Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
File: ukBDlux3brxmOzeQT1O_by22l94.mft (raw, json)
Hash identifier: 0lpXBWNIFk1A4y1u9YxKGjwBtrtaixbdNhfv6k1pFGU=
Subject key identifier: 67:05:D7:A2:2D:29:65:9A:7C:57:47:26:2B:A1:49:60:AD:44:0A:FC
Authority key identifier: BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE
Certificate issuer: /CN=ba404396ec776ebc663b37904f53bf6f2db697de
Certificate serial: 01A103C96183418A2018099647F6473D582C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
Manifest number: 1997
Signing time: Sat 03 Oct 2026 22:01:31 +0000
Manifest this update: Sat 03 Oct 2026 22:01:31 +0000
Manifest next update: Sun 04 Oct 2026 22:01:31 +0000
Files and hashes: 1: tS44mZmIyFMs473UjL5U854eiII.roa (hash: KoRk1peqIoiZFVFsXXW3hidWdEm/mtcGGSeO03SIlM8=)
2: ukBDlux3brxmOzeQT1O_by22l94.crl (hash: R/84WVJln5aNwb05n/E8A+V5zhd9kdP9blGVWVxPTHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:c9:61:83:41:8a:20:18:09:96:47:f6:47:3d:58:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba404396ec776ebc663b37904f53bf6f2db697de
Validity
Not Before: Oct 3 22:01:31 2026 GMT
Not After : Oct 4 22:01:31 2026 GMT
Subject: CN=6705d7a22d29659a7c5747262ba14960ad440afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:80:65:df:35:6d:8c:86:3c:7d:f6:43:98:87:
1f:d3:bd:87:c0:f2:52:a2:a3:47:4c:15:e5:0e:08:
13:98:0e:20:04:7a:43:77:61:39:79:56:8b:f3:05:
df:2d:be:28:7a:31:bc:46:93:1d:5d:37:32:35:cf:
45:c9:be:63:7a:30:63:fb:b9:85:e3:ca:21:aa:47:
a4:4c:07:2c:65:b8:b8:39:f7:a3:df:8a:c2:f8:01:
c8:ba:7d:8b:40:1e:c5:c0:52:9b:02:cf:fc:b1:94:
49:56:23:09:a1:30:ce:40:d1:ad:f4:21:fe:a9:c9:
fb:ff:fd:a1:20:c2:00:68:14:f7:0c:8f:8d:01:fa:
4b:d0:a5:b5:ae:33:d8:b6:ca:48:af:a2:18:f1:56:
95:f1:b3:88:46:44:d6:1a:aa:4e:fc:94:06:3b:d7:
2c:80:dc:2a:0a:f1:c4:1e:b8:b8:c6:d9:30:7c:1a:
da:e0:f7:16:91:f6:81:d4:07:e7:3e:52:dd:1c:86:
d5:fd:93:cb:ec:89:38:2e:51:e6:cb:ff:db:39:a9:
0e:42:2d:19:12:ef:32:bb:9c:2d:16:62:f6:0b:76:
1a:1b:a6:36:66:d4:28:ee:7d:92:96:f9:a0:6a:72:
25:d2:12:62:4c:f0:e2:5f:41:4c:71:1d:37:62:3e:
b3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:05:D7:A2:2D:29:65:9A:7C:57:47:26:2B:A1:49:60:AD:44:0A:FC
X509v3 Authority Key Identifier:
keyid:BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f0:50:4c:5a:87:62:b2:0e:d4:f5:dc:06:39:be:7f:ef:23:
49:24:20:11:06:e0:a8:90:4b:3c:da:2c:7c:5e:8f:1f:e8:f4:
