Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
File: ucxtc0SS5BBmCKJPoble-qh5xFo.mft (raw, json)
Hash identifier: nBPNq6fM556VjtcPn0Iofqbm1FKfzbzlZXVRUvkcm30=
Subject key identifier: 75:8A:4A:20:C1:F9:43:BA:BF:CC:BF:6C:3D:71:D8:06:9A:EA:CC:C1
Authority key identifier: B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
Certificate issuer: /CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Certificate serial: 019D273B06F46F0CC8DD27E7FE078B9FC5D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 23:01:12 +0000
Manifest this update: Wed 25 Mar 2026 23:01:12 +0000
Manifest next update: Thu 26 Mar 2026 23:01:12 +0000
Files and hashes: 1: ucxtc0SS5BBmCKJPoble-qh5xFo.crl (hash: gmlT+w9k4O2R8ws0Cfz/qcUOX9xAT286voUjosXA0xE=)
2: yfUyf4-g2EcMW9GZbYdXqTofXxA.roa (hash: BCrDbPU3WanC5O4AuPfiQjpjPPzZcvzn9YNORvio0rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:06:f4:6f:0c:c8:dd:27:e7:fe:07:8b:9f:c5:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Validity
Not Before: Mar 25 23:01:12 2026 GMT
Not After : Mar 26 23:01:12 2026 GMT
Subject: CN=758a4a20c1f943babfccbf6c3d71d8069aeaccc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:50:d8:7c:a7:a8:89:40:d9:8b:20:77:a5:72:
34:36:cb:4f:56:d2:af:a0:8f:49:fc:02:cd:84:9b:
fa:68:a7:94:28:27:e1:4e:11:81:9d:03:5d:b8:ce:
91:c5:5a:65:29:78:9c:22:50:1d:f7:62:3b:14:22:
dc:8b:57:c4:1d:8e:9c:da:c5:67:8f:8e:29:e6:a6:
b9:0c:7e:1f:a4:f4:9d:bb:22:6b:63:74:b9:4e:f8:
5c:8e:71:55:e0:12:5d:a6:15:3a:78:b5:4f:8c:37:
18:21:36:75:20:62:9a:6d:e1:08:93:33:e9:87:03:
6b:2e:1c:8d:d5:1e:52:4c:1c:39:ab:08:cd:b0:a8:
bc:0c:91:b5:d4:00:cf:23:45:6a:7a:4f:bf:93:c7:
f2:81:f9:07:b9:f5:c3:0c:52:35:2f:ac:e6:d3:6e:
ae:c1:34:2b:98:78:82:93:78:1d:21:0d:c9:4a:77:
88:13:f0:29:e5:a2:e9:fc:aa:19:3b:c8:35:1b:50:
b4:55:74:9a:c6:43:e5:d9:30:15:09:94:88:e3:30:
ec:98:a4:fa:47:8b:0f:7d:68:a0:ac:26:81:20:50:
01:fd:69:1f:a4:03:73:b2:12:6c:31:cb:fd:97:22:
c7:3e:e5:08:2c:bc:21:31:a8:15:24:5c:b7:30:fa:
91:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:8A:4A:20:C1:F9:43:BA:BF:CC:BF:6C:3D:71:D8:06:9A:EA:CC:C1
X509v3 Authority Key Identifier:
keyid:B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c7:da:54:14:18:ec:61:e0:b2:9f:fb:2d:c1:fb:c9:fc:ba:
81:dd:f5:08:6b:c3:0c:3e:5b:8a:25:f1:a4:85:cd:01:08:1c:
08:c4:c5:0a:f2:be:0e:2a:a7:de:7f:69:27:e6:e2:4b:b3:ca:
13:7b:f1:06:2b:f0:cd:43:f1:23:31:36:24:86:3e:40:07:07:
85:3a:a0:84:83:06:73:9b:39:a7:b3:b2:37:98:59:fd:5e:ec:
30:93:5e:5d:9e:41:76:6c:98:af:98:93:85:7b:81:7a:78:10:
46:69:32:2d:13:d8:f3:3f:6e:d1:d1:1a:c7:a4:35:15:1e:1a:
a7:c0:23:4a:09:74:25:47:64:af:6f:43:d6:69:44:bf:00:69:
af:a0:85:e9:51:a1:3a:66:18:3d:2d:49:87:b2:4b:e7:cd:2a:
f4:70:0f:16:e5:99:b3:30:c0:b4:36:4e:f4:af:e3:f9:cc:71:
88:f6:6f:66:8a:35:80:d4:9f:24:e0:96:ff:65:51:07:5b:52:
61:ec:c6:e1:c2:a9:14:c7:c5:87:0b:74:ef:21:11:51:4e:b0:
0a:b5:ee:33:dd:a9:20:74:2c:de:41:81:13:ba:b3:3f:a4:17:
94:b0:d4:22:05:3b:79:f3:a1:cf:b3:87:77:50:03:2b:b9:a6:
2d:79:c1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:23 2026 by rpki-client