Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
File: ukxoXvpqLBBFY38CejJcCux5wBU.mft (raw, json)
Hash identifier: aXwZsoMFT7IVFDUNEwLrFidKO5o5VFfmg2N+lH5ynE0=
Subject key identifier: DE:2E:74:40:24:73:77:B0:1B:B6:EF:70:9B:30:48:26:C6:43:10:45
Authority key identifier: BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
Certificate issuer: /CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Certificate serial: 019D28F2899CFC97CCE351191830249D4A19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
Manifest number: 0C4E
Signing time: Thu 26 Mar 2026 07:01:16 +0000
Manifest this update: Thu 26 Mar 2026 07:01:16 +0000
Manifest next update: Fri 27 Mar 2026 07:01:16 +0000
Files and hashes: 1: KApK1eZ3dReQSsXRIwoW7xEMCfc.roa (hash: I01yvmR81aVECy/LZF2a4cMND5HAKMaYQMS7oZOPJ6c=)
2: sMxn8ZHV7zGVUdfXdG1zEbgYw2k.roa (hash: ubV13xd7F+TAQ+CmwFI8p32k3paHxp1b+b+S6Z39W1M=)
3: ukxoXvpqLBBFY38CejJcCux5wBU.crl (hash: /gVPIMyt1RpDXuIQGvSHzLDcBVDss4igpjdAaxqnJzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:89:9c:fc:97:cc:e3:51:19:18:30:24:9d:4a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Validity
Not Before: Mar 26 07:01:16 2026 GMT
Not After : Mar 27 07:01:16 2026 GMT
Subject: CN=de2e7440247377b01bb6ef709b304826c6431045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8c:c6:8d:17:39:40:0c:89:2d:ff:14:02:cb:
7f:0f:89:c8:89:b3:75:84:db:c5:93:f6:ab:24:91:
61:88:87:d0:8a:24:f5:7b:fc:99:b3:15:78:cf:99:
59:ce:e7:2c:ef:85:55:61:63:06:6c:6a:d3:5d:c8:
86:22:3d:b1:ac:ed:27:80:27:3d:11:79:ba:b9:b1:
cb:32:66:60:f8:48:a7:23:e7:5f:f1:d6:c1:d5:0d:
a5:a4:f9:a8:2e:10:b4:02:e4:c7:38:01:cb:22:86:
3a:b4:81:e4:24:87:20:44:4e:88:5a:05:f1:bb:23:
7a:9a:49:ea:a6:f8:79:ae:e1:cf:4b:97:c4:58:85:
df:5d:3e:88:5b:6e:2a:c9:c1:cd:32:ad:ee:9e:b6:
07:a6:32:8b:79:e2:51:64:34:76:a9:1c:0e:e9:5c:
e4:38:05:e4:59:10:ca:0e:dd:be:d4:84:6e:90:fc:
07:64:24:f7:a6:98:2d:6a:4a:4f:3a:84:10:cd:1d:
21:3d:d5:d6:01:c6:b2:e8:15:be:d0:47:48:0a:a8:
cc:df:95:07:27:f9:ca:b4:10:ed:0f:0c:35:c9:92:
bb:e9:d8:1e:00:0d:b4:ee:b8:86:bf:3f:e9:17:7f:
d6:7d:db:a1:5f:9c:6a:81:61:ff:6b:a1:ee:26:67:
84:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:2E:74:40:24:73:77:B0:1B:B6:EF:70:9B:30:48:26:C6:43:10:45
X509v3 Authority Key Identifier:
keyid:BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:5d:7d:ac:96:cd:0e:7b:48:a2:4f:ff:37:b1:e5:e3:52:2b:
31:13:47:16:bf:54:0c:36:25:07:48:0a:54:86:5f:71:f6:7c:
6d:54:89:da:4f:17:47:eb:b6:a8:4f:ba:53:d4:7a:fc:d5:a2:
bb:2b:c7:6e:ec:63:e2:2a:0d:d7:e7:54:e8:f7:88:40:20:6b:
13:3c:51:d5:dd:6e:97:a8:66:a9:51:da:95:6d:9f:92:04:44:
f4:70:c8:65:55:96:93:38:c4:a8:0d:df:bf:4b:6e:f2:ec:f0:
5f:79:86:c4:c9:7c:1c:3a:c9:fe:d5:b8:e4:19:e5:5e:81:b3:
ca:12:3c:9e:cf:26:21:00:21:fc:98:9e:8b:d4:af:fd:27:cf:
bd:6d:4f:15:d9:93:fa:43:ca:de:31:ca:1b:98:e9:cf:ca:34:
85:9e:df:27:f1:c8:a3:e9:0a:a1:a9:f4:b7:75:98:50:35:66:
81:08:1e:fd:bb:69:2e:f9:a8:f9:34:b3:9b:1c:a5:ff:8a:5f:
a3:5d:02:8a:cd:e2:64:52:d1:8d:c2:5c:65:ba:69:d8:e6:9e:
b3:ee:fa:de:65:a8:d9:95:ff:c9:db:12:fb:ee:35:0e:52:1a:
a9:0e:ac:9c:32:c7:ee:29:b6:aa:16:c9:bc:ac:99:08:ca:4a:
3e:fd:9d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:09:05 2026 by rpki-client