Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
File: ukxoXvpqLBBFY38CejJcCux5wBU.mft (raw, json)
Hash identifier: CMM+tm8lCQDKvjsQohxbntGCx0+M+3V8CaixkdYH/hs=
Subject key identifier: 2C:3A:C2:ED:23:38:D0:28:AC:DF:4E:EA:E8:0A:38:E2:5C:76:0D:7C
Authority key identifier: BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
Certificate issuer: /CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Certificate serial: 019E20240B3BEBCE7A2FAA4A2228185388F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
Manifest number: 0CCE
Signing time: Wed 13 May 2026 07:01:33 +0000
Manifest this update: Wed 13 May 2026 07:01:33 +0000
Manifest next update: Thu 14 May 2026 07:01:33 +0000
Files and hashes: 1: KApK1eZ3dReQSsXRIwoW7xEMCfc.roa (hash: I01yvmR81aVECy/LZF2a4cMND5HAKMaYQMS7oZOPJ6c=)
2: sMxn8ZHV7zGVUdfXdG1zEbgYw2k.roa (hash: ubV13xd7F+TAQ+CmwFI8p32k3paHxp1b+b+S6Z39W1M=)
3: ukxoXvpqLBBFY38CejJcCux5wBU.crl (hash: EBlPvYDFPR5vKguQjcNdUBfENkIGCcc59N4m4ouvew8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:24:0b:3b:eb:ce:7a:2f:aa:4a:22:28:18:53:88:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Validity
Not Before: May 13 07:01:33 2026 GMT
Not After : May 14 07:01:33 2026 GMT
Subject: CN=2c3ac2ed2338d028acdf4eeae80a38e25c760d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bc:f9:72:4f:d1:a3:4d:83:64:16:87:bc:98:
cd:e0:4f:5c:b8:fb:d8:1e:f5:9f:03:8f:8e:f3:96:
39:c6:67:96:b7:da:db:61:dd:b7:f7:dc:dd:3f:76:
56:35:63:74:ff:a8:cd:97:01:f7:4a:5d:e4:23:02:
82:36:8b:65:e5:c7:19:b4:e8:17:63:a4:19:8d:73:
6f:97:f1:cc:37:6a:e6:23:60:8e:a2:da:d4:c0:6f:
0c:cd:bb:d8:f3:3e:b8:ac:96:be:b2:a9:69:aa:c6:
31:ea:77:76:1f:4e:03:4e:68:20:8c:cc:f3:08:53:
7a:25:3e:b7:b6:5c:9a:3b:4d:ad:b9:5b:91:0f:dd:
f5:4f:e1:3a:58:bf:3f:2d:aa:c6:9d:a1:db:72:00:
1f:97:df:8f:9a:df:6b:eb:8b:e3:b3:7e:98:f9:80:
43:7f:b5:3a:ba:28:57:43:a6:e2:fa:a0:28:11:f2:
03:4c:ed:4b:49:04:e8:83:36:d3:e3:83:d8:26:a3:
0f:81:2d:76:5d:b2:fc:eb:4b:15:58:2f:9b:c9:48:
b7:d5:d7:ed:a0:83:cb:85:4c:21:86:4c:fe:0f:0e:
0b:fb:0e:3e:05:0c:6b:d4:25:19:d7:a0:79:c9:59:
8c:34:67:79:87:66:e6:9a:5a:59:88:9a:ad:03:15:
33:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3A:C2:ED:23:38:D0:28:AC:DF:4E:EA:E8:0A:38:E2:5C:76:0D:7C
X509v3 Authority Key Identifier:
keyid:BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:de:1e:e1:92:76:4a:58:f7:74:19:56:58:8d:ff:75:b5:82:
