Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
File: ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft (raw, json)
Hash identifier: xCFi8hE93N4ejre49L0SJXFcfANoaKCUmfQzpRh6m9o=
Subject key identifier: 3B:0B:03:43:69:0B:2C:3C:D6:04:F5:84:04:0C:E1:40:D3:72:58:3A
Authority key identifier: B9:C8:9C:FA:DD:51:F4:D9:21:BB:3D:0C:55:F9:31:36:63:A7:1C:C4
Certificate issuer: /CN=b9c89cfadd51f4d921bb3d0c55f9313663a71cc4
Certificate serial: 019D389C21E92DA6C482640BB138E53DEC90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 08:00:49 +0000
Manifest this update: Sun 29 Mar 2026 08:00:49 +0000
Manifest next update: Mon 30 Mar 2026 08:00:49 +0000
Files and hashes: 1: Y45Z-69JdV08zvRND3s3CCHByos.roa (hash: LSfljHvNNJLgnIY73ywa8BmCbjs0D1+ME8EqFOPNt90=)
2: ucic-t1R9Nkhuz0MVfkxNmOnHMQ.crl (hash: 6Xq1HBpzfmZ5PzVIFgIZclJK7r32huxbCs7j5JqnVNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:21:e9:2d:a6:c4:82:64:0b:b1:38:e5:3d:ec:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c89cfadd51f4d921bb3d0c55f9313663a71cc4
Validity
Not Before: Mar 29 08:00:49 2026 GMT
Not After : Mar 30 08:00:49 2026 GMT
Subject: CN=3b0b0343690b2c3cd604f584040ce140d372583a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3e:df:ff:ff:d9:a2:63:e6:77:5f:07:52:5a:
83:86:5e:1a:11:16:5c:a1:2b:a0:8d:f0:fc:b4:f8:
dd:36:b7:c5:ef:73:74:a0:5f:72:7d:46:8e:4a:13:
99:a2:ad:e1:ff:57:b8:26:2d:fc:9f:59:c4:3c:d4:
9c:9e:4a:b5:42:fb:d4:cc:b8:0a:35:e3:65:c9:72:
d7:24:7a:19:59:cc:d5:1d:aa:6b:e6:45:1c:f2:f6:
49:c6:f5:f5:17:85:b1:05:2e:74:26:b7:3f:17:db:
dd:05:80:82:ae:71:1f:8d:de:fb:70:40:bc:b8:f4:
e6:80:73:ec:e6:f3:ca:5b:1b:d2:ab:91:5d:85:e4:
1a:18:fc:35:a4:94:05:57:33:45:69:01:75:3e:1c:
56:5a:d1:3a:58:fc:89:31:45:50:4a:e9:5d:6b:d8:
fc:86:c9:98:13:58:a9:99:d3:0d:a9:55:03:ad:3b:
d2:57:62:40:05:59:9a:f9:e5:0e:06:a3:59:74:4c:
e0:41:57:a7:38:29:85:fb:a6:1d:cd:fa:2a:a8:b3:
f6:68:2b:5c:eb:3c:98:12:55:38:7b:4e:00:4b:1d:
53:5b:37:38:76:16:9e:55:ca:f1:e5:f7:00:4b:49:
94:ad:eb:d7:da:e9:ce:6a:b9:3d:1c:30:05:e7:28:
ec:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0B:03:43:69:0B:2C:3C:D6:04:F5:84:04:0C:E1:40:D3:72:58:3A
X509v3 Authority Key Identifier:
keyid:B9:C8:9C:FA:DD:51:F4:D9:21:BB:3D:0C:55:F9:31:36:63:A7:1C:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:2d:f3:ab:48:2c:55:87:64:05:c5:ce:ab:fe:ad:00:5f:fc:
8b:30:6e:55:75:37:7c:55:36:67:5d:dd:b6:a3:78:15:bb:29:
6d:fd:17:44:58:44:19:89:d7:fa:bb:41:1e:52:44:e9:dd:de:
5e:73:1d:9f:bb:91:da:5e:5f:f4:e3:bf:82:02:0e:ed:09:45:
93:7b:b6:ee:eb:4a:8b:34:bd:f1:68:8d:be:b3:30:52:f1:b9:
21:e8:e3:02:45:cf:05:c5:fb:75:66:d3:74:26:fc:c8:26:04:
e2:8f:c8:b2:2b:42:40:fb:bb:35:99:f0:81:27:00:3b:f8:74:
d4:ce:c0:95:fa:5b:ae:b4:f4:12:0c:9b:f8:72:8d:59:95:2e:
62:45:60:c7:cf:40:06:8d:fb:eb:cc:f3:d9:bb:65:b3:6f:6c:
6a:3d:25:30:60:40:93:49:1f:67:a3:e7:22:63:83:a7:3f:d3:
d0:80:89:f0:60:8d:8c:f7:2e:7c:a7:98:31:d8:b7:60:84:72:
4a:a9:ac:75:69:d5:5f:d2:f4:aa:0f:12:b2:2b:64:4d:83:b8:
69:1d:b6:27:c0:6e:08:c2:c7:6f:1e:ed:c9:6d:8a:26:15:71:
f8:40:9d:dc:bc:e7:b3:b0:5e:19:12:a0:83:94:da:a8:71:51:
96:12:4f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:02 2026 by rpki-client