Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
File: ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft (raw, json)
Hash identifier: UOSIuVkvMGAqYQ1l/fMPingFP2vQsCH4tPEL6V6NMcU=
Subject key identifier: 57:CE:9A:BE:A7:56:DF:18:D0:ED:D3:48:F2:E6:AA:53:68:08:2F:2B
Authority key identifier: B9:C8:9C:FA:DD:51:F4:D9:21:BB:3D:0C:55:F9:31:36:63:A7:1C:C4
Certificate issuer: /CN=b9c89cfadd51f4d921bb3d0c55f9313663a71cc4
Certificate serial: 019D992B66809F47654762226949BBD1592E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 02:00:51 +0000
Manifest this update: Fri 17 Apr 2026 02:00:51 +0000
Manifest next update: Sat 18 Apr 2026 02:00:51 +0000
Files and hashes: 1: Y45Z-69JdV08zvRND3s3CCHByos.roa (hash: LSfljHvNNJLgnIY73ywa8BmCbjs0D1+ME8EqFOPNt90=)
2: ucic-t1R9Nkhuz0MVfkxNmOnHMQ.crl (hash: B6fJ8TnWPsxgSgds5Vql2lmBubmZXuLQIoCiLQxy6Y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:66:80:9f:47:65:47:62:22:69:49:bb:d1:59:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c89cfadd51f4d921bb3d0c55f9313663a71cc4
Validity
Not Before: Apr 17 02:00:51 2026 GMT
Not After : Apr 18 02:00:51 2026 GMT
Subject: CN=57ce9abea756df18d0edd348f2e6aa5368082f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3a:14:54:b7:18:4a:fb:47:f7:f9:48:b8:12:
ff:aa:17:86:cf:c3:c4:b8:2c:57:37:fa:6e:79:39:
1e:cc:a0:78:ba:41:1d:8a:52:97:32:b1:08:be:b4:
f8:2d:35:9f:0e:86:59:d4:31:01:d5:af:a2:42:17:
d1:ae:80:cf:f3:4f:e8:24:e3:6a:c9:a8:44:c3:8a:
99:26:5a:9c:41:be:33:27:c1:48:59:d8:82:84:99:
2e:e7:83:91:b2:8f:a4:fa:1b:01:36:e7:d1:6b:9e:
24:bd:e6:a9:86:f2:64:70:db:8c:d1:c1:c7:7f:da:
8f:a2:21:e5:d9:de:fd:99:27:37:6e:2c:0e:25:7b:
b4:5b:cc:0a:dc:81:e5:e3:80:a4:82:28:36:d4:01:
bf:fa:08:37:4d:a6:85:6d:0e:e7:d9:90:bf:a7:c4:
4f:da:f2:08:b4:c3:7a:84:06:d8:b6:57:fa:b8:bc:
fa:8c:4a:33:fa:93:56:66:71:69:03:03:87:94:75:
c6:aa:5b:9a:a1:3e:6a:e5:12:8c:00:d9:96:6b:ab:
59:57:7d:0c:2c:2f:2e:de:7e:a9:5e:48:85:bc:6b:
3c:1c:72:11:fd:22:d7:b4:27:75:1d:6e:91:79:6a:
15:67:34:34:f2:d8:b0:84:47:cf:62:29:31:b6:a9:
a3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CE:9A:BE:A7:56:DF:18:D0:ED:D3:48:F2:E6:AA:53:68:08:2F:2B
X509v3 Authority Key Identifier:
keyid:B9:C8:9C:FA:DD:51:F4:D9:21:BB:3D:0C:55:F9:31:36:63:A7:1C:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:0d:0e:47:15:41:a0:05:6f:cc:86:e4:96:e8:90:fd:ac:82:
4f:e3:36:36:05:ea:b6:69:d9:66:12:8c:8d:41:7d:1e:e9:cd:
5b:da:e5:6f:1b:cd:07:7c:07:c8:d6:5e:41:5a:4a:d0:74:4f:
5a:09:31:4d:79:ac:ca:aa:b2:60:3d:fc:9d:e1:85:c4:07:bd:
d1:62:f3:56:2a:af:81:db:a8:de:f3:fc:a2:b3:e7:32:29:78:
67:b5:d3:bc:39:be:80:4e:92:64:b0:52:ec:d5:5a:90:3c:fb:
b7:38:fd:8d:01:98:1a:06:dc:6a:81:77:fc:03:e7:46:4e:d3:
36:d9:a6:e2:df:f3:64:a6:aa:b9:f9:d7:13:9e:7c:22:16:14:
90:62:86:0b:cd:9a:38:cb:d4:73:11:58:cf:bb:47:e6:c4:0c:
48:b7:3f:26:cd:58:95:b8:cd:c7:26:22:58:c6:f1:e4:8c:99:
3d:45:7e:c1:3b:26:f9:88:3b:a0:e9:1f:ec:b2:e9:e5:23:74:
a7:6b:7b:16:b9:6a:12:52:15:c5:5c:fd:96:ac:2a:8e:65:15:
0f:d3:79:18:13:04:c1:58:c6:67:00:11:32:19:f6:1c:37:22:
45:26:84:73:f1:56:45:b5:ad:3c:f1:20:bf:69:79:15:61:62:
3a:a7:f4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:35:56 2026 by rpki-client