Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
File: UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft (raw, json)
Hash identifier: JoBleyQfQcTeU3uamDg9DRjy283pDMhvjbB4EPwqq6g=
Subject key identifier: 99:4D:6A:49:9F:94:72:B1:A5:87:63:2C:03:95:79:E8:B2:F6:55:16
Authority key identifier: 50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
Certificate issuer: /CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Certificate serial: 019F935C4355E1119DA1CFCBFFEDB70851BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 09:02:05 +0000
Manifest this update: Fri 24 Jul 2026 09:02:05 +0000
Manifest next update: Sat 25 Jul 2026 09:02:05 +0000
Files and hashes: 1: 1cBPHp07EJ-UJNHMiRbTHD2251k.roa (hash: NcGpm88oPiijUJeByynWEeZDrBUROTCD4N4d0hBuT0w=)
2: O0z1dWysTLckLSWa-xjk4iWOyJo.roa (hash: xfK3oB04u+nOy6dQDoBykL7MzhjzL+9xzN4TDIDbuCg=)
3: UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl (hash: u+orC7jTFi3jeGjPW8P/cZh/wTycxzWDnL5A712Rh98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:43:55:e1:11:9d:a1:cf:cb:ff:ed:b7:08:51:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Validity
Not Before: Jul 24 09:02:05 2026 GMT
Not After : Jul 25 09:02:05 2026 GMT
Subject: CN=994d6a499f9472b1a587632c039579e8b2f65516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7d:fd:ae:ea:f2:d0:f6:cd:53:ba:1b:96:97:
19:0b:dd:e5:1c:79:9c:0d:0f:4d:0e:61:80:14:df:
75:07:b6:67:ac:ad:bd:7a:74:8f:c0:1e:cd:c5:7a:
fc:3d:df:3a:81:81:09:4b:e3:fd:fb:c2:ce:20:28:
2a:bc:8a:9b:82:1d:05:61:9d:bd:f0:75:95:fc:91:
e9:36:e3:75:b8:15:d6:2e:d7:66:d1:bf:38:8f:b3:
af:dc:1e:1f:04:1a:75:76:ac:1c:11:56:f1:26:eb:
80:92:a9:9c:60:46:61:f7:a8:60:32:2c:33:40:de:
57:4c:0b:d0:9b:55:91:f0:2f:13:82:0e:0e:05:b3:
2f:28:5d:87:af:b6:ed:e6:86:a2:ee:6a:45:33:36:
8a:8b:31:d2:89:41:06:f7:72:58:ea:c6:fe:c7:f8:
f2:1b:8a:95:43:18:15:be:5c:bf:86:3b:01:02:88:
e3:74:04:7b:0b:8a:17:d4:01:94:b8:43:f6:43:39:
41:ba:00:53:41:e3:56:2a:88:2c:5c:2b:e9:12:af:
6e:48:1e:c0:a2:0f:8e:59:60:05:88:44:79:48:78:
aa:35:60:0c:a4:85:39:f6:1b:5f:70:9e:0b:5c:77:
fa:36:9c:38:2b:7c:54:38:2f:7b:92:95:0f:a8:54:
8c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:4D:6A:49:9F:94:72:B1:A5:87:63:2C:03:95:79:E8:B2:F6:55:16
X509v3 Authority Key Identifier:
keyid:50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:db:c8:eb:cb:13:7e:f6:00:44:0c:fc:ab:b2:4f:24:9c:aa:
