Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
File: ucxtc0SS5BBmCKJPoble-qh5xFo.mft (raw, json)
Hash identifier: Jn1Wqzkhodg09Uvb6Wd84tvsMV5N+7G4TJRwndB4Db4=
Subject key identifier: DD:3C:95:BF:23:A7:72:71:01:35:1A:93:21:85:9D:49:7F:37:F6:00
Authority key identifier: B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
Certificate issuer: /CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Certificate serial: 019F1979FD3E5C38E347FF889E4E5CF6AECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 17:00:52 +0000
Manifest this update: Tue 30 Jun 2026 17:00:52 +0000
Manifest next update: Wed 01 Jul 2026 17:00:52 +0000
Files and hashes: 1: ucxtc0SS5BBmCKJPoble-qh5xFo.crl (hash: KMfS6tmUrVCt8ISsI3wOEoOeeXDqFyFteePo5Fo3adE=)
2: yfUyf4-g2EcMW9GZbYdXqTofXxA.roa (hash: BCrDbPU3WanC5O4AuPfiQjpjPPzZcvzn9YNORvio0rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:79:fd:3e:5c:38:e3:47:ff:88:9e:4e:5c:f6:ae:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Validity
Not Before: Jun 30 17:00:52 2026 GMT
Not After : Jul 1 17:00:52 2026 GMT
Subject: CN=dd3c95bf23a7727101351a9321859d497f37f600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a9:13:59:01:a3:38:68:c9:ba:2f:c6:a0:a8:
26:05:fc:72:28:01:53:ed:d3:ac:df:9f:ec:c5:98:
84:35:5c:ff:7a:be:8f:56:33:51:9f:5c:bb:0c:b2:
cf:e6:5d:c8:21:d7:50:09:4b:00:19:b2:da:11:a5:
0c:07:97:98:4d:d1:f3:9d:c6:3e:e8:e6:98:bb:73:
b6:7d:96:50:2c:04:3e:66:7f:f2:e9:45:e6:99:3a:
cd:90:9a:ef:66:9b:01:52:fd:6a:21:ef:40:df:a2:
3c:f1:0c:0c:a1:b4:82:03:07:66:e4:4d:0b:55:12:
d0:3b:c8:31:37:3b:9a:24:67:ff:6b:1b:0a:0c:e5:
c3:95:6a:7c:51:dc:28:34:36:db:85:5d:1f:8f:9f:
68:9e:d5:52:42:74:f8:3d:e0:bb:e7:37:d5:81:96:
4f:e1:e7:d5:d5:e2:51:f7:67:af:88:1d:2b:b2:5c:
c7:e3:c3:4e:70:06:d3:07:a2:c2:9a:98:0d:4c:3b:
c1:98:5b:a0:1e:2a:7e:3f:f3:b9:7b:b2:be:f7:8a:
bd:cc:b8:d3:61:a3:55:e5:79:54:3a:4c:a3:ca:46:
7c:07:f9:cc:08:4e:53:68:76:8c:62:bb:f5:57:d6:
ea:c7:23:fe:b3:21:9a:8c:4a:49:a8:cd:18:e6:57:
1f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3C:95:BF:23:A7:72:71:01:35:1A:93:21:85:9D:49:7F:37:F6:00
X509v3 Authority Key Identifier:
keyid:B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:91:e2:c3:de:e9:6c:90:1d:15:ae:ac:20:05:4d:e8:aa:c6:
82:57:c2:96:48:ca:91:81:4f:b9:45:1a:4c:9d:62:81:52:fe:
a7:5b:57:15:2e:3b:5e:8e:b7:bc:1a:97:1f:aa:82:95:0d:1c:
4e:46:06:37:93:2c:4c:8a:e5:4a:5c:c9:52:a9:56:fd:17:af:
9c:ca:50:9f:e7:e8:86:79:0c:36:2b:5d:1a:66:fa:e6:6a:de:
c7:88:55:de:4c:ac:6f:ac:a0:b4:27:ee:5a:e3:c9:97:fa:e2:
eb:48:9c:b3:63:ac:1d:5b:3d:7b:0e:2d:7e:0f:f6:e3:18:ec:
fd:f4:50:7e:fa:73:3d:59:dc:a6:0e:f1:c3:af:5e:a4:0b:b9:
8c:cb:44:1f:7a:14:e7:ee:9c:d4:a6:01:71:49:49:9f:94:7c:
b6:55:96:d6:ed:51:bf:b5:5e:60:db:de:ae:28:88:e3:e6:1f:
a2:eb:f8:e8:b0:e2:73:ee:db:f6:df:b2:e3:3b:06:72:b5:2e:
63:cc:b2:9f:13:cf:fc:63:1e:44:73:55:a2:17:87:05:e5:03:
75:32:d5:fa:81:0e:28:86:c1:e1:36:7c:94:2e:94:b3:76:95:
0b:96:fb:2f:e3:4c:3b:f7:39:68:1e:15:f9:d4:a4:f1:4a:bf:
48:36:19:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:36:38 2026 by rpki-client