Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
File: ukBDlux3brxmOzeQT1O_by22l94.mft (raw, json)
Hash identifier: hB/HqUbzr21dKdU6ndy/ogvjqoKgGzJx1cPZVJB+H14=
Subject key identifier: 93:B5:67:15:D7:BE:5E:9B:5A:7A:A7:33:1E:D5:D2:DB:C6:4D:30:28
Authority key identifier: BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE
Certificate issuer: /CN=ba404396ec776ebc663b37904f53bf6f2db697de
Certificate serial: 019D2AE1432E1B4866B6805759FE862DCAEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
Manifest number: 1799
Signing time: Thu 26 Mar 2026 16:01:38 +0000
Manifest this update: Thu 26 Mar 2026 16:01:38 +0000
Manifest next update: Fri 27 Mar 2026 16:01:38 +0000
Files and hashes: 1: tS44mZmIyFMs473UjL5U854eiII.roa (hash: KoRk1peqIoiZFVFsXXW3hidWdEm/mtcGGSeO03SIlM8=)
2: ukBDlux3brxmOzeQT1O_by22l94.crl (hash: 6Ng+t15cY+xOP7ebDWseIN2T10sfuW345WogDLsyLmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:43:2e:1b:48:66:b6:80:57:59:fe:86:2d:ca:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba404396ec776ebc663b37904f53bf6f2db697de
Validity
Not Before: Mar 26 16:01:38 2026 GMT
Not After : Mar 27 16:01:38 2026 GMT
Subject: CN=93b56715d7be5e9b5a7aa7331ed5d2dbc64d3028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:55:8f:31:2a:99:5e:d8:7a:a6:ed:f6:67:48:
69:ce:a1:5f:ae:b7:6d:ca:fc:70:ee:af:ce:c8:b0:
ff:87:66:b2:44:08:3a:65:dd:15:9d:4b:91:8a:93:
1e:da:b9:be:30:f4:b1:3e:36:3c:6e:f0:84:cb:64:
9c:2f:65:b5:3d:85:27:1f:7c:84:ff:4c:18:40:74:
69:fc:20:2f:10:79:1e:cb:a5:d4:45:d6:0e:5d:8a:
6e:ef:c9:f3:ca:94:16:4b:61:df:f3:c1:a3:15:91:
20:78:78:ce:3c:e6:da:3b:61:1e:57:9b:84:14:a1:
79:91:5a:f4:b2:b8:35:b8:d5:30:0c:e5:4a:bd:97:
d5:77:c7:10:d8:49:90:95:35:81:ee:72:6e:68:fd:
a9:9b:d9:2d:9d:fd:00:df:c3:69:38:56:26:13:72:
f8:c9:93:e8:ae:4f:ab:56:2f:36:aa:da:41:7b:58:
b0:9a:5b:a0:75:70:70:50:6e:b5:32:9d:8a:08:2b:
de:1f:fd:88:a8:7e:0b:fc:ac:7c:77:6e:1a:df:67:
da:14:8f:ab:1a:8a:11:36:17:55:11:f9:7c:0b:37:
fd:9a:7d:8c:6e:d0:89:0e:0e:61:38:bb:e7:cb:f1:
de:70:7c:01:17:bc:1b:02:7a:36:c7:e1:e7:d3:f9:
b2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B5:67:15:D7:BE:5E:9B:5A:7A:A7:33:1E:D5:D2:DB:C6:4D:30:28
X509v3 Authority Key Identifier:
keyid:BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:85:f0:c2:ac:c8:e4:8b:8c:38:ff:d5:51:b4:63:8f:ea:b5:
f4:33:8d:0f:ed:e6:d0:89:6a:94:bb:f5:b9:f2:6e:bb:a7:ad:
f2:88:99:2b:ca:72:49:63:4e:a4:73:f2:b7:b7:44:59:70:2a:
eb:b7:13:e5:14:bf:50:c9:e0:22:4d:29:09:05:29:36:4a:ea:
3a:8f:49:e8:d5:ed:b2:22:f0:b8:9f:fa:0c:c6:88:6b:cb:5c:
55:e5:49:7b:51:51:a5:40:44:2c:d5:46:bc:3d:62:2f:a1:d9:
97:e2:06:cc:51:56:db:ac:1f:c4:6e:ad:8d:15:a8:ce:02:b8:
01:97:75:97:ee:65:f0:40:f8:a1:87:5b:b8:f4:6c:da:8d:3c:
23:9b:01:e9:f7:db:e1:04:00:33:4e:6c:a2:70:8d:ef:7d:0a:
6f:35:ea:8e:24:6b:94:0b:8c:40:f6:d8:92:3e:73:d2:48:8f:
e9:43:b4:6b:2b:8a:95:ba:07:9a:78:96:27:3f:fb:d7:4e:33:
ee:21:5c:bb:58:c8:3f:87:5c:4f:46:cd:fe:ce:7e:4d:8f:5f:
f8:d8:c9:25:2a:4b:49:3c:44:03:e8:1f:22:d9:98:a2:c7:47:
1a:16:c3:e0:ae:3a:bf:8a:66:5b:c8:c7:bf:92:06:92:53:c2:
6f:b0:e1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:31:48 2026 by rpki-client