Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
File: ucxtc0SS5BBmCKJPoble-qh5xFo.mft (raw, json)
Hash identifier: s+RI5xnY900dMu17vuKOxHEGlm99SNGa5QHqt9B75B8=
Subject key identifier: 96:25:06:45:1C:03:54:26:33:4C:18:02:B9:4E:E7:99:91:2A:CA:B6
Authority key identifier: B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
Certificate issuer: /CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Certificate serial: 019FAC3EDC73642A5914C6EC06B2AFB51C98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
Manifest number: 19D4
Signing time: Wed 29 Jul 2026 05:00:28 +0000
Manifest this update: Wed 29 Jul 2026 05:00:28 +0000
Manifest next update: Thu 30 Jul 2026 05:00:28 +0000
Files and hashes: 1: ucxtc0SS5BBmCKJPoble-qh5xFo.crl (hash: s6qV2cmMTMrEpxvj+8k/cMolkfvW4NRn+YeYULHCw+Y=)
2: yfUyf4-g2EcMW9GZbYdXqTofXxA.roa (hash: BCrDbPU3WanC5O4AuPfiQjpjPPzZcvzn9YNORvio0rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:dc:73:64:2a:59:14:c6:ec:06:b2:af:b5:1c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Validity
Not Before: Jul 29 05:00:28 2026 GMT
Not After : Jul 30 05:00:28 2026 GMT
Subject: CN=962506451c035426334c1802b94ee799912acab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f9:72:c7:38:2e:90:21:42:f3:bc:35:bd:ea:
7c:b1:ca:ab:9d:f8:87:9e:51:21:ca:65:ed:8b:9d:
91:9d:53:90:d6:79:64:9d:82:d2:0a:19:5e:40:8b:
6c:2c:c9:8b:60:b0:3a:c8:2e:97:65:0d:7a:8e:0e:
6b:c3:04:9d:0c:de:f6:29:a0:b8:0c:67:e0:bf:e0:
34:99:93:93:73:c0:02:5a:7d:37:f8:0f:ce:c0:3a:
86:a0:dc:ba:3c:fb:66:34:3b:b8:81:48:e8:c7:39:
b6:e6:4b:eb:65:30:70:b8:6d:9b:f5:70:18:79:55:
c9:dd:20:37:55:4f:ae:c9:6a:77:a9:b9:e7:57:c1:
54:8d:7c:4e:09:93:f5:08:51:af:9d:43:e7:ff:f4:
c1:de:ed:17:fd:a6:87:59:82:6b:1c:01:b7:27:24:
de:4d:59:92:f1:33:0b:3e:c9:d4:04:86:75:6a:8a:
90:86:61:45:d2:c4:ed:4e:eb:7c:b8:d1:ca:d4:12:
4c:86:53:3f:0c:62:25:3e:47:9f:ae:fa:36:97:c8:
a2:36:7e:04:5d:ae:4d:fe:5f:7d:21:08:7e:97:0b:
d2:73:1f:36:6b:19:d5:46:e9:bb:c9:4c:e5:92:3e:
19:aa:01:12:38:28:6b:39:b9:4f:50:5f:6f:a8:88:
1d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:25:06:45:1C:03:54:26:33:4C:18:02:B9:4E:E7:99:91:2A:CA:B6
X509v3 Authority Key Identifier:
keyid:B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:35:54:22:0a:f2:ce:91:bb:03:3a:25:91:b0:f7:20:03:4f:
a5:1f:d4:f2:1a:f9:ea:b3:fa:be:b7:30:42:54:ef:91:4b:05:
e0:20:24:8f:9c:c3:36:14:d7:c2:0e:39:07:8b:56:75:2b:e8:
29:68:1a:cf:4d:0f:70:82:c0:6c:fe:5f:f6:be:40:db:df:10:
d0:9e:56:1d:51:95:2f:62:8f:a4:4c:6b:34:2f:eb:1e:0f:b8:
b0:5e:b4:94:66:26:bb:9d:66:3e:2c:70:cd:52:90:f1:9e:7c:
68:a8:ed:98:bf:9e:20:7c:0e:c1:ed:65:b9:44:dc:58:da:c1:
e1:e2:89:2e:6e:9c:b6:1a:0e:9d:a9:fd:a0:cb:27:94:15:9d:
d4:f6:d8:5a:82:ae:0e:49:4b:85:42:3d:ff:b9:b5:e3:46:2b:
1a:99:4c:9b:57:6b:17:87:64:2d:58:46:c8:3f:6d:60:b7:3b:
89:46:69:e7:0d:69:2c:9d:75:fb:f8:93:f0:4b:c6:70:fb:58:
54:fa:c7:b6:ad:fb:d6:dd:be:be:39:15:8b:89:3b:5c:08:4d:
25:95:da:11:25:15:c1:dd:ea:ce:0b:62:be:b7:d9:4d:cd:79:
e9:cc:52:ce:ce:24:fd:57:16:a2:0f:91:98:2c:93:98:dc:70:
ac:fc:eb:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:45:00 2026 by rpki-client