Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
File: ucxtc0SS5BBmCKJPoble-qh5xFo.mft (raw, json)
Hash identifier: wVA9ebWNckkHQ/s/jKvCfzBbHFDtkbiDQO27lYfsafg=
Subject key identifier: B1:71:8A:D6:7A:4B:DE:CD:D2:7F:B3:DD:E2:55:26:38:FF:AA:67:E5
Authority key identifier: B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
Certificate issuer: /CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Certificate serial: 01A13A1218C5260ACEE20A79EEE524D82F3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
Manifest number: 1AA2
Signing time: Wed 14 Oct 2026 11:00:26 +0000
Manifest this update: Wed 14 Oct 2026 11:00:26 +0000
Manifest next update: Thu 15 Oct 2026 11:00:26 +0000
Files and hashes: 1: ucxtc0SS5BBmCKJPoble-qh5xFo.crl (hash: J4gloI0obescQjQcekPWxkD5Giz9NWFmApH/Gs2rK7A=)
2: yfUyf4-g2EcMW9GZbYdXqTofXxA.roa (hash: BCrDbPU3WanC5O4AuPfiQjpjPPzZcvzn9YNORvio0rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:12:18:c5:26:0a:ce:e2:0a:79:ee:e5:24:d8:2f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Validity
Not Before: Oct 14 11:00:26 2026 GMT
Not After : Oct 15 11:00:26 2026 GMT
Subject: CN=b1718ad67a4bdecdd27fb3dde2552638ffaa67e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ae:11:22:0d:33:a3:86:0a:3a:7b:77:aa:85:
99:f0:43:d6:58:55:ce:c9:97:9a:3b:69:9e:f4:0f:
1f:c0:08:ec:38:63:18:bc:e7:de:e4:aa:39:df:67:
c9:45:2d:2d:2e:98:2a:3a:7c:31:83:b0:b7:52:92:
08:d6:d8:45:5a:94:a4:12:0b:89:8a:5e:fd:48:bd:
6f:43:72:c7:d1:a2:b2:a5:0e:9b:61:48:61:1d:94:
9f:2c:40:d4:7f:da:12:17:50:b7:b8:2e:b8:1d:1c:
52:f0:84:38:ba:b5:91:6f:d9:50:4e:b8:b9:a9:df:
bf:f4:8e:c3:5a:31:b2:df:fa:b1:08:b6:45:a9:a4:
84:db:cb:30:67:52:f7:c6:61:b1:1b:32:ed:28:72:
da:4b:86:46:72:85:55:8e:7d:4e:86:c5:55:ee:89:
12:a7:be:b4:dc:8f:c4:a9:e8:ba:fe:a8:4d:b2:62:
26:02:98:ed:8b:e0:cc:1a:d3:0d:6d:5e:0d:21:6a:
fd:09:33:41:d9:fd:65:dc:aa:38:84:f0:c0:d4:f7:
e1:d7:64:74:1c:9e:c8:4b:96:2d:48:e1:a3:15:49:
d9:89:b4:13:14:f3:91:e7:a9:f3:d5:05:e8:71:6b:
0e:c7:92:7c:eb:84:b6:7f:ab:43:bd:11:37:13:b0:
b8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:71:8A:D6:7A:4B:DE:CD:D2:7F:B3:DD:E2:55:26:38:FF:AA:67:E5
X509v3 Authority Key Identifier:
keyid:B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:49:59:1f:ef:da:61:b3:cd:40:e7:0c:f9:55:53:8a:50:51:
49:46:b4:0b:c4:47:d9:10:19:09:2b:04:23:95:9a:1f:d5:c3:
b5:27:16:d8:41:1b:e7:48:6f:64:db:65:e6:e5:df:a2:4f:e6:
d5:0a:8d:7a:8e:d5:7b:e4:61:df:7b:9f:7f:10:3b:50:cb:8d:
0f:4b:13:78:73:49:9a:d8:22:ee:b7:5e:04:46:fa:ae:0f:3e:
aa:cd:b9:06:4c:a7:03:b2:92:f3:2e:70:6d:82:2b:7f:35:6e:
c8:d4:d0:bb:9a:19:f4:c5:d9:86:c6:55:12:8f:52:5a:f4:d7:
34:af:3e:e2:e9:2e:00:7c:a5:05:0a:7d:f3:e9:2b:da:48:6d:
bd:b0:b4:f2:70:dd:d0:16:f0:c2:c0:46:52:95:51:89:41:48:
c7:08:15:04:c7:e2:c1:8f:d6:f4:dd:4c:04:bd:6c:57:bf:9b:
be:7a:c8:63:0f:4c:90:75:48:a6:5a:94:86:34:b1:c2:45:a8:
48:da:db:d5:15:05:ad:95:96:0c:88:ea:53:b7:ce:bf:8b:cd:
e4:c7:d9:93:9d:6d:a0:2f:73:b0:2e:4b:ee:6a:bc:17:d7:03:
2a:29:7d:70:56:47:ec:3c:a6:96:2c:46:26:45:dd:fe:03:00:
3b:54:72:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 15:11:32 2026 by rpki-client