Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
File: ucxtc0SS5BBmCKJPoble-qh5xFo.mft (raw, json)
Hash identifier: MP6gwa7LvKXtImc66ImC0dYy5xzkZlg3xogHj6c6kLU=
Subject key identifier: C2:9E:B2:CA:06:9B:C6:16:CE:8B:15:43:DA:BD:7F:11:E7:F6:03:CE
Authority key identifier: B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
Certificate issuer: /CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Certificate serial: 019E205A9513BC6A10930A8093C51BD4752B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
Manifest number: 1907
Signing time: Wed 13 May 2026 08:01:07 +0000
Manifest this update: Wed 13 May 2026 08:01:07 +0000
Manifest next update: Thu 14 May 2026 08:01:07 +0000
Files and hashes: 1: ucxtc0SS5BBmCKJPoble-qh5xFo.crl (hash: oEhldz2AvONX+SoNDLFbNxR4L9zNmf89nSYjbWfNAKc=)
2: yfUyf4-g2EcMW9GZbYdXqTofXxA.roa (hash: BCrDbPU3WanC5O4AuPfiQjpjPPzZcvzn9YNORvio0rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:95:13:bc:6a:10:93:0a:80:93:c5:1b:d4:75:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Validity
Not Before: May 13 08:01:07 2026 GMT
Not After : May 14 08:01:07 2026 GMT
Subject: CN=c29eb2ca069bc616ce8b1543dabd7f11e7f603ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ca:c5:6d:02:fe:ff:44:b7:aa:bb:0d:8f:5a:
a4:21:d0:e2:a3:59:fc:66:c7:50:ef:b2:ac:95:69:
9d:11:b3:e4:18:ec:71:51:51:6b:1d:c5:cd:5a:82:
c4:c9:3a:20:cf:b7:2a:11:d1:8b:4f:1d:83:76:f7:
ca:4a:25:0c:3e:39:d4:10:23:f6:13:d1:cd:40:c0:
39:e8:b7:ba:7e:7a:e1:d0:43:a8:2e:ee:0c:c4:4b:
b7:d6:9d:1f:25:07:78:05:70:d6:4f:5d:4a:d0:4e:
f2:06:98:d9:82:e2:1a:58:8c:2c:d8:a8:9a:b8:ca:
0e:80:2e:1a:c2:be:f5:ab:53:27:4b:bc:f5:28:99:
97:9b:e8:35:30:85:65:47:31:4e:3a:35:d8:92:3c:
36:d5:82:55:ee:29:2a:b4:5e:08:04:9c:ae:c4:c1:
a2:06:43:70:ca:5e:7f:fe:1c:a9:db:89:27:70:01:
95:7a:da:16:cb:44:3e:7c:4d:5c:e9:5d:9b:8a:4d:
b8:48:c5:ca:59:f2:a7:88:87:8c:ed:e2:5a:bb:3c:
03:a6:03:e9:90:d2:b6:7b:8f:17:05:d0:7b:c5:49:
cf:5e:95:5f:bc:75:01:25:1b:14:43:dd:d0:27:95:
04:32:a8:ee:fe:dd:f6:1d:eb:25:b2:8e:39:28:29:
7e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9E:B2:CA:06:9B:C6:16:CE:8B:15:43:DA:BD:7F:11:E7:F6:03:CE
X509v3 Authority Key Identifier:
keyid:B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:dd:b9:be:c8:56:1d:a9:84:50:ef:6a:1a:f7:af:b6:29:d1:
75:28:9d:12:7c:61:c9:bf:25:ae:f0:d6:27:cb:54:c1:3e:0a:
11:21:d8:3a:44:17:3d:a0:b0:1c:c5:53:2e:e3:94:03:f1:a2:
97:ff:64:26:74:45:97:62:15:2f:aa:08:5e:fd:11:88:60:95:
db:14:5f:ca:c3:9d:21:b2:6c:3c:08:59:5c:2a:9d:3e:4d:26:
bb:9f:37:95:28:5d:15:ad:1d:0e:4e:e3:57:60:bb:56:69:af:
99:70:1d:ce:da:56:86:fe:1c:27:42:2b:a2:cf:ec:c5:48:99:
bd:ea:ac:2e:77:0d:4a:1c:97:9d:df:7c:3f:f8:ad:49:63:df:
bd:3b:c3:80:1d:bf:e7:e3:bf:bb:b1:13:21:9c:87:4e:04:84:
76:37:b9:de:3a:4c:fa:92:15:f9:41:8f:4b:f2:92:52:f0:db:
5e:15:cc:83:72:b4:12:86:85:f2:0e:96:8d:58:18:2e:55:29:
8e:4f:90:16:94:63:f9:42:f3:00:53:2a:1b:81:95:86:21:f3:
80:16:ef:aa:f8:c6:7b:76:5a:b9:35:16:14:6f:a9:c1:dc:7f:
64:2c:ac:0c:26:55:39:ac:0c:83:86:63:78:41:22:30:ce:15:
10:f3:e5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:06:40 2026 by rpki-client