46:0e:e2:6a:6c:b2:c5:80:e3:44:ea:4a:02:40:ab:ea:89:a1:
36:85:e9:f8:76:be:7b:fe:5a:80:84:22:ae:94:21:1c:af:e6:
f3:03:e4:69:17:c6:df:f4:d4:bf:7c:87:ad:7e:99:28:86:a0:
cc:79:9b:54:95:3d:15:14:a2:8d:a3:06:60:61:83:3d:d4:73:
45:b9:c7:1e:54:63:20:bc:12:40:7d:bc:13:0a:2d:4b:e5:71:
fc:3e:27:b5:27:06:71:37:bb:9e:ff:4e:9f:98:02:51:0f:b5:
49:05:a5:75:89:5a:47:d7:03:62:a6:21:29:52:bd:78:0a:c6:
aa:93:07:ea:dc:c8:1c:50:98:11:28:e6:5d:94:46:76:97:aa:
33:65:8e:e2:30:d7:5d:6b:51:98:4c:92:0c:14:83:14:f4:ab:
df:2e:cd:c9:a3:16:53:cd:47:a7:8f:ef:57:14:ca:aa:56:69:
bd:61:24:15:e4:23:2d:87:39:26:7a:6e:9d:f6:36:5f:5e:81:
b4:80:29:05:f3:5c:fd:c5:bf:64:3b:3e:a8:2a:53:35:90:f9:
f4:d6:5a:a7:1f:17:53:1f:5f:ec:f8:d1:d6:d6:e1:6b:1a:ed:
d2:a0:a1:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gJAs76856L6pKIigYU4jzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNGM2ODVlZmE2YTJjMTA0NTYzN2YwMjdhMzI1YzBhZWM3
OWMwMTUwHhcNMjYwNTEzMDcwMTMzWhcNMjYwNTE0MDcwMTMzWjAzMTEwLwYDVQQD
EygyYzNhYzJlZDIzMzhkMDI4YWNkZjRlZWFlODBhMzhlMjVjNzYwZDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7z5ck/Ro02DZBaHvJjN4E9cuPvY
HvWfA4+O85Y5xmeWt9rbYd2399zdP3ZWNWN0/6jNlwH3Sl3kIwKCNotl5ccZtOgX
Y6QZjXNvl/HMN2rmI2COotrUwG8MzbvY8z64rJa+sqlpqsYx6nd2H04DTmggjMzz
CFN6JT63tlyaO02tuVuRD931T+E6WL8/LarGnaHbcgAfl9+Pmt9r64vjs36Y+YBD
f7U6uihXQ6bi+qAoEfIDTO1LSQTogzbT44PYJqMPgS12XbL860sVWC+byUi31dft
oIPLhUwhhkz+Dw4L+w4+BQxr1CUZ16B5yVmMNGd5h2bmmlpZiJqtAxUzAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCw6wu0jONAorN9O6ugKOOJcdg18MB8GA1UdIwQY
MBaAFLpMaF76aiwQRWN/AnoyXArsecAVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWt4b1h2cHFMQkJGWTM4Q2VqSmNDdXg1d0JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS80Mjg3MmEtNTYxNy00ZWMyLWFiOGQt
Yzg2MDQ3MjA2NDJkLzEvdWt4b1h2cHFMQkJGWTM4Q2VqSmNDdXg1d0JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS80Mjg3MmEtNTYxNy00ZWMyLWFiOGQtYzg2MDQ3MjA2NDJk
LzEvdWt4b1h2cHFMQkJGWTM4Q2VqSmNDdXg1d0JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS94e4ZJ2
Slj3dBlWWI3/dbWCRg7iamyyxYDjROpKAkCr6omhNoXp+Ha+e/5agIQirpQhHK/m
8wPkaRfG3/TUv3yHrX6ZKIagzHmbVJU9FRSijaMGYGGDPdRzRbnHHlRjILwSQH28
EwotS+Vx/D4ntScGcTe7nv9On5gCUQ+1SQWldYlaR9cDYqYhKVK9eArGqpMH6tzI
HFCYESjmXZRGdpeqM2WO4jDXXWtRmEySDBSDFPSr3y7NyaMWU81Hp4/vVxTKqlZp
vWEkFeQjLYc5JnpunfY2X16BtIApBfNc/cW/ZDs+qCpTNZD59NZapx8XUx9f7PjR
1tbhaxrt0qChVw==
-----END CERTIFICATE-----
Generated at Wed May 13 15:50:32 2026 by rpki-client