
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
File: UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft (raw, json)
Hash identifier: La3aegL125ErAPOLTxEuL1bH6pU61ZuxaW6ehl3BNVM=
Subject key identifier: 99:49:64:6C:0B:7B:59:67:36:DF:AB:7B:99:E9:70:99:36:8C:F2:B8
Authority key identifier: 50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
Certificate issuer: /CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Certificate serial: 0199FC219515871A4091C169BB877EC21D3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 11:01:23 +0000
Manifest this update: Sun 19 Oct 2025 11:01:23 +0000
Manifest next update: Mon 20 Oct 2025 11:01:23 +0000
Files and hashes: 1: UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl (hash: ABnzzAeoGwvlGC8dwvIYUeXY3Oy4yYu6fZyqhrcGJlk=)
2: XmJ8vYGbQYVnd8y-h4wRzi3J_pE.roa (hash: exnN1l7i5NuQ19i+bMh7iG0NXDBSnKZN8vpjyWS2vRc=)
3: XrhvNCYQn9v_ZtENdKVZ3VLduJc.roa (hash: aN/R4IVeQqrz28tH9akl71ra6TmpBihdrIjUuL23MYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:95:15:87:1a:40:91:c1:69:bb:87:7e:c2:1d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Validity
Not Before: Oct 19 11:01:23 2025 GMT
Not After : Oct 20 11:01:23 2025 GMT
Subject: CN=9949646c0b7b596736dfab7b99e97099368cf2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:82:ca:ce:28:10:62:67:ca:a8:4d:b7:2d:97:
ce:38:f9:5d:d5:f9:e8:ab:ba:83:ed:93:56:aa:02:
fa:54:2c:0e:f6:af:6b:f5:f9:1d:3e:81:ed:5c:e3:
5f:70:3a:29:56:66:48:15:5d:4b:22:2c:76:6d:c6:
c2:79:5c:7f:31:eb:70:24:63:c3:fa:52:fb:f1:a2:
7f:c4:5f:3b:66:b6:30:c8:81:3e:7a:5f:89:1d:d0:
a2:30:d6:7c:46:29:63:66:b2:e3:f8:b8:48:4d:ab:
6d:13:56:42:fa:8c:30:90:59:39:15:fd:90:97:83:
fd:d7:ca:cc:47:bf:dd:b9:24:23:bc:17:91:f1:a8:
d8:b2:fb:be:58:c9:6e:fc:7b:e0:0f:5e:16:5d:24:
bd:6a:96:1e:af:e2:0e:38:78:db:b4:fd:53:4b:78:
0a:8c:bd:1d:6c:d9:a0:f9:cf:08:74:ea:8b:97:9d:
50:dd:9a:35:61:89:e4:72:13:d0:16:af:8c:76:c3:
ad:2c:38:2a:26:3f:b6:04:44:28:72:90:fe:ce:02:
46:f0:2b:7c:41:bb:59:41:f8:75:f0:8f:ed:d5:3c:
93:d4:20:01:36:86:33:3a:d5:37:1f:fe:49:88:ca:
b5:85:b6:87:72:52:97:1f:40:1e:c5:c5:cf:35:1c:
a7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:49:64:6C:0B:7B:59:67:36:DF:AB:7B:99:E9:70:99:36:8C:F2:B8
X509v3 Authority Key Identifier:
keyid:50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:86:22:00:8e:8e:a1:37:bf:52:a0:4f:c8:fa:1c:61:d0:0a:
