Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
File: ukxoXvpqLBBFY38CejJcCux5wBU.mft (raw, json)
Hash identifier: BVRWNpheGA5xrhiF3NpyE3UBBhUkqfSUbeogYcZ7WEk=
Subject key identifier: 02:01:06:D6:61:C9:31:BF:29:27:9E:AF:EA:62:AA:FA:4F:4C:DB:5F
Authority key identifier: BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
Certificate issuer: /CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Certificate serial: 01A06F15F03FA1C6DBD4947D02D5B33FF612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
Manifest number: 0E00
Signing time: Sat 05 Sep 2026 01:01:43 +0000
Manifest this update: Sat 05 Sep 2026 01:01:43 +0000
Manifest next update: Sun 06 Sep 2026 01:01:43 +0000
Files and hashes: 1: KApK1eZ3dReQSsXRIwoW7xEMCfc.roa (hash: I01yvmR81aVECy/LZF2a4cMND5HAKMaYQMS7oZOPJ6c=)
2: sMxn8ZHV7zGVUdfXdG1zEbgYw2k.roa (hash: ubV13xd7F+TAQ+CmwFI8p32k3paHxp1b+b+S6Z39W1M=)
3: ukxoXvpqLBBFY38CejJcCux5wBU.crl (hash: 03js5JJTTaylrjs84blU74CIFm22n9GhMWScsSfT1Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:15:f0:3f:a1:c6:db:d4:94:7d:02:d5:b3:3f:f6:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Validity
Not Before: Sep 5 01:01:43 2026 GMT
Not After : Sep 6 01:01:43 2026 GMT
Subject: CN=020106d661c931bf29279eafea62aafa4f4cdb5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c2:a3:cc:95:9a:1b:3e:20:dd:b4:92:f5:03:
7c:52:6b:3d:15:45:0e:3b:c6:ab:de:b1:66:70:c0:
81:2b:2d:45:21:5d:04:dc:2a:83:dd:b5:ee:21:78:
45:52:2f:a5:b7:34:52:14:be:fb:98:fb:f9:99:67:
b3:13:cf:36:5e:25:d3:ae:70:4c:f2:d1:33:b4:c7:
79:e7:e3:4f:05:68:61:8e:7b:ff:9d:52:3f:0b:d2:
f2:6e:18:6f:5a:f0:a3:45:2e:bd:c6:6d:0c:43:17:
80:4f:c6:e6:e7:24:11:2f:68:1f:03:23:ad:c9:79:
88:41:42:47:77:66:6c:4f:56:23:b2:14:3c:8e:b6:
b0:1d:ce:be:5e:ed:b0:14:b0:43:0c:c7:7d:bb:ee:
b7:35:17:5e:64:c7:1a:a6:b4:d3:db:10:68:65:5f:
c9:f9:cb:07:05:31:57:8b:b8:36:52:a8:20:e1:ec:
50:62:5a:07:7f:49:a6:71:ed:dc:bb:88:c8:1d:dd:
61:9b:13:99:9f:dc:79:4b:5d:90:52:48:f1:44:54:
10:d2:ff:9f:11:65:f1:64:f4:1f:bf:e5:ea:83:6a:
c3:c3:f7:87:87:8c:38:14:b2:62:dc:bf:f8:8a:c7:
6e:e8:9e:02:a3:9a:ed:2e:f9:46:bc:e8:e6:d5:16:
43:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:01:06:D6:61:C9:31:BF:29:27:9E:AF:EA:62:AA:FA:4F:4C:DB:5F
X509v3 Authority Key Identifier:
keyid:BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:68:c6:58:7c:b5:2c:44:b8:83:99:5b:61:f5:5d:36:5e:b6:
86:4d:cb:2e:46:cf:29:82:cb:db:11:5f:91:29:5c:2d:7e:14:
43:78:4c:a3:79:66:48:eb:a8:35:46:63:c8:0b:f8:4e:e6:97:
13:b1:d4:0e:8c:7c:e6:d4:43:82:86:bf:2d:d0:3b:22:9a:14:
ba:c6:71:b5:7b:80:37:18:eb:30:f1:61:3e:49:d6:03:67:69:
b8:4d:9c:53:5f:3a:03:51:f0:e9:a4:ec:1a:1c:2b:7b:9c:4a:
a5:9b:19:88:dd:0d:1b:9d:00:ca:d0:a7:3d:1b:f5:f9:1c:be:
c3:99:fe:7d:c2:56:77:a3:c2:27:c0:32:66:d4:ad:a8:f3:78:
9b:3a:b8:11:bf:5e:b0:0e:0a:d9:8f:49:f6:b0:3c:27:a0:81:
7c:ef:25:05:aa:ad:be:ff:cc:23:e9:e0:18:11:f3:dc:d3:6a:
39:2c:e7:ec:45:3b:1b:96:a7:b2:ea:a3:68:9c:4d:48:e0:f1:
32:19:fc:51:6b:4c:ad:48:ab:d6:5c:90:bd:f3:0a:53:af:2b:
42:98:5d:8f:a9:df:6e:76:c0:8f:b4:a9:a0:97:9f:84:70:d7:
c9:d7:c3:55:04:16:bc:21:26:dd:7a:70:44:70:fc:18:bd:f8:
ab:26:8c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:51:12 2026 by rpki-client