Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
File: ucxtc0SS5BBmCKJPoble-qh5xFo.mft (raw, json)
Hash identifier: PrV6Fp56AmAqkJgf6k9EmeMrhlimd2eZ2XmaAJexFQk=
Subject key identifier: B4:02:81:69:BD:A6:BD:35:7E:C0:36:7C:12:F6:CB:63:30:56:59:F1
Authority key identifier: B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
Certificate issuer: /CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Certificate serial: 01A001385FFEA126CAA3995F7C3693B55AB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
Manifest number: 1A00
Signing time: Fri 14 Aug 2026 17:01:06 +0000
Manifest this update: Fri 14 Aug 2026 17:01:06 +0000
Manifest next update: Sat 15 Aug 2026 17:01:06 +0000
Files and hashes: 1: ucxtc0SS5BBmCKJPoble-qh5xFo.crl (hash: FUuxkKn/zvY0kQ0eP5TK6F+WE9TV9uw1ux75UsTTZsc=)
2: yfUyf4-g2EcMW9GZbYdXqTofXxA.roa (hash: BCrDbPU3WanC5O4AuPfiQjpjPPzZcvzn9YNORvio0rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 17:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:5f:fe:a1:26:ca:a3:99:5f:7c:36:93:b5:5a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Validity
Not Before: Aug 14 17:01:06 2026 GMT
Not After : Aug 15 17:01:06 2026 GMT
Subject: CN=b4028169bda6bd357ec0367c12f6cb63305659f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2a:b5:2d:da:59:03:eb:32:26:a6:89:a0:1d:
53:e8:31:a2:07:2e:e7:3e:d9:23:9c:9e:90:de:7f:
0c:31:28:29:8d:00:6b:04:b5:6b:5b:1d:cf:32:14:
b5:90:13:9b:d9:d1:17:01:2b:f0:f2:77:f9:2f:eb:
3d:4d:b2:6b:80:f6:2d:86:ee:b1:ec:a8:3c:7f:39:
08:0d:d7:9a:72:f5:3b:9a:82:51:b4:d9:e7:49:2f:
c4:05:a9:7b:1d:1c:23:c7:a1:73:5e:55:89:9a:da:
8f:45:a4:6f:61:dd:94:09:70:dc:1b:26:4f:49:62:
18:48:eb:35:62:82:81:fc:81:f6:33:4b:dd:79:84:
6f:65:d1:6a:43:ca:b5:17:9e:8e:79:8c:21:4c:a0:
45:c6:10:be:cf:1d:29:fc:1b:36:64:2c:48:e7:05:
79:ec:72:a5:1c:79:73:29:21:65:b8:1d:e5:e1:b3:
ce:01:a8:04:ce:e5:f7:87:b7:e6:52:d0:80:64:4e:
e0:a2:b5:0c:aa:02:0a:64:6e:8d:c9:ef:df:10:d2:
a5:d4:d1:0a:4e:50:a1:93:9e:3c:05:49:e1:1d:c8:
ef:e9:99:2f:ba:1d:86:99:23:6b:ff:a9:6e:12:b9:
b7:59:80:54:ed:09:8c:a1:40:b3:33:5f:fb:04:d0:
37:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:02:81:69:BD:A6:BD:35:7E:C0:36:7C:12:F6:CB:63:30:56:59:F1
X509v3 Authority Key Identifier:
keyid:B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:8a:88:73:64:ed:4a:89:82:33:93:db:82:23:68:af:7f:c0:
a1:ae:12:2e:fe:3d:d3:db:85:12:a1:e7:d1:f3:1f:76:b1:2e:
e5:0c:8f:3d:69:bd:a6:38:54:66:b6:e0:62:a3:84:87:80:38:
12:d6:15:e4:78:95:40:c8:60:31:c8:c7:cc:c5:70:cb:79:36:
9e:8a:63:5d:e4:7e:70:60:94:78:5f:ad:7c:76:6a:f1:40:fa:
51:17:58:71:fa:ca:35:b3:0a:3f:b4:9f:19:28:c0:a7:7b:83:
93:44:bc:d9:fe:ee:ff:22:7d:d0:ba:3e:c6:7a:49:ac:e2:17:
c2:2d:0a:95:2b:fc:13:2e:1d:58:0c:3e:67:44:8d:a4:6b:4e:
ef:15:71:12:69:02:3d:fc:b0:5b:98:90:c7:44:6c:91:41:d2:
59:90:b2:0f:b9:51:59:71:39:ca:bd:54:ae:8f:86:e5:19:6c:
c9:27:f4:32:ca:9b:60:58:bb:43:28:66:24:51:b1:ed:16:97:
31:c5:e8:4b:77:6c:8f:f7:2d:96:2f:6d:3d:f4:d9:98:87:a3:
5d:c1:7c:74:b7:b1:9a:2a:c6:c7:57:c7:37:1f:3c:79:7f:6e:
74:73:b1:0d:a1:4f:96:27:b0:e4:4a:b4:c0:f4:0f:e6:86:c7:
60:df:9e:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABOF/+oSbKo5lffDaTtVqzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5Y2M2ZDczNDQ5MmU0MTA2NjA4YTI0ZmExYjk1ZWZhYTg3
OWM0NWEwHhcNMjYwODE0MTcwMTA2WhcNMjYwODE1MTcwMTA2WjAzMTEwLwYDVQQD
EyhiNDAyODE2OWJkYTZiZDM1N2VjMDM2N2MxMmY2Y2I2MzMwNTY1OWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSq1LdpZA+syJqaJoB1T6DGiBy7n
PtkjnJ6Q3n8MMSgpjQBrBLVrWx3PMhS1kBOb2dEXASvw8nf5L+s9TbJrgPYthu6x
7Kg8fzkIDdeacvU7moJRtNnnSS/EBal7HRwjx6FzXlWJmtqPRaRvYd2UCXDcGyZP
SWIYSOs1YoKB/IH2M0vdeYRvZdFqQ8q1F56OeYwhTKBFxhC+zx0p/Bs2ZCxI5wV5
7HKlHHlzKSFluB3l4bPOAagEzuX3h7fmUtCAZE7gorUMqgIKZG6Nye/fENKl1NEK
TlChk548BUnhHcjv6Zkvuh2GmSNr/6luErm3WYBU7QmMoUCzM1/7BNA3aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQCgWm9pr01fsA2fBL2y2MwVlnxMB8GA1UdIwQY
MBaAFLnMbXNEkuQQZgiiT6G5XvqoecRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWN4dGMwU1M1QkJtQ0tKUG9ibGUtcWg1eEZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mMTA5MjItOTk1NC00NTNmLWIxYzYt
ODIwZDVmYzQ0ZTM1LzEvdWN4dGMwU1M1QkJtQ0tKUG9ibGUtcWg1eEZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9mMTA5MjItOTk1NC00NTNmLWIxYzYtODIwZDVmYzQ0ZTM1
LzEvdWN4dGMwU1M1QkJtQ0tKUG9ibGUtcWg1eEZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQYqIc2Tt
SomCM5PbgiNor3/Aoa4SLv4909uFEqHn0fMfdrEu5QyPPWm9pjhUZrbgYqOEh4A4
EtYV5HiVQMhgMcjHzMVwy3k2nopjXeR+cGCUeF+tfHZq8UD6URdYcfrKNbMKP7Sf
GSjAp3uDk0S82f7u/yJ90Lo+xnpJrOIXwi0KlSv8Ey4dWAw+Z0SNpGtO7xVxEmkC
PfywW5iQx0RskUHSWZCyD7lRWXE5yr1Uro+G5RlsySf0MsqbYFi7QyhmJFGx7RaX
McXoS3dsj/ctli9tPfTZmIejXcF8dLexmirGx1fHNx88eX9udHOxDaFPliew5Eq0
wPQP5obHYN+eVA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 02:28:20 2026 by rpki-client