f5:bd:90:ff:0d:45:81:72:ec:f1:bd:ad:27:05:55:20:c0:a0:
43:37:88:d7:a0:00:23:3e:f6:0f:95:ef:60:02:cc:4a:ff:d1:
52:c1:49:30:80:f6:26:18:5d:9b:c1:79:49:c5:e2:3a:ec:45:
0c:b9:20:26:8b:18:7b:65:07:0d:a4:e0:6a:dc:26:67:bd:57:
a9:f9:29:a2:3f:4e:1f:41:03:2a:4a:22:33:d3:3f:92:01:7f:
ab:fe:76:a1:ce:29:75:c5:a8:c2:73:f9:10:2f:8a:0c:9f:23:
9b:29:be:e7:bd:2f:fd:7d:be:cb:32:e2:0b:0e:e8:e0:dc:64:
28:ee:24:42:21:e1:67:47:d8:80:6e:ef:1f:c6:1c:dd:99:98:
b5:88:26:96:95:2a:86:67:e6:65:f5:60:29:ed:6b:65:90:ce:
06:13:a6:96:a0:9b:28:d0:77:27:ca:34:a4:cb:67:77:c9:54:
9f:1a:06:f5:9b:24:df:d7:ea:f7:72:81:23:a7:e2:b9:6a:60:
51:9d:74:11:65:5c:db:30:33:ea:14:48:7f:f0:7c:2b:b2:24:
24:63:97:cf:36:93:f7:48:85:59:a0:bc:de:c1:bd:17:19:48:
7a:33:33:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IZUVhxpAkcFpu4d+wh09MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYTA2YTQ1M2ZjZDVmMjZmYWY0ODIyYzRiNDU5MDk4ZGNh
ZmYwMzkwHhcNMjUxMDE5MTEwMTIzWhcNMjUxMDIwMTEwMTIzWjAzMTEwLwYDVQQD
Eyg5OTQ5NjQ2YzBiN2I1OTY3MzZkZmFiN2I5OWU5NzA5OTM2OGNmMmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiILKzigQYmfKqE23LZfOOPld1fno
q7qD7ZNWqgL6VCwO9q9r9fkdPoHtXONfcDopVmZIFV1LIix2bcbCeVx/MetwJGPD
+lL78aJ/xF87ZrYwyIE+el+JHdCiMNZ8RiljZrLj+LhITattE1ZC+owwkFk5Ff2Q
l4P918rMR7/duSQjvBeR8ajYsvu+WMlu/HvgD14WXSS9apYer+IOOHjbtP1TS3gK
jL0dbNmg+c8IdOqLl51Q3Zo1YYnkchPQFq+MdsOtLDgqJj+2BEQocpD+zgJG8Ct8
QbtZQfh18I/t1TyT1CABNoYzOtU3H/5JiMq1hbaHclKXH0AexcXPNRynPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJlJZGwLe1lnNt+re5npcJk2jPK4MB8GA1UdIwQY
MBaAFFCgakU/zV8m+vSCLEtFkJjcr/A5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUtCcVJUX05YeWI2OUlJc1MwV1FtTnl2OERrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kMzQ4YjUtMTUxYy00YWE1LWJkMDkt
ZWY1ZDUwMTFjYTc3LzEvVUtCcVJUX05YeWI2OUlJc1MwV1FtTnl2OERrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9kMzQ4YjUtMTUxYy00YWE1LWJkMDktZWY1ZDUwMTFjYTc3
LzEvVUtCcVJUX05YeWI2OUlJc1MwV1FtTnl2OERrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhYYiAI6O
oTe/UqBPyPocYdAK9b2Q/w1FgXLs8b2tJwVVIMCgQzeI16AAIz72D5XvYALMSv/R
UsFJMID2Jhhdm8F5ScXiOuxFDLkgJosYe2UHDaTgatwmZ71Xqfkpoj9OH0EDKkoi
M9M/kgF/q/52oc4pdcWownP5EC+KDJ8jmym+570v/X2+yzLiCw7o4NxkKO4kQiHh
Z0fYgG7vH8Yc3ZmYtYgmlpUqhmfmZfVgKe1rZZDOBhOmlqCbKNB3J8o0pMtnd8lU
nxoG9Zsk39fq93KBI6fiuWpgUZ10EWVc2zAz6hRIf/B8K7IkJGOXzzaT90iFWaC8
3sG9FxlIejMzmg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:35 2025 by rpki-client