Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
File: ucxtc0SS5BBmCKJPoble-qh5xFo.mft (raw, json)
Hash identifier: zHC9/xGJ2LTQa150CjVuMlKnb9Ob86d3xurkkYm0WlA=
Subject key identifier: 64:D2:82:BE:BD:8A:17:80:E9:83:72:24:A5:67:42:4C:3B:88:71:4D
Authority key identifier: B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
Certificate issuer: /CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Certificate serial: 019D389BBB720B712DE79F9A772715E8F952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 08:00:23 +0000
Manifest this update: Sun 29 Mar 2026 08:00:23 +0000
Manifest next update: Mon 30 Mar 2026 08:00:23 +0000
Files and hashes: 1: ucxtc0SS5BBmCKJPoble-qh5xFo.crl (hash: tI4Dt3qEU8Xm/id3UbXZiD6Uq1TczI+2AnagNcLV3NQ=)
2: yfUyf4-g2EcMW9GZbYdXqTofXxA.roa (hash: BCrDbPU3WanC5O4AuPfiQjpjPPzZcvzn9YNORvio0rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:bb:72:0b:71:2d:e7:9f:9a:77:27:15:e8:f9:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Validity
Not Before: Mar 29 08:00:23 2026 GMT
Not After : Mar 30 08:00:23 2026 GMT
Subject: CN=64d282bebd8a1780e9837224a567424c3b88714d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9f:90:af:6f:f1:0f:c8:97:f6:99:29:3e:7e:
4c:bb:67:a1:78:8c:e6:3e:76:17:be:c2:a5:2f:6c:
ad:83:4f:9f:d6:8c:74:e3:ed:5e:95:c2:90:cf:1c:
88:44:4a:eb:23:0a:c6:bd:7e:8e:33:36:57:fe:e9:
bb:5f:93:98:72:42:d7:d6:0d:91:50:fd:5c:d2:08:
96:90:98:20:46:59:84:49:3d:f5:cd:7a:7a:2f:32:
ea:05:11:7c:23:2c:32:16:73:ef:8a:3f:86:74:21:
c8:08:64:b7:ae:89:33:4e:59:e1:ab:d9:28:0f:d1:
aa:99:d8:73:85:f8:22:5d:52:54:1d:f8:c3:8e:b4:
e6:d9:b4:94:d9:fd:1a:99:72:24:20:21:18:95:88:
e6:2e:b8:5a:31:10:f0:fa:e8:30:e5:f4:8f:23:bb:
c0:9d:75:a5:a3:13:66:e0:e7:56:b7:9c:6b:ef:46:
72:ed:f7:51:f8:62:0f:e7:4a:bd:dd:f5:a7:84:86:
ef:6a:28:28:cf:74:ab:eb:54:95:da:d3:d9:e2:4e:
db:da:25:23:11:fb:80:3d:0c:a3:30:9a:5a:98:49:
8c:31:5f:f2:6d:bd:ca:ba:9b:d4:d3:11:79:07:79:
f3:6e:9f:b4:94:9f:7a:30:be:5a:52:f1:37:1c:c8:
f5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D2:82:BE:BD:8A:17:80:E9:83:72:24:A5:67:42:4C:3B:88:71:4D
X509v3 Authority Key Identifier:
keyid:B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:89:c7:9c:72:94:55:47:89:36:15:f7:95:fa:54:c2:15:f4:
bb:9f:19:92:e9:2a:8f:ee:ce:ef:9e:0a:ef:10:1f:2d:85:d3:
18:a7:19:8a:aa:d7:5a:dc:07:66:0c:2b:5a:0c:35:e2:a5:6e:
bf:7f:46:1a:0d:f3:c8:e1:64:b8:49:68:bc:2e:94:a7:30:f9:
d1:b4:f7:d7:d6:1c:ea:b4:04:0b:50:1d:4a:76:bd:9a:30:bb:
b9:c6:4e:df:4d:3c:c8:fb:cd:95:42:f7:23:16:9d:bb:3c:2c:
99:c3:ec:58:a8:27:a1:6f:87:c0:8a:b4:da:8d:6e:a3:79:3f:
4c:92:30:b4:c0:4d:1b:a1:70:9b:b7:45:6c:2f:4e:96:f8:88:
b8:ce:15:79:e2:5f:f1:bb:e3:d9:cd:bb:f3:25:af:e3:5c:30:
28:29:9d:f4:87:b7:47:26:3f:99:0a:cf:48:e3:1b:13:57:17:
42:b1:2e:1c:29:1b:3c:1f:59:22:6f:15:66:ab:45:43:f4:7f:
8f:0a:89:39:e8:5d:13:2c:a7:2a:39:80:18:7c:00:82:55:8c:
79:36:f5:21:06:69:83:9f:f6:aa:aa:42:26:1f:9b:e4:a8:f4:
b9:7d:3e:2c:82:bd:89:55:1c:3b:55:15:17:5a:47:0c:9e:95:
5a:53:71:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:52 2026 by rpki-client