLPAkVGo9vYA6B2I0+TMRrEKOSANFo
gIW75cUSrzlNiA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 07:11:50 2026 by rpki-client