Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/UK_8KIQwoDwPYLpqDidgI3Dy6eg.mft
File: UK_8KIQwoDwPYLpqDidgI3Dy6eg.mft (raw, json)
Hash identifier: FQpoqdJJsrfOO4BEhB4eCK9YdRSJouw3DviAcmIfWnU=
Subject key identifier: 12:A3:AF:2A:8D:81:D8:C9:06:B7:D6:07:01:8E:09:BA:7B:F1:21:31
Authority key identifier: 50:AF:FC:28:84:30:A0:3C:0F:60:BA:6A:0E:27:60:23:70:F2:E9:E8
Certificate issuer: /CN=50affc288430a03c0f60ba6a0e27602370f2e9e8
Certificate serial: 019D2703CAA8DBF09D34EBDE4849DC19D922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UK_8KIQwoDwPYLpqDidgI3Dy6eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/UK_8KIQwoDwPYLpqDidgI3Dy6eg.mft
Manifest number: 0C0E
Signing time: Wed 25 Mar 2026 22:00:52 +0000
Manifest this update: Wed 25 Mar 2026 22:00:52 +0000
Manifest next update: Thu 26 Mar 2026 22:00:52 +0000
Files and hashes: 1: UK_8KIQwoDwPYLpqDidgI3Dy6eg.crl (hash: duHK7enrr7NSQRrh3JnPK2KpP4ycyzMstk+y6uFFDko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/UK_8KIQwoDwPYLpqDidgI3Dy6eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/UK_8KIQwoDwPYLpqDidgI3Dy6eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UK_8KIQwoDwPYLpqDidgI3Dy6eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:ca:a8:db:f0:9d:34:eb:de:48:49:dc:19:d9:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50affc288430a03c0f60ba6a0e27602370f2e9e8
Validity
Not Before: Mar 25 22:00:52 2026 GMT
Not After : Mar 26 22:00:52 2026 GMT
Subject: CN=12a3af2a8d81d8c906b7d607018e09ba7bf12131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7d:ca:02:f7:49:3d:83:70:82:64:56:c7:7f:
e9:c1:0f:a7:e0:1d:26:8e:e8:7e:8d:2a:b9:4e:bc:
dd:91:0b:e8:dd:22:19:3f:df:ac:f5:0b:bd:99:d6:
f9:f8:59:83:ea:cb:96:c3:43:01:47:bf:c3:b1:e3:
f9:1a:84:d8:8e:f5:e5:4f:4e:90:32:81:fe:45:20:
16:21:37:cd:d9:a5:f4:96:65:2c:5c:b9:45:58:b6:
67:87:43:7d:76:62:9d:ec:a6:ba:63:3e:a3:dc:62:
6f:ec:e3:03:21:85:35:cc:ce:f8:6b:71:ff:65:ea:
d8:83:1a:7a:d1:85:02:9f:52:30:d7:8a:88:bc:01:
f3:4b:28:9e:3e:c1:65:f7:f9:65:27:86:54:ce:f6:
b2:7f:d5:5e:8b:8c:1a:c7:6d:96:55:55:85:a3:02:
29:24:4a:c7:98:6d:74:50:24:f2:46:99:a7:60:a2:
70:f4:ed:53:9a:fd:f9:ec:3e:d6:ad:40:90:63:f1:
ac:1a:64:74:96:ed:15:a9:fa:25:87:b6:9e:3b:bf:
9e:3f:0d:08:f8:b5:a2:2c:05:b4:c5:83:77:5b:17:
be:08:bd:bb:b7:84:79:c9:d8:f3:c2:04:22:d2:b3:
f8:01:62:10:ef:0c:01:8f:a6:27:7b:f0:90:1b:0a:
de:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A3:AF:2A:8D:81:D8:C9:06:B7:D6:07:01:8E:09:BA:7B:F1:21:31
X509v3 Authority Key Identifier:
keyid:50:AF:FC:28:84:30:A0:3C:0F:60:BA:6A:0E:27:60:23:70:F2:E9:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UK_8KIQwoDwPYLpqDidgI3Dy6eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/UK_8KIQwoDwPYLpqDidgI3Dy6eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/UK_8KIQwoDwPYLpqDidgI3Dy6eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:9b:f7:be:fc:17:a5:69:3c:46:05:45:23:3a:ee:b6:8c:cd:
ea:c7:28:03:1a:49:2a:ef:f4:65:bb:fe:ff:7d:f0:ae:6a:44:
38:05:78:23:98:13:51:b5:30:86:f8:a4:4e:82:54:44:36:ab:
82:8a:69:fa:b1:5b:1f:00:23:1f:21:36:7d:4e:cf:d7:f9:47:
97:85:36:b1:c0:d9:56:6d:33:76:7f:01:3f:8d:9c:18:db:d3:
1e:fe:64:89:3a:ec:d3:2e:5f:86:35:19:18:cd:93:28:07:8c:
c8:29:54:c7:85:db:df:93:39:bf:11:35:ee:61:ac:06:85:39:
c6:c9:72:f4:75:b2:a4:63:89:df:67:7d:39:44:7e:f2:e0:f9:
b1:c6:83:4a:07:4b:ac:9f:f2:a4:c9:3f:cc:0b:ed:b3:ce:e7:
cc:03:cb:f6:9d:2d:c7:b8:fd:b2:17:de:39:80:33:f6:79:71:
a8:37:62:fa:a0:be:7f:1d:4a:4c:f4:2c:a3:64:e8:f1:51:a5:
82:78:36:0a:35:cf:f9:99:d4:98:f2:ee:21:a8:4c:e9:66:f7:
d9:9c:1d:e1:bd:9c:66:6f:ca:99:d2:e1:82:a2:32:2c:9d:8a:
07:36:60:31:30:cf:c4:56:b6:da:1d:d3:32:e2:06:0d:47:12:
0a:75:a7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:16:04 2026 by rpki-client