Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.mft
File: ukQzhlmFp7teJpw3lK5vFkz8Lds.mft (raw, json)
Hash identifier: SeC/0hxqrs5UOlX/hZ6BR6bQnAsNpIPMak0yI92OkWg=
Subject key identifier: F2:7F:5A:04:49:57:23:92:2A:59:6E:09:99:CC:05:55:CE:40:31:E8
Authority key identifier: BA:44:33:86:59:85:A7:BB:5E:26:9C:37:94:AE:6F:16:4C:FC:2D:DB
Certificate issuer: /CN=ba4433865985a7bb5e269c3794ae6f164cfc2ddb
Certificate serial: 01A10FCC9A50FFAA17417A7C4A0FE3B5E0CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukQzhlmFp7teJpw3lK5vFkz8Lds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.mft
Manifest number: 0A6C
Signing time: Tue 06 Oct 2026 06:00:29 +0000
Manifest this update: Tue 06 Oct 2026 06:00:29 +0000
Manifest next update: Wed 07 Oct 2026 06:00:29 +0000
Files and hashes: 1: UfxnZEwkQdyHN4gibAtk_ce1zeI.roa (hash: Bl9GgITeZ3znWiaIE2fwC3TQwsJfWdhy5zENaMdMELI=)
2: ukQzhlmFp7teJpw3lK5vFkz8Lds.crl (hash: pjiNhnWaGu3TkcIeL06Bde2LOpD5INNAsbx4vQLciIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukQzhlmFp7teJpw3lK5vFkz8Lds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:cc:9a:50:ff:aa:17:41:7a:7c:4a:0f:e3:b5:e0:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4433865985a7bb5e269c3794ae6f164cfc2ddb
Validity
Not Before: Oct 6 06:00:29 2026 GMT
Not After : Oct 7 06:00:29 2026 GMT
Subject: CN=f27f5a04495723922a596e0999cc0555ce4031e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3f:ab:dc:64:4f:30:bc:a1:5b:6e:78:da:a1:
2c:f0:d5:03:b5:af:16:3a:b4:32:f1:d7:d2:a1:95:
e0:69:e1:e8:dd:12:53:79:c5:dd:cc:06:a0:ca:dd:
ab:1c:43:d8:13:75:3a:a7:d4:03:5e:bf:0c:5c:8a:
40:b9:b1:bd:23:11:41:70:86:0d:2e:ce:d9:cf:cd:
3a:04:a5:4a:43:70:d2:99:a5:62:92:04:1f:b6:37:
be:b8:eb:fd:04:aa:41:af:90:bb:bc:6b:8e:2d:a2:
81:35:c8:2e:19:16:f2:de:dd:11:c7:05:a1:36:3f:
a7:d8:f8:dd:29:b1:bc:f6:12:09:0a:0f:ec:cf:96:
2e:c1:ad:a2:b2:ad:cb:45:76:72:04:0e:67:ee:00:
59:bd:c3:0d:5a:d6:25:c1:b0:83:f3:66:c3:16:c0:
cc:7d:30:df:05:90:48:4f:a6:e6:0a:c8:6d:8f:ab:
42:3f:19:fc:e0:c5:9e:4f:a1:7c:dd:58:34:9f:96:
4a:e7:2a:c5:b2:7c:f8:5d:69:2b:51:6c:60:6e:ab:
80:0c:a8:d4:47:e4:ea:12:be:ad:7a:3e:9e:0e:e1:
92:5f:d8:04:e2:7e:96:8b:c5:75:96:11:b9:39:0a:
cb:c9:72:c8:d3:25:14:c7:c3:07:6f:30:a5:32:ca:
1b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7F:5A:04:49:57:23:92:2A:59:6E:09:99:CC:05:55:CE:40:31:E8
X509v3 Authority Key Identifier:
keyid:BA:44:33:86:59:85:A7:BB:5E:26:9C:37:94:AE:6F:16:4C:FC:2D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukQzhlmFp7teJpw3lK5vFkz8Lds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c5:89:04:73:36:31:a2:73:9d:11:e6:05:5d:54:ae:fa:5d:
69:6a:85:50:96:d7:51:25:08:ac:6a:63:d7:41:be:a9:ad:e6:
31:5a:90:3a:c7:79:a5:b6:9d:19:a8:20:35:10:0a:22:34:08:
65:05:3c:08:38:7b:70:67:10:25:1a:10:5c:b8:31:50:13:3d:
a4:26:03:30:47:44:33:d3:d3:b9:84:8d:86:58:3c:e6:9c:b6:
8f:16:95:e1:5b:1d:64:6b:e0:3d:bb:65:a8:a9:e4:f3:43:78:
37:1f:c9:98:09:ae:c6:06:4a:c4:0f:2a:b8:66:cb:52:20:0a:
7e:8c:4d:c5:44:e7:90:04:dd:0c:9f:e9:4d:f3:6d:0c:b4:b5:
0d:2c:66:9d:cc:a6:9b:43:1c:f0:a3:23:c1:f4:53:7b:2a:13:
5d:47:ec:19:20:06:ed:c8:a6:43:87:bd:2f:e1:ae:e4:07:e5:
1c:54:dd:1a:f5:b4:b0:1f:db:9d:cb:83:b6:41:23:67:e9:65:
4a:66:5d:08:a5:07:6f:7b:bd:7c:16:3b:c7:8b:76:11:e3:f9:
a2:70:0e:8b:08:11:17:5b:d4:69:3f:11:70:1c:4f:b9:86:bc:
65:0c:71:4f:8e:e1:1b:3b:59:81:71:6a:ec:45:e6:0a:e3:df:
bf:e9:23:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 16:26:12 2026 by rpki-client