Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
File: UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft (raw, json)
Hash identifier: nlbvrszBHtrE1A7/iB3jPZ5jh/nPXtA9Gph+ujqp1qo=
Subject key identifier: 3F:92:CD:02:CD:A1:DE:15:D8:6E:93:CB:65:7F:7F:AD:26:1F:D2:B7
Authority key identifier: 50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
Certificate issuer: /CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Certificate serial: 019D2960A3A063CC1BDA69FD5E4219E68FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 09:01:32 +0000
Manifest this update: Thu 26 Mar 2026 09:01:32 +0000
Manifest next update: Fri 27 Mar 2026 09:01:32 +0000
Files and hashes: 1: 1cBPHp07EJ-UJNHMiRbTHD2251k.roa (hash: NcGpm88oPiijUJeByynWEeZDrBUROTCD4N4d0hBuT0w=)
2: O0z1dWysTLckLSWa-xjk4iWOyJo.roa (hash: xfK3oB04u+nOy6dQDoBykL7MzhjzL+9xzN4TDIDbuCg=)
3: UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl (hash: 9AOP1H8urN8c4KLjxEdKBf9vs8UVr4FyC2ywjLxqJI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:a3:a0:63:cc:1b:da:69:fd:5e:42:19:e6:8f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Validity
Not Before: Mar 26 09:01:32 2026 GMT
Not After : Mar 27 09:01:32 2026 GMT
Subject: CN=3f92cd02cda1de15d86e93cb657f7fad261fd2b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ae:a2:1b:a6:b0:cb:26:a6:32:26:d2:60:ed:
e5:00:4a:74:1c:83:a8:fd:aa:87:7b:76:ea:b1:46:
d4:03:74:4c:49:b1:a3:8d:97:50:a7:67:e7:69:09:
5c:ec:29:9d:fb:8f:d5:a0:24:5d:3e:95:89:54:f2:
a0:b4:d4:c4:56:b7:a0:bb:34:40:36:f6:29:96:43:
b1:5e:3b:92:31:aa:b0:ba:95:15:d5:6d:fc:73:f6:
a3:da:04:e5:5a:92:47:92:6d:14:76:15:33:e4:31:
ca:8a:82:4b:17:5b:8a:cc:73:03:c1:db:a9:e3:fd:
b0:03:e1:4d:4b:a7:0f:db:3b:84:3b:c4:ea:af:69:
59:f8:00:0e:5b:74:95:39:01:c3:bc:ca:f2:0e:3e:
eb:25:98:53:aa:02:03:cb:1b:0d:66:53:41:84:8b:
38:0e:31:e0:98:04:c7:94:98:4a:0f:66:08:dc:eb:
bd:cc:b4:b6:11:7a:06:e4:80:d7:9a:98:ab:3f:fb:
6a:ff:c9:d9:d5:1f:f9:a6:8b:af:97:a9:7d:a1:90:
ef:4e:89:78:84:91:c6:88:a9:97:bf:49:45:0c:83:
7a:cd:b6:8e:18:b9:a3:82:d1:c3:1f:f8:f0:11:c4:
46:a1:35:66:05:1d:a8:c1:3a:db:2a:86:fa:27:d1:
2b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:92:CD:02:CD:A1:DE:15:D8:6E:93:CB:65:7F:7F:AD:26:1F:D2:B7
X509v3 Authority Key Identifier:
keyid:50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f6:fa:7c:ed:8e:09:d4:70:65:79:cc:2d:77:0d:5f:e9:cf:
46:35:b7:3d:80:5d:33:0e:2c:20:1c:a8:08:bf:62:8c:0a:5f:
8c:2f:dc:e2:de:ea:55:b5:1b:e4:28:61:55:47:a5:1f:9a:15:
ee:e0:f3:bd:ed:1c:d3:6d:d2:68:a7:eb:78:be:5f:d6:2c:37:
7e:51:01:52:36:81:ea:b7:b7:a9:9a:cf:12:4e:e9:ca:a6:c0:
49:90:c2:01:38:71:56:9e:54:1b:29:c7:9c:db:78:4f:da:a1:
e5:cb:f7:02:ea:88:43:59:50:ae:99:b4:6c:e2:5a:5b:aa:ad:
44:0f:e8:f1:56:a4:6d:a7:11:72:f8:a4:c5:4e:1b:4e:78:65:
67:0c:3c:84:ac:be:99:07:73:2b:19:0a:a6:df:2b:ca:86:50:
a1:82:aa:38:17:74:bb:11:68:97:fe:44:31:01:9c:b2:ea:4d:
de:05:52:bf:3a:83:24:ba:40:ad:76:2f:e6:66:99:66:66:fe:
76:03:63:2f:11:22:ec:d6:51:d3:e7:03:e5:50:d2:3f:cf:a7:
88:94:02:c6:51:7d:4d:ff:64:f7:2e:0d:39:52:cf:59:41:c8:
0c:1d:d1:b2:df:06:ce:e8:5a:5e:8b:28:74:82:f4:99:2b:49:
61:4b:74:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:25:47 2026 by rpki-client