Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
File: ukBDlux3brxmOzeQT1O_by22l94.mft (raw, json)
Hash identifier: kVeoN9wwx/iwalVsg9jexVxerZxGmaJRLvgUVu+pnmI=
Subject key identifier: 3F:AA:1E:3D:06:A7:59:1D:33:53:36:9C:18:E1:6C:76:05:ED:5C:1B
Authority key identifier: BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE
Certificate issuer: /CN=ba404396ec776ebc663b37904f53bf6f2db697de
Certificate serial: 019E20245E13C9834F374ABEF7EE28D85ACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
Manifest number: 1818
Signing time: Wed 13 May 2026 07:01:54 +0000
Manifest this update: Wed 13 May 2026 07:01:54 +0000
Manifest next update: Thu 14 May 2026 07:01:54 +0000
Files and hashes: 1: tS44mZmIyFMs473UjL5U854eiII.roa (hash: KoRk1peqIoiZFVFsXXW3hidWdEm/mtcGGSeO03SIlM8=)
2: ukBDlux3brxmOzeQT1O_by22l94.crl (hash: /o+3cE95mSBzOGpA2nfscfdlMK/z/v5Lrq80O+oHY20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:24:5e:13:c9:83:4f:37:4a:be:f7:ee:28:d8:5a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba404396ec776ebc663b37904f53bf6f2db697de
Validity
Not Before: May 13 07:01:54 2026 GMT
Not After : May 14 07:01:54 2026 GMT
Subject: CN=3faa1e3d06a7591d3353369c18e16c7605ed5c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:88:2f:50:26:f3:9d:f4:75:39:02:cf:e8:4c:
10:c8:67:4d:9e:b1:eb:f7:e3:66:14:be:e9:3f:a3:
b8:78:3c:f7:dd:1b:97:54:67:5e:6e:84:c1:cd:1b:
52:9d:30:9c:33:98:c9:36:7a:78:e6:9d:09:f5:e5:
f0:5d:41:a0:dc:6f:f5:77:1c:dc:f0:f4:ee:6c:19:
69:cc:e1:cb:a7:ca:db:81:f3:7a:5a:c9:9c:fc:ab:
07:4c:e8:ad:29:c3:50:a9:7d:ec:ff:51:9f:86:59:
7f:5c:e8:eb:ee:85:02:1d:f4:42:07:e3:f6:88:69:
95:6f:3d:f8:be:c6:e4:7d:d7:ea:b1:dd:ed:b0:89:
4f:41:44:c8:c7:fc:35:2a:5e:b7:c2:b0:21:d4:cc:
1f:69:cc:89:40:24:eb:76:8a:65:aa:73:19:37:b2:
7b:a7:7b:7c:7d:1d:7f:4b:4d:f4:a9:29:88:a6:86:
10:7d:c4:f6:91:81:6c:01:7b:2d:a7:11:20:e2:8a:
49:89:91:a8:2f:a1:03:81:8b:88:5a:52:a1:7f:53:
2c:49:f0:a3:09:0c:15:5f:b6:5f:3f:15:3b:12:50:
7b:11:44:a5:b5:c0:9c:ff:95:1d:fc:54:65:b8:48:
cb:d2:15:ad:07:b2:32:54:8e:2f:82:83:be:93:44:
a5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AA:1E:3D:06:A7:59:1D:33:53:36:9C:18:E1:6C:76:05:ED:5C:1B
X509v3 Authority Key Identifier:
keyid:BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c8:72:1c:04:c5:2e:28:a9:f8:d6:dc:48:73:e2:8f:b2:f7:
54:7c:bf:4d:ac:17:30:51:d9:54:ce:85:37:36:1c:d1:b2:6d:
