Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
File: ukxoXvpqLBBFY38CejJcCux5wBU.mft (raw, json)
Hash identifier: YeoWsMdlQv2/xaS/1cKawBOHR6MjeKxTqQyDg61rP1E=
Subject key identifier: 45:31:19:D5:E2:91:D3:EA:7B:FB:84:42:72:38:B2:24:AE:44:61:6B
Authority key identifier: BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
Certificate issuer: /CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Certificate serial: 01A105B7A9B903DB92AAFABDFA39E1585E0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
Manifest number: 0E4E
Signing time: Sun 04 Oct 2026 07:01:24 +0000
Manifest this update: Sun 04 Oct 2026 07:01:24 +0000
Manifest next update: Mon 05 Oct 2026 07:01:24 +0000
Files and hashes: 1: KApK1eZ3dReQSsXRIwoW7xEMCfc.roa (hash: I01yvmR81aVECy/LZF2a4cMND5HAKMaYQMS7oZOPJ6c=)
2: sMxn8ZHV7zGVUdfXdG1zEbgYw2k.roa (hash: ubV13xd7F+TAQ+CmwFI8p32k3paHxp1b+b+S6Z39W1M=)
3: ukxoXvpqLBBFY38CejJcCux5wBU.crl (hash: 784b6GbECldY7lkoFL+DEHC3aVaYQUiwLT8+RwdVC+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:b7:a9:b9:03:db:92:aa:fa:bd:fa:39:e1:58:5e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Validity
Not Before: Oct 4 07:01:24 2026 GMT
Not After : Oct 5 07:01:24 2026 GMT
Subject: CN=453119d5e291d3ea7bfb84427238b224ae44616b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:91:95:ff:50:30:71:77:5e:6d:cc:18:db:6a:
21:31:74:0f:1a:0b:bb:cc:42:31:b7:a4:d9:fe:71:
56:c5:eb:ce:c4:1b:71:93:c7:78:4f:c4:0c:ae:52:
9a:cf:3b:84:46:5a:d8:2b:c6:6f:90:37:0b:c1:aa:
4d:3f:62:32:43:d4:47:c6:e1:09:b0:bd:df:ce:3c:
e5:24:ac:b3:cf:1d:21:6c:d1:80:c5:12:9d:ef:34:
dc:1d:2a:75:bf:37:21:83:32:65:2d:66:dd:dd:74:
3f:02:96:e0:17:2c:70:33:b7:bb:b9:17:05:d5:c0:
d7:7c:16:c8:c1:50:3c:87:29:57:a2:a9:c8:94:f9:
8b:c1:f0:c9:0c:54:d2:88:0b:e2:3b:a6:cf:71:1e:
38:0f:3c:2f:97:9d:2e:f2:08:34:48:15:42:03:1a:
26:9d:fc:d9:fa:f3:45:4e:d4:03:3f:f4:b7:fb:1f:
97:9d:63:0d:b8:d6:d2:57:22:ef:c0:04:8d:fd:55:
12:e0:d7:b2:b1:7e:08:63:8c:12:a8:4d:24:05:d5:
7d:85:64:c3:be:a8:59:08:d9:ef:df:3f:b6:2a:21:
f9:39:9d:d3:bc:43:14:c2:21:de:b0:51:4b:0d:ba:
97:a7:25:fe:9b:fb:71:d8:bf:e6:01:da:61:80:36:
e4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:31:19:D5:E2:91:D3:EA:7B:FB:84:42:72:38:B2:24:AE:44:61:6B
X509v3 Authority Key Identifier:
keyid:BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:bf:bf:60:30:fe:06:1a:e7:6a:36:41:14:7b:af:50:33:6b:
01:2f:40:b2:83:70:f2:f2:c8:9f:0d:e9:99:f5:b1:e1:fb:bf:
50:25:1b:9c:61:33:8d:49:69:21:39:30:82:fb:94:58:b5:07:
d7:02:5a:0a:b2:92:c9:1f:37:fe:7b:a9:ee:6c:dc:00:d6:1f:
8a:07:1c:26:48:16:dd:1c:3e:e7:43:92:0d:3f:de:8d:a7:f3:
2a:3d:2e:1d:15:50:37:5c:a7:d8:44:4c:a7:a4:77:6e:01:ee:
e6:3a:52:55:bf:8c:1d:6a:06:45:34:5d:c4:ae:a2:a4:7c:a4:
4c:d1:b4:09:02:1f:a5:d7:41:f6:6c:e5:fb:5b:f9:d9:6f:14:
5c:3b:b4:2e:0e:da:43:26:38:95:45:2a:f6:1b:a1:6b:0e:3b:
ba:6c:ce:b6:47:de:9e:47:34:d4:2c:b4:31:22:57:37:19:f7:
45:f9:d9:e6:a2:f8:40:d7:b6:76:83:3b:55:65:74:8a:a5:e6:
45:e4:87:0d:67:fa:30:b9:3e:3f:3f:54:ce:23:01:0e:1c:4e:
65:cb:6a:01:26:ff:e9:10:9f:aa:6f:e6:5b:fd:e6:e8:cf:69:
11:f3:2c:c7:b7:59:a2:29:31:4b:57:e4:b5:04:bf:b4:03:56:
40:e6:f6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:23:16 2026 by rpki-client