Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
File: ucxtc0SS5BBmCKJPoble-qh5xFo.mft (raw, json)
Hash identifier: LYIvVjwoAWfz4PPMvuoM/Tx7RnVmf3Q9dYfq5M4Uwe4=
Subject key identifier: A9:6F:EA:89:D6:C3:B6:75:17:D1:44:30:8E:9D:83:4D:6C:BC:BD:80
Authority key identifier: B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
Certificate issuer: /CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Certificate serial: 019CABA1F97CE7C41188620F264788DF0DDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 23:00:44 +0000
Manifest this update: Sun 01 Mar 2026 23:00:44 +0000
Manifest next update: Mon 02 Mar 2026 23:00:44 +0000
Files and hashes: 1: ucxtc0SS5BBmCKJPoble-qh5xFo.crl (hash: Ie8Eu4uUju+omTPexTiiwUYORzLgANKfHRMpULOhi64=)
2: yfUyf4-g2EcMW9GZbYdXqTofXxA.roa (hash: BCrDbPU3WanC5O4AuPfiQjpjPPzZcvzn9YNORvio0rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:f9:7c:e7:c4:11:88:62:0f:26:47:88:df:0d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Validity
Not Before: Mar 1 23:00:44 2026 GMT
Not After : Mar 2 23:00:44 2026 GMT
Subject: CN=a96fea89d6c3b67517d144308e9d834d6cbcbd80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bf:59:ee:c7:2e:cc:92:46:d6:c3:62:06:94:
a7:15:88:84:1c:4d:be:dd:db:ab:94:77:2e:9a:73:
75:a6:52:3f:3a:aa:6d:d2:66:9f:a2:c6:84:de:18:
62:ea:18:ba:90:05:2a:90:f5:53:f0:e1:43:c1:57:
4a:bd:82:2f:f2:84:70:c1:ac:f3:9c:44:65:67:f0:
e5:dd:2b:af:9e:dc:07:7f:13:73:bc:97:b3:75:f6:
bb:75:07:60:01:94:41:4d:ec:a6:b8:56:c8:f2:7b:
21:08:7f:7b:41:21:65:af:19:7e:17:bb:e4:9c:de:
7f:c8:15:48:3a:02:30:5f:e3:07:07:f9:b0:65:bf:
10:f1:42:42:a5:3d:51:ea:49:bc:48:29:e9:67:7d:
9a:99:0c:e1:7d:3f:67:70:a4:5b:ba:01:0d:bf:4b:
ad:06:3e:95:53:e3:a5:d5:d9:89:9e:cc:c0:e3:16:
73:02:dc:d3:6b:2a:ce:79:b6:58:e0:e0:ec:80:89:
78:9b:26:2f:d4:4c:5d:e8:47:d6:45:33:ef:45:0b:
35:35:9b:77:fb:f5:24:de:82:87:09:62:bc:42:33:
63:10:fa:0d:4b:4b:87:78:b2:95:50:4c:ae:c0:17:
7b:2c:59:09:d3:f3:13:af:65:26:be:e4:56:e5:6f:
5a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6F:EA:89:D6:C3:B6:75:17:D1:44:30:8E:9D:83:4D:6C:BC:BD:80
X509v3 Authority Key Identifier:
keyid:B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:9f:78:98:04:f8:0d:d8:ed:14:0f:98:e3:f6:86:2f:7d:23:
5a:8b:cd:6b:57:16:86:50:73:eb:2f:79:2b:23:98:5e:24:fc:
03:90:03:41:79:a4:1c:b3:15:20:8d:e5:cf:70:00:45:db:91:
