Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
File: ucxtc0SS5BBmCKJPoble-qh5xFo.mft (raw, json)
Hash identifier: ERjgs0PsTpNay9ZJj8dInTp/PWWHXZYNZ1xsMuIx4Xw=
Subject key identifier: F0:EC:80:18:95:30:6E:04:D5:C6:88:90:8D:CF:A7:29:23:94:73:04
Authority key identifier: B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
Certificate issuer: /CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Certificate serial: 019F93244FD1AB0BADD043CE8E654C07B964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 08:00:58 +0000
Manifest this update: Fri 24 Jul 2026 08:00:58 +0000
Manifest next update: Sat 25 Jul 2026 08:00:58 +0000
Files and hashes: 1: ucxtc0SS5BBmCKJPoble-qh5xFo.crl (hash: Oh8TqoDBmj18YEW4Am54LbrMdciKkgRPBH61H6f4MI8=)
2: yfUyf4-g2EcMW9GZbYdXqTofXxA.roa (hash: BCrDbPU3WanC5O4AuPfiQjpjPPzZcvzn9YNORvio0rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:4f:d1:ab:0b:ad:d0:43:ce:8e:65:4c:07:b9:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Validity
Not Before: Jul 24 08:00:58 2026 GMT
Not After : Jul 25 08:00:58 2026 GMT
Subject: CN=f0ec801895306e04d5c688908dcfa72923947304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b8:7d:24:2c:71:b4:7b:a4:c6:07:50:88:6f:
7b:ae:a3:32:a7:47:03:6f:1d:cb:d7:a4:50:42:39:
c4:d1:fa:68:72:71:06:f9:54:2e:3d:9c:87:c7:de:
9e:66:30:73:2a:b2:19:fb:e9:b1:ca:2d:ea:dc:b5:
4d:25:7b:aa:0e:fb:2e:39:52:04:d6:50:92:45:83:
fb:21:25:22:21:bc:dc:43:a0:de:73:d8:84:ff:36:
c5:75:1b:00:01:66:58:40:ba:fe:85:1b:9b:26:19:
3c:9f:11:7a:c0:5d:b9:57:54:34:51:99:17:82:90:
77:32:8f:4d:23:03:b3:3b:62:ca:07:6d:f1:7e:1b:
41:41:d1:41:93:58:2a:4c:16:49:ab:dd:59:32:06:
92:e2:9b:63:4f:ce:e1:13:5f:2f:b0:fc:14:00:69:
5c:be:63:d2:8d:15:0d:4b:c1:c2:09:2b:e3:f1:57:
79:dc:3e:5a:f1:8c:b5:89:a1:43:ab:4c:1a:ee:77:
9b:76:6e:a2:d7:f0:8b:72:21:d1:9c:03:8b:d2:ad:
69:3f:f9:7e:6b:fc:81:cb:09:83:63:47:a7:e4:7f:
53:95:e8:fc:35:17:90:4f:4a:72:db:91:6c:71:f4:
87:64:77:c6:2a:ed:3c:c3:6a:c9:78:16:f5:10:58:
e1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EC:80:18:95:30:6E:04:D5:C6:88:90:8D:CF:A7:29:23:94:73:04
X509v3 Authority Key Identifier:
keyid:B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:15:ea:3b:c2:3f:6a:1c:75:f7:4c:07:f2:c3:91:33:e4:59:
69:09:c7:44:a4:c1:24:9d:87:d9:32:14:b2:f0:71:07:0e:8c:
50:92:84:eb:69:4f:e9:ac:c2:05:56:e1:79:ff:bf:da:d9:4d:
4f:81:e1:29:c1:b2:73:ff:83:1e:5a:ba:a4:b6:f2:96:fd:16:
bf:93:5a:d2:64:9c:53:fd:30:2b:23:fd:17:cd:48:59:ba:1a:
d9:24:e2:41:1f:c0:9b:7c:74:65:df:de:24:e4:bb:78:44:a8:
a9:83:d5:19:4d:32:87:e1:4c:72:68:c8:f7:3d:cd:e0:38:08:
d2:58:9e:b7:d8:f9:a8:3a:6b:ab:be:35:69:64:cb:30:49:20:
ef:d2:12:fa:ac:45:54:dc:21:c7:5e:f8:5e:6b:a8:6b:47:b5:
89:32:6c:ff:66:1f:25:e9:93:78:dc:e4:fb:25:b3:69:c0:2b:
92:ec:5f:97:3e:bb:80:db:01:1f:ef:cc:bb:63:75:a9:98:f7:
a1:86:73:c5:65:63:a3:c9:e1:d6:9c:55:59:27:de:84:65:f4:
41:f8:d9:29:4d:f7:87:3a:dd:8e:00:79:dd:9d:04:ad:53:78:
fa:34:82:46:2a:2f:a7:c0:79:20:92:d7:98:5a:d7:20:54:7e:
d2:1a:98:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:20:13 2026 by rpki-client