Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
File: ucxtc0SS5BBmCKJPoble-qh5xFo.mft (raw, json)
Hash identifier: JBuaCnqJJs1lst3i4y14xY/P2bETjHAhse0euFZsHNU=
Subject key identifier: 84:3F:FE:F5:9C:07:7E:D1:6D:E3:9C:32:30:3F:2B:7D:9E:0B:A5:27
Authority key identifier: B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
Certificate issuer: /CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Certificate serial: 01A13FDDD1C606A52EEF39CD7BAD7DF6F58E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 14:01:04 +0000
Manifest this update: Thu 15 Oct 2026 14:01:04 +0000
Manifest next update: Fri 16 Oct 2026 14:01:04 +0000
Files and hashes: 1: ucxtc0SS5BBmCKJPoble-qh5xFo.crl (hash: mrWNZKYjUcnVUyMzfK+/zonoTRF6LqHLxhhGKvYQnCU=)
2: yfUyf4-g2EcMW9GZbYdXqTofXxA.roa (hash: BCrDbPU3WanC5O4AuPfiQjpjPPzZcvzn9YNORvio0rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:dd:d1:c6:06:a5:2e:ef:39:cd:7b:ad:7d:f6:f5:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Validity
Not Before: Oct 15 14:01:04 2026 GMT
Not After : Oct 16 14:01:04 2026 GMT
Subject: CN=843ffef59c077ed16de39c32303f2b7d9e0ba527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c9:5c:a1:1b:a3:0f:c8:40:19:bd:8f:9d:2b:
9a:a5:ad:2d:05:97:e9:0c:84:ee:ef:9a:19:22:f0:
cd:0f:77:9f:ab:5c:4d:ee:92:ec:f4:1a:cc:b1:5b:
c8:ed:f5:02:6a:14:ba:16:e1:db:b9:34:a6:53:0a:
66:ba:b6:44:c9:32:25:c8:8f:ab:15:7c:b2:94:36:
d9:c1:c7:34:da:43:df:e6:b4:f1:b7:bc:e6:04:c9:
4c:1b:45:20:21:13:84:84:ce:67:ec:18:2a:82:56:
ab:80:19:fa:d2:d4:ae:c9:39:85:f4:e9:70:cd:aa:
3f:45:9d:ab:e7:bd:b4:f3:19:6d:c7:5d:44:d3:a5:
9f:7d:c2:60:82:e3:de:1f:33:40:e2:7e:ed:af:17:
1b:2a:99:69:01:73:6c:ba:4f:99:ed:8f:b5:36:1d:
79:61:15:b9:88:0e:94:fc:42:3e:fa:40:ea:24:79:
cf:27:45:83:7c:0e:24:41:42:50:45:9a:f1:09:11:
61:a2:6c:18:45:52:f4:dc:34:e0:ac:ee:b1:32:a9:
0c:51:46:70:f6:0e:f5:90:14:1e:1b:e4:75:f1:a3:
6d:9b:34:d0:d8:d4:80:84:e8:d6:9f:eb:b9:cf:11:
c9:3e:1c:44:10:a0:14:65:2f:51:55:8c:66:b8:7a:
e3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3F:FE:F5:9C:07:7E:D1:6D:E3:9C:32:30:3F:2B:7D:9E:0B:A5:27
X509v3 Authority Key Identifier:
keyid:B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:23:cc:d5:f9:a7:b6:b0:8f:a3:19:ec:eb:b1:58:fb:8d:5c:
ed:89:c9:93:04:e9:54:02:61:8e:36:ff:dd:16:ee:15:7d:d4:
63:16:9f:9c:3a:93:20:bd:0c:9e:cb:8f:5b:61:65:23:a8:28:
22:2f:e7:e1:42:6e:95:39:f6:54:f7:9f:5f:7f:69:b1:44:56:
2e:23:3c:d0:2d:0f:ac:50:77:7a:76:4b:97:ea:6e:90:e4:9a:
e1:8a:8e:42:2b:0f:ad:08:d2:3f:84:cc:4f:1f:d5:c1:85:62:
bd:d0:a6:e0:f7:20:3b:e3:bb:1e:88:1a:34:58:0d:73:4a:aa:
5e:b0:47:5d:26:56:17:f8:99:fe:77:9e:0e:f2:6e:9f:f8:8f:
08:f3:52:33:39:6f:73:70:ea:b3:4e:63:c7:fb:33:4e:46:87:
e2:f9:98:8c:a7:01:12:96:73:9a:ad:85:c1:c0:67:ea:9d:0c:
c8:68:74:96:78:ce:fd:55:f2:5f:62:05:cd:ae:4f:ec:73:01:
2f:fe:a2:78:bc:ce:30:68:69:7b:30:a2:c4:0d:b6:ce:38:35:
4a:58:55:12:f6:8a:76:3f:20:bd:17:21:da:4f:58:d4:0b:3e:
fc:de:ee:28:cc:57:e3:39:62:34:d9:6a:26:88:05:7e:07:e8:
b4:ee:46:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:07:19 2026 by rpki-client