Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
File: ucxtc0SS5BBmCKJPoble-qh5xFo.mft (raw, json)
Hash identifier: HPiLVth8enZPaeFslQnLufi1CqM2L0piDYD8lyz/xoo=
Subject key identifier: 12:35:0C:8F:3D:EA:0C:1A:9B:5D:F0:85:02:78:A3:59:C6:D0:8E:A7
Authority key identifier: B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
Certificate issuer: /CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Certificate serial: 01A10F95FA10FC4B3D7A5A5C906F12610B1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
Manifest number: 1A8C
Signing time: Tue 06 Oct 2026 05:00:49 +0000
Manifest this update: Tue 06 Oct 2026 05:00:49 +0000
Manifest next update: Wed 07 Oct 2026 05:00:49 +0000
Files and hashes: 1: ucxtc0SS5BBmCKJPoble-qh5xFo.crl (hash: 3roXUOo/xCuQOXbgSRfFppWf5N7IJL5ZlcweobNCmp4=)
2: yfUyf4-g2EcMW9GZbYdXqTofXxA.roa (hash: BCrDbPU3WanC5O4AuPfiQjpjPPzZcvzn9YNORvio0rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:95:fa:10:fc:4b:3d:7a:5a:5c:90:6f:12:61:0b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Validity
Not Before: Oct 6 05:00:49 2026 GMT
Not After : Oct 7 05:00:49 2026 GMT
Subject: CN=12350c8f3dea0c1a9b5df0850278a359c6d08ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3e:4a:5f:68:25:d3:e8:06:09:d9:40:f4:f2:
9d:08:24:32:bc:74:01:8f:e1:6d:33:c9:d7:78:c1:
24:8e:4c:57:89:b5:f8:fe:e1:44:1c:b1:3e:a0:5d:
8c:ab:b4:df:4f:49:cf:94:3c:65:64:2c:38:f1:81:
b1:bb:04:1f:a4:4a:80:ef:05:c4:74:b7:68:46:45:
ff:79:ea:6d:de:d8:ce:5c:aa:79:24:29:1e:db:37:
ce:57:96:13:87:a7:15:a5:2f:2f:75:bf:b2:0f:0e:
b1:04:e0:e4:02:88:8a:36:31:a2:aa:37:cf:e8:77:
e4:46:d0:f9:09:25:a5:a8:1b:fa:75:f2:17:66:24:
e1:d0:e8:30:8a:e8:a5:62:d4:be:d1:84:a9:63:80:
c0:cd:37:5e:89:bd:76:8e:13:6b:ef:64:bf:af:ce:
37:ca:c3:b7:6d:ba:e8:81:d9:9e:bb:a4:db:33:3c:
d0:e1:0f:40:3f:18:fd:85:d7:0e:e8:e5:e4:5d:ad:
77:1d:48:e7:0a:42:28:09:46:49:3b:54:20:30:ab:
cf:1c:67:20:3b:f0:03:8c:a5:94:55:e3:8c:78:ce:
e0:66:93:b5:32:d2:c5:80:0c:87:60:02:92:7f:73:
b7:6c:cf:ab:4f:c7:7f:39:57:86:9d:b4:ad:ed:f8:
69:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:35:0C:8F:3D:EA:0C:1A:9B:5D:F0:85:02:78:A3:59:C6:D0:8E:A7
X509v3 Authority Key Identifier:
keyid:B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:2c:54:f8:0c:9e:cf:b0:7a:e9:55:d1:99:34:0d:70:01:5a:
06:8a:3d:64:e0:9c:de:79:66:11:df:30:1c:9a:55:42:5a:a3:
9d:4f:e5:ec:6c:05:ff:9c:f6:20:c8:b7:18:1d:0c:09:d1:63:
aa:4b:80:96:0e:ab:8a:df:2c:42:67:6c:a2:0c:33:b5:07:32:
2b:5e:1d:9b:2e:d6:96:2b:c7:21:26:eb:9b:e3:80:40:68:68:
bf:35:6b:e0:22:3d:88:16:38:f0:fd:2f:a0:6f:85:ea:65:48:
b5:fd:66:01:bb:be:2f:00:ea:da:c7:bf:1d:41:76:b4:77:e8:
32:05:c0:ef:a7:81:e7:46:71:e7:8f:93:c3:ee:26:64:71:b6:
be:c7:e2:18:d6:85:b9:d7:ee:40:43:ab:44:f9:4b:92:e2:40:
4b:0b:51:0f:1a:b0:fc:42:6b:26:ea:fc:28:01:35:9d:e4:a6:
96:2c:80:8b:87:d6:da:67:c5:35:de:9b:8f:4f:25:7d:8d:b1:
08:12:35:4b:20:bc:71:09:fc:bc:78:cc:aa:32:67:97:c4:1d:
62:9e:10:30:0c:c3:d5:1e:26:2a:45:67:ed:33:1b:de:ce:21:
31:59:18:bc:ce:0e:ef:87:9b:4f:84:80:e5:21:94:3a:0a:3b:
8c:16:c3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 10:53:06 2026 by rpki-client