be:74:3e:75:ac:38:15:08:75:14:99:35:28:c8:6e:f2:88:b3:
32:42:d2:f2:19:5a:93:bc:55:53:5d:9c:b4:d3:fd:a0:24:00:
42:a2:7b:a0:a1:4e:3e:b8:16:af:fa:b2:52:b6:fc:1b:c5:e2:
50:c8:e5:93:50:cb:2f:0a:b6:a0:de:8c:b2:cd:ba:24:a2:91:
1f:ec:9f:f5:4a:f5:21:c3:2f:4a:eb:4c:dc:23:5c:91:84:73:
a3:54:97:b4:37:de:2e:ee:39:7a:7b:6b:42:5d:2b:8c:ab:2f:
b5:9a:cf:3e:1e:f3:a8:b6:51:de:d2:ff:25:9d:fd:df:1c:be:
04:6f:b4:b4:42:45:5c:f2:89:b7:41:9c:d0:45:0b:b0:6a:16:
f3:39:b3:2f:cd:d1:16:0d:ed:87:e1:f5:0f:47:2f:e8:45:ae:
1f:70:19:ff:81:ae:cc:4f:11:6f:da:5e:f3:ac:0e:e3:ce:a5:
a5:27:8c:0c:2c:8c:c6:d5:ed:85:e7:f8:d5:37:9b:3e:cc:0d:
86:bb:2a:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrofl858QRiGIPJkeI3w3dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5Y2M2ZDczNDQ5MmU0MTA2NjA4YTI0ZmExYjk1ZWZhYTg3
OWM0NWEwHhcNMjYwMzAxMjMwMDQ0WhcNMjYwMzAyMjMwMDQ0WjAzMTEwLwYDVQQD
EyhhOTZmZWE4OWQ2YzNiNjc1MTdkMTQ0MzA4ZTlkODM0ZDZjYmNiZDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArL9Z7scuzJJG1sNiBpSnFYiEHE2+
3durlHcumnN1plI/Oqpt0mafosaE3hhi6hi6kAUqkPVT8OFDwVdKvYIv8oRwwazz
nERlZ/Dl3SuvntwHfxNzvJezdfa7dQdgAZRBTeymuFbI8nshCH97QSFlrxl+F7vk
nN5/yBVIOgIwX+MHB/mwZb8Q8UJCpT1R6km8SCnpZ32amQzhfT9ncKRbugENv0ut
Bj6VU+Ol1dmJnszA4xZzAtzTayrOebZY4ODsgIl4myYv1Exd6EfWRTPvRQs1NZt3
+/Uk3oKHCWK8QjNjEPoNS0uHeLKVUEyuwBd7LFkJ0/MTr2UmvuRW5W9a2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKlv6onWw7Z1F9FEMI6dg01svL2AMB8GA1UdIwQY
MBaAFLnMbXNEkuQQZgiiT6G5XvqoecRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWN4dGMwU1M1QkJtQ0tKUG9ibGUtcWg1eEZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mMTA5MjItOTk1NC00NTNmLWIxYzYt
ODIwZDVmYzQ0ZTM1LzEvdWN4dGMwU1M1QkJtQ0tKUG9ibGUtcWg1eEZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9mMTA5MjItOTk1NC00NTNmLWIxYzYtODIwZDVmYzQ0ZTM1
LzEvdWN4dGMwU1M1QkJtQ0tKUG9ibGUtcWg1eEZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXZ94mAT4
DdjtFA+Y4/aGL30jWovNa1cWhlBz6y95KyOYXiT8A5ADQXmkHLMVII3lz3AARduR
vnQ+daw4FQh1FJk1KMhu8oizMkLS8hlak7xVU12ctNP9oCQAQqJ7oKFOPrgWr/qy
Urb8G8XiUMjlk1DLLwq2oN6Mss26JKKRH+yf9Ur1IcMvSutM3CNckYRzo1SXtDfe
Lu45entrQl0rjKsvtZrPPh7zqLZR3tL/JZ393xy+BG+0tEJFXPKJt0Gc0EULsGoW
8zmzL83RFg3th+H1D0cv6EWuH3AZ/4GuzE8Rb9pe86wO486lpSeMDCyMxtXthef4
1TebPswNhrsq3w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:58:42 2026 by rpki-client