Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
File: ucxtc0SS5BBmCKJPoble-qh5xFo.mft (raw, json)
Hash identifier: Xbs+TRC2EflEMU+4SeYf8PRpfWUgQ1AZxhkagKy4zVA=
Subject key identifier: 66:51:30:33:E9:BE:8C:63:86:63:52:39:E0:24:ED:5D:64:6B:56:01
Authority key identifier: B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
Certificate issuer: /CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Certificate serial: 019D992B876A6FC0AF7761FF3098975410E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 02:00:59 +0000
Manifest this update: Fri 17 Apr 2026 02:00:59 +0000
Manifest next update: Sat 18 Apr 2026 02:00:59 +0000
Files and hashes: 1: ucxtc0SS5BBmCKJPoble-qh5xFo.crl (hash: FdVAyTQ03I86+9cEIr8uT5dcZCWjs4KghX5jgJsCTN4=)
2: yfUyf4-g2EcMW9GZbYdXqTofXxA.roa (hash: BCrDbPU3WanC5O4AuPfiQjpjPPzZcvzn9YNORvio0rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:87:6a:6f:c0:af:77:61:ff:30:98:97:54:10:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Validity
Not Before: Apr 17 02:00:59 2026 GMT
Not After : Apr 18 02:00:59 2026 GMT
Subject: CN=66513033e9be8c6386635239e024ed5d646b5601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a9:70:99:f9:38:7b:0f:f1:26:78:6e:fc:0d:
80:fb:eb:d6:c3:78:0f:b2:0b:e8:25:1f:04:50:82:
f2:14:76:61:2c:c3:80:33:be:3e:3d:ac:a0:02:17:
a9:47:5d:d7:e0:d0:4c:fe:14:6a:b4:87:09:e3:20:
79:87:92:f6:44:33:83:7b:8e:3c:b1:76:34:92:2f:
ec:df:81:a7:82:a9:9e:6d:2e:1a:42:4f:64:12:03:
51:70:16:e7:d9:1a:bb:1c:67:7f:c1:13:55:83:a7:
d2:6f:2b:0c:76:10:36:1b:56:2f:5f:52:0c:07:90:
ac:e5:4e:14:ae:02:ce:96:a1:86:00:a8:4e:4a:e6:
a5:9e:d6:6d:39:93:47:25:8f:2c:3d:95:f1:1d:ce:
fa:50:b1:44:88:b4:39:61:60:a6:94:29:23:b9:71:
c7:4d:e7:e6:4b:9e:29:ab:c5:68:33:86:73:c9:64:
cc:a8:58:a1:9a:70:bc:d6:fe:65:ac:1d:05:26:9e:
3e:2d:2a:9e:11:3d:13:04:bb:68:09:79:a2:d9:95:
f3:56:8f:33:eb:c0:b5:7f:f1:40:e4:b4:82:04:91:
f6:48:8b:e9:c5:d4:34:55:0c:bb:96:b8:47:ab:18:
6c:fd:98:61:5f:26:d1:cd:93:54:87:48:5f:87:fe:
9b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:51:30:33:E9:BE:8C:63:86:63:52:39:E0:24:ED:5D:64:6B:56:01
X509v3 Authority Key Identifier:
keyid:B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:97:9a:a0:01:42:5b:92:17:11:c0:a8:4b:ea:75:a6:c1:b4:
68:ce:70:73:a5:02:40:47:5f:3c:0c:08:ad:56:e9:9c:cd:91:
76:3d:c5:71:fb:e9:6a:ad:11:3e:65:13:31:42:36:ac:e2:16:
95:0b:2c:e1:14:ea:a8:c3:32:6c:98:6a:af:fe:42:4a:92:9a:
4c:8b:e1:34:42:d8:12:33:06:9a:27:f4:60:53:7a:12:9d:18:
20:12:c9:bc:d8:3d:9e:1a:6b:a7:73:a7:a4:08:ae:1e:3a:49:
86:8e:fe:93:65:c1:fc:80:90:20:cf:e5:5d:3b:96:4c:c9:85:
f5:e8:2e:d9:72:91:0e:65:42:41:a8:b6:0c:be:32:a8:4e:1d:
6e:a8:fe:2f:71:ef:8f:3a:6b:8f:b8:69:97:aa:88:bc:61:3f:
ca:52:3f:aa:6c:7f:b6:c1:cc:a7:92:8a:d1:cd:6d:01:27:73:
69:7c:a5:35:85:b8:58:50:07:51:51:16:79:c7:dd:cf:0c:a8:
8c:99:68:79:65:1e:6b:98:4b:b8:d2:02:04:3f:24:59:58:1e:
c6:d1:43:98:eb:bf:d3:0c:1a:4f:2e:b6:51:dd:dd:62:3e:c7:
55:66:a8:6d:ff:fe:38:0f:ae:87:57:92:31:5c:08:c5:46:b3:
9f:1c:2a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:44:12 2026 by rpki-client