b0:db:ae:31:ae:6b:c8:7c:08:2d:8b:d0:0f:8c:e2:bb:68:81:
05:4d:77:4e:73:28:0d:dd:b9:d5:81:16:88:a0:46:a4:55:bb:
3b:2d:af:db:24:9b:38:f5:47:ff:09:e4:5e:f7:bb:71:41:8c:
23:ce:86:21:75:f5:17:9b:46:83:0e:c1:3e:b5:87:2e:5d:a0:
6d:56:c6:8a:0d:e7:f5:37:63:d5:95:30:23:0e:20:e4:b1:32:
dd:d0:be:c8:0d:e9:65:72:53:b5:32:2f:51:2f:72:7a:eb:37:
66:0d:70:aa:13:4c:5b:8a:4a:08:b6:1b:25:00:13:4d:57:38:
3b:3f:89:3d:52:0d:f2:3f:fb:ef:f2:5c:fa:22:23:55:91:3e:
59:e5:8c:c0:61:a7:7a:67:ba:a5:17:88:5b:79:df:e2:c8:37:
13:f4:a3:6a:b0:b1:66:4b:ac:c7:16:c3:f6:ad:36:ba:71:dc:
9c:1c:b8:ab:06:2b:fa:ad:e2:37:dc:12:d7:6d:b0:02:70:c7:
1c:d9:14:dd:49:54:c9:03:59:41:c2:56:27:f1:b3:5e:cc:d2:
a2:35:fc:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEDyWGDQYogGAmWR/ZHPVgsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNDA0Mzk2ZWM3NzZlYmM2NjNiMzc5MDRmNTNiZjZmMmRi
Njk3ZGUwHhcNMjYxMDAzMjIwMTMxWhcNMjYxMDA0MjIwMTMxWjAzMTEwLwYDVQQD
Eyg2NzA1ZDdhMjJkMjk2NTlhN2M1NzQ3MjYyYmExNDk2MGFkNDQwYWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oBl3zVtjIY8ffZDmIcf072HwPJS
oqNHTBXlDggTmA4gBHpDd2E5eVaL8wXfLb4oejG8RpMdXTcyNc9Fyb5jejBj+7mF
48ohqkekTAcsZbi4Ofej34rC+AHIun2LQB7FwFKbAs/8sZRJViMJoTDOQNGt9CH+
qcn7//2hIMIAaBT3DI+NAfpL0KW1rjPYtspIr6IY8VaV8bOIRkTWGqpO/JQGO9cs
gNwqCvHEHri4xtkwfBra4PcWkfaB1AfnPlLdHIbV/ZPL7Ik4LlHmy//bOakOQi0Z
Eu8yu5wtFmL2C3YaG6Y2ZtQo7n2SlvmganIl0hJiTPDiX0FMcR03Yj6zqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGcF16ItKWWafFdHJiuhSWCtRAr8MB8GA1UdIwQY
MBaAFLpAQ5bsd268Zjs3kE9Tv28ttpfeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWtCRGx1eDNicnhtT3plUVQxT19ieTIybDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9mNDVmNjAtZjRlZS00MmFkLWI2YWIt
NzM1YTM5OWYwMTAyLzEvdWtCRGx1eDNicnhtT3plUVQxT19ieTIybDk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9mNDVmNjAtZjRlZS00MmFkLWI2YWItNzM1YTM5OWYwMTAy
LzEvdWtCRGx1eDNicnhtT3plUVQxT19ieTIybDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPBQTFqH
YrIO1PXcBjm+f+8jSSQgEQbgqJBLPNosfF6PH+j0sNuuMa5ryHwILYvQD4ziu2iB
BU13TnMoDd251YEWiKBGpFW7Oy2v2ySbOPVH/wnkXve7cUGMI86GIXX1F5tGgw7B
PrWHLl2gbVbGig3n9Tdj1ZUwIw4g5LEy3dC+yA3pZXJTtTIvUS9yeus3Zg1wqhNM
W4pKCLYbJQATTVc4Oz+JPVIN8j/77/Jc+iIjVZE+WeWMwGGneme6pReIW3nf4sg3
E/SjarCxZkusxxbD9q02unHcnBy4qwYr+q3iN9wS122wAnDHHNkU3UlUyQNZQcJW
J/GzXszSojX84w==
-----END CERTIFICATE-----
Generated at Sun Oct 4 08:44:08 2026 by rpki-client