86:7c:d2:1b:88:31:fc:21:08:b1:7b:d3:2d:b4:68:39:40:ce:
e4:ea:91:6a:f0:a2:04:72:59:ec:5d:78:18:13:3b:8d:2c:e3:
b3:28:1e:4a:9a:d6:5c:49:c9:13:90:8d:cd:0f:66:f9:64:13:
ab:ea:88:e0:50:f0:0b:99:0e:1f:67:83:a5:e3:08:c7:61:d4:
6a:87:11:d7:70:26:4c:14:37:91:b0:19:9e:db:74:96:b4:66:
4e:78:1a:fb:d0:6d:ee:5c:35:37:a3:7c:ae:08:22:df:2d:c9:
84:32:90:97:59:74:59:de:16:7e:f6:48:e4:dc:12:c4:bb:df:
c7:fb:e2:3a:7c:b1:59:ad:0d:98:df:57:18:0a:85:2d:08:ae:
d8:8c:57:58:68:e0:5f:4b:03:02:9b:1c:ff:67:77:41:69:fc:
c4:6f:35:70:4a:cd:92:b3:45:a5:73:0c:5c:38:5b:af:13:28:
47:55:97:9a:2d:1a:66:18:11:2a:cb:86:42:99:46:23:1a:72:
a8:3d:87:6d:f5:32:e0:04:54:18:75:8c:ae:f7:9c:eb:88:eb:
a3:e1:73:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gJF4TyYNPN0q+9+4o2FrPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNDA0Mzk2ZWM3NzZlYmM2NjNiMzc5MDRmNTNiZjZmMmRi
Njk3ZGUwHhcNMjYwNTEzMDcwMTU0WhcNMjYwNTE0MDcwMTU0WjAzMTEwLwYDVQQD
EygzZmFhMWUzZDA2YTc1OTFkMzM1MzM2OWMxOGUxNmM3NjA1ZWQ1YzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYgvUCbznfR1OQLP6EwQyGdNnrHr
9+NmFL7pP6O4eDz33RuXVGdeboTBzRtSnTCcM5jJNnp45p0J9eXwXUGg3G/1dxzc
8PTubBlpzOHLp8rbgfN6Wsmc/KsHTOitKcNQqX3s/1Gfhll/XOjr7oUCHfRCB+P2
iGmVbz34vsbkfdfqsd3tsIlPQUTIx/w1Kl63wrAh1MwfacyJQCTrdoplqnMZN7J7
p3t8fR1/S030qSmIpoYQfcT2kYFsAXstpxEg4opJiZGoL6EDgYuIWlKhf1MsSfCj
CQwVX7ZfPxU7ElB7EUSltcCc/5Ud/FRluEjL0hWtB7IyVI4vgoO+k0SlTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+qHj0Gp1kdM1M2nBjhbHYF7VwbMB8GA1UdIwQY
MBaAFLpAQ5bsd268Zjs3kE9Tv28ttpfeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWtCRGx1eDNicnhtT3plUVQxT19ieTIybDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9mNDVmNjAtZjRlZS00MmFkLWI2YWIt
NzM1YTM5OWYwMTAyLzEvdWtCRGx1eDNicnhtT3plUVQxT19ieTIybDk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9mNDVmNjAtZjRlZS00MmFkLWI2YWItNzM1YTM5OWYwMTAy
LzEvdWtCRGx1eDNicnhtT3plUVQxT19ieTIybDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABshyHATF
Liip+NbcSHPij7L3VHy/TawXMFHZVM6FNzYc0bJthnzSG4gx/CEIsXvTLbRoOUDO
5OqRavCiBHJZ7F14GBM7jSzjsygeSprWXEnJE5CNzQ9m+WQTq+qI4FDwC5kOH2eD
peMIx2HUaocR13AmTBQ3kbAZntt0lrRmTnga+9Bt7lw1N6N8rggi3y3JhDKQl1l0
Wd4WfvZI5NwSxLvfx/viOnyxWa0NmN9XGAqFLQiu2IxXWGjgX0sDApsc/2d3QWn8
xG81cErNkrNFpXMMXDhbrxMoR1WXmi0aZhgRKsuGQplGIxpyqD2HbfUy4ARUGHWM
rvec64jro+Fzgg==
-----END CERTIFICATE-----
Generated at Wed May 13 13:41:08 2026 by rpki-client