6d:aa:c0:ca:18:56:9f:40:1a:22:26:b8:3c:02:fa:c7:34:af:
c6:c2:98:ca:42:4f:ce:2e:49:bd:6c:6d:ea:1a:b9:4b:6f:70:
29:42:fe:21:07:17:04:c7:47:7e:b2:f6:fb:d8:95:64:70:7b:
00:2b:d7:c7:01:33:dd:14:85:07:ae:1c:45:e8:ab:0d:ff:72:
f4:df:06:48:bd:bc:34:e6:db:04:40:14:88:f8:72:3e:74:1b:
e9:8f:a8:ec:d2:9b:66:b4:07:01:4b:f5:19:df:14:9c:8f:00:
76:fc:6a:49:da:3e:60:56:c7:d5:30:1b:0e:ef:59:39:61:07:
6a:d7:1a:b8:f7:19:d4:8e:1a:eb:84:48:3a:b3:38:f6:64:68:
be:3b:25:d9:52:f6:d9:dd:60:1d:d3:c2:8a:49:e7:e8:63:7a:
ce:50:e5:2e:40:31:07:6a:98:b6:4c:92:20:e2:40:21:99:ca:
9d:a4:58:63:12:ce:8c:69:5f:fa:b7:17:ed:6a:a3:eb:72:56:
14:72:1e:6d:bd:4f:8a:88:ad:e3:51:03:2e:95:4f:c0:0d:d8:
55:ce:4a:bb:a8:42:79:f2:87:ad:1e:2a:3e:bf:78:10:c9:11:
c3:bd:4c:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TXENV4RGdoc/L/+23CFG8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYTA2YTQ1M2ZjZDVmMjZmYWY0ODIyYzRiNDU5MDk4ZGNh
ZmYwMzkwHhcNMjYwNzI0MDkwMjA1WhcNMjYwNzI1MDkwMjA1WjAzMTEwLwYDVQQD
Eyg5OTRkNmE0OTlmOTQ3MmIxYTU4NzYzMmMwMzk1NzllOGIyZjY1NTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3n39rury0PbNU7oblpcZC93lHHmc
DQ9NDmGAFN91B7ZnrK29enSPwB7NxXr8Pd86gYEJS+P9+8LOICgqvIqbgh0FYZ29
8HWV/JHpNuN1uBXWLtdm0b84j7Ov3B4fBBp1dqwcEVbxJuuAkqmcYEZh96hgMiwz
QN5XTAvQm1WR8C8Tgg4OBbMvKF2Hr7bt5oai7mpFMzaKizHSiUEG93JY6sb+x/jy
G4qVQxgVvly/hjsBAojjdAR7C4oX1AGUuEP2QzlBugBTQeNWKogsXCvpEq9uSB7A
og+OWWAFiER5SHiqNWAMpIU59htfcJ4LXHf6Npw4K3xUOC97kpUPqFSMiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJlNakmflHKxpYdjLAOVeeiy9lUWMB8GA1UdIwQY
MBaAFFCgakU/zV8m+vSCLEtFkJjcr/A5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUtCcVJUX05YeWI2OUlJc1MwV1FtTnl2OERrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kMzQ4YjUtMTUxYy00YWE1LWJkMDkt
ZWY1ZDUwMTFjYTc3LzEvVUtCcVJUX05YeWI2OUlJc1MwV1FtTnl2OERrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9kMzQ4YjUtMTUxYy00YWE1LWJkMDktZWY1ZDUwMTFjYTc3
LzEvVUtCcVJUX05YeWI2OUlJc1MwV1FtTnl2OERrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb9vI68sT
fvYARAz8q7JPJJyqbarAyhhWn0AaIia4PAL6xzSvxsKYykJPzi5JvWxt6hq5S29w
KUL+IQcXBMdHfrL2+9iVZHB7ACvXxwEz3RSFB64cReirDf9y9N8GSL28NObbBEAU
iPhyPnQb6Y+o7NKbZrQHAUv1Gd8UnI8AdvxqSdo+YFbH1TAbDu9ZOWEHatcauPcZ
1I4a64RIOrM49mRovjsl2VL22d1gHdPCiknn6GN6zlDlLkAxB2qYtkySIOJAIZnK
naRYYxLOjGlf+rcX7Wqj63JWFHIebb1Pioit41EDLpVPwA3YVc5Ku6hCefKHrR4q
Pr94EMkRw71Meg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:18:07 2026 by rpki-client