Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
File: UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft (raw, json)
Hash identifier: uOplNmBdvQK1anvvRYdyDCome4TeskLIxmv2gREsKV4=
Subject key identifier: 99:93:AC:A2:E0:BB:5F:87:73:01:8C:58:C0:37:9E:34:58:8F:E6:1C
Authority key identifier: 50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
Certificate issuer: /CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Certificate serial: 01A1E05F32DCE939B5FB91B9591371CDCF80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
Manifest number: 1AFB
Signing time: Sun 15 Nov 2026 18:01:37 +0000
Manifest this update: Sun 15 Nov 2026 18:01:37 +0000
Manifest next update: Mon 16 Nov 2026 18:01:37 +0000
Files and hashes: 1: 1cBPHp07EJ-UJNHMiRbTHD2251k.roa (hash: NcGpm88oPiijUJeByynWEeZDrBUROTCD4N4d0hBuT0w=)
2: O0z1dWysTLckLSWa-xjk4iWOyJo.roa (hash: xfK3oB04u+nOy6dQDoBykL7MzhjzL+9xzN4TDIDbuCg=)
3: UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl (hash: clYahc0x8cl4QeMaiPZCeUmYEh4K0AMFukW78x4+2qU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:5f:32:dc:e9:39:b5:fb:91:b9:59:13:71:cd:cf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Validity
Not Before: Nov 15 18:01:37 2026 GMT
Not After : Nov 16 18:01:37 2026 GMT
Subject: CN=9993aca2e0bb5f8773018c58c0379e34588fe61c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a8:71:29:af:d6:0c:e1:58:9b:91:73:db:93:
a0:61:92:79:bc:ce:13:7a:d6:11:e8:78:d9:51:11:
2a:af:39:23:5c:eb:68:3e:79:2d:01:f0:cc:0e:d4:
b3:b3:f2:e9:b2:9e:3a:c1:69:16:b8:8b:a1:de:3b:
9d:78:45:00:6b:36:ad:ec:61:10:ac:ed:ce:4f:52:
ea:d2:af:cc:b8:fc:f6:33:2e:32:0e:bc:d6:94:97:
bf:2d:d6:e6:99:95:f5:3e:fe:36:25:ab:52:c2:fb:
c2:db:11:51:27:8a:de:ce:82:a0:91:25:7f:85:ab:
2f:08:ea:2d:85:58:4a:99:4a:3d:0b:2e:e5:30:e6:
4c:cf:28:25:79:02:22:4f:e5:e4:f4:76:e0:1b:7a:
12:d4:32:53:ae:a5:8f:b0:6c:fc:77:34:a3:69:b2:
08:11:ee:af:a2:ff:f9:65:ed:c0:2e:a7:8c:cc:c8:
90:8a:30:93:c0:52:cd:57:b3:8f:d8:26:f9:b6:05:
64:5b:ce:16:01:98:c8:b7:c2:dc:ec:fd:16:87:94:
bb:c4:48:d2:a2:7a:71:14:02:3c:03:7d:a9:65:be:
1b:ac:b6:21:09:e2:8f:d5:7d:a8:4a:92:73:53:25:
ec:7c:7f:e6:26:c0:7a:dd:28:31:c1:cb:2c:fd:7a:
44:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:93:AC:A2:E0:BB:5F:87:73:01:8C:58:C0:37:9E:34:58:8F:E6:1C
X509v3 Authority Key Identifier:
keyid:50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:97:cf:16:0c:1f:6e:4b:00:ff:68:5e:52:d5:09:52:40:ba:
41:56:92:63:2e:4a:80:ef:9a:28:17:9c:ff:47:d6:26:15:d1:
79:d0:3b:51:15:c8:ff:ab:22:80:42:ad:4f:76:c7:88:c6:ed:
1e:59:ba:85:09:ab:fa:3b:1d:33:34:a4:ee:12:71:9f:33:a8:
76:59:ff:8b:0c:16:f5:fa:79:1a:dc:71:3b:c3:bc:cb:1a:70:
d1:38:3d:ce:29:e4:c3:bc:33:1d:23:07:4b:75:00:87:ab:bc:
d2:cc:7a:84:81:77:bf:96:4f:ab:bb:a5:e5:6e:5f:50:8e:de:
65:0c:c6:0a:73:92:f8:46:b5:85:80:c6:c1:fd:ab:d5:cb:50:
90:d7:ce:00:ca:e0:69:4d:4a:7a:3a:bd:71:38:72:59:fd:00:
5e:e9:89:a7:94:6f:ae:03:63:6f:6e:a0:b7:4d:82:d6:f2:96:
2f:7c:bb:8f:ee:09:52:11:48:43:95:42:6f:6b:30:c5:fc:e6:
02:d6:19:5c:ac:81:de:62:b7:36:62:72:d1:99:85:f1:8b:43:
06:10:e1:1d:ea:01:b6:4a:b1:ff:88:16:88:94:2e:c4:26:82:
0c:0c:70:d5:b1:a7:e8:7b:20:11:43:a6:98:32:57:87:d5:cf:
24:8f:10:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:03:14 2026 by rpki-client