Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
File: ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft (raw, json)
Hash identifier: HPoVD9eIJGPc11zzCXlkDZ4tmSr2HHsdFAzJ5JK0REQ=
Subject key identifier: AA:34:D3:81:7A:45:49:13:D7:DD:CA:48:FF:A8:97:31:2D:9B:73:A0
Authority key identifier: B9:C8:9C:FA:DD:51:F4:D9:21:BB:3D:0C:55:F9:31:36:63:A7:1C:C4
Certificate issuer: /CN=b9c89cfadd51f4d921bb3d0c55f9313663a71cc4
Certificate serial: 019CAD90619DA32AC9177F17975976CCC0DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 08:00:46 +0000
Manifest this update: Mon 02 Mar 2026 08:00:46 +0000
Manifest next update: Tue 03 Mar 2026 08:00:46 +0000
Files and hashes: 1: Y45Z-69JdV08zvRND3s3CCHByos.roa (hash: LSfljHvNNJLgnIY73ywa8BmCbjs0D1+ME8EqFOPNt90=)
2: ucic-t1R9Nkhuz0MVfkxNmOnHMQ.crl (hash: f+iwxWcM8t+tdCHqf7Rx/Nq0tLwEW8xSI9v8gy2DeIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:61:9d:a3:2a:c9:17:7f:17:97:59:76:cc:c0:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c89cfadd51f4d921bb3d0c55f9313663a71cc4
Validity
Not Before: Mar 2 08:00:46 2026 GMT
Not After : Mar 3 08:00:46 2026 GMT
Subject: CN=aa34d3817a454913d7ddca48ffa897312d9b73a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a2:8e:04:c2:22:17:eb:50:43:bd:26:23:b6:
db:37:9b:cb:dd:a0:05:5f:0d:f9:af:e6:ab:e6:16:
42:86:b8:fb:a0:70:05:24:63:97:2d:33:99:a6:21:
e9:ec:4b:b7:d0:d0:9f:4b:ec:c8:b9:28:4d:92:ec:
92:b9:b0:e0:90:5b:e1:65:ba:3e:40:7d:d7:dd:6e:
7d:4d:0f:1a:f0:26:ec:9c:df:71:9c:02:49:1c:37:
5f:d6:fd:46:79:3b:d4:cf:97:0c:a5:e2:05:5f:4e:
29:bf:f1:b3:e1:1a:32:71:4b:d8:98:8d:a3:9a:61:
73:64:2c:53:78:e9:ab:93:31:32:a0:82:d3:e0:7e:
3a:68:0b:8c:c2:fe:64:96:05:b5:e9:25:0b:32:85:
db:96:51:16:05:89:af:aa:cf:c1:0c:aa:21:dd:63:
cc:3b:d0:c8:dd:7c:43:d8:e1:9e:b1:0d:bb:77:bf:
ca:72:2f:6e:86:19:3a:c7:3c:d9:62:04:40:d3:c7:
a8:f3:43:76:e4:52:5c:ce:ed:ff:8a:78:81:e6:46:
e3:e8:b8:ad:6c:69:02:ca:0b:b7:91:db:f5:43:21:
f6:82:ed:ab:e2:76:25:9c:d8:37:65:86:f6:c3:d0:
80:16:b1:4f:b7:40:43:00:01:73:90:72:c7:0f:d4:
db:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:34:D3:81:7A:45:49:13:D7:DD:CA:48:FF:A8:97:31:2D:9B:73:A0
X509v3 Authority Key Identifier:
keyid:B9:C8:9C:FA:DD:51:F4:D9:21:BB:3D:0C:55:F9:31:36:63:A7:1C:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c5:28:01:90:02:4d:02:6a:76:6e:33:c7:16:a8:f1:23:66:
25:bc:a5:a0:54:3f:7c:d3:9b:4e:9d:f8:8f:f6:11:87:3d:09:
8c:f0:b2:39:0d:ab:3d:c4:35:99:4f:2e:ec:2b:e1:a4:a1:22:
0f:42:02:fc:19:7a:ae:f9:4d:32:9c:ef:f1:d2:2d:7f:e0:e7:
d6:4d:3b:19:56:fc:a0:28:19:34:57:3d:aa:8a:54:16:9b:9e:
36:61:0f:c6:fe:0b:88:b8:10:7e:20:12:69:3e:b8:75:b7:2d:
58:94:00:b3:4b:6f:24:17:6e:62:27:6b:46:73:74:4e:0a:57:
fa:64:0e:85:1b:52:af:cc:7c:1f:10:99:24:e4:fa:bf:ac:98:
b1:b9:a7:e8:92:13:2d:71:57:cf:eb:ea:00:8f:79:59:08:39:
ba:ea:c8:c0:c6:9f:18:d0:61:69:75:9c:69:99:32:73:48:ff:
0e:5e:29:df:7f:2d:dc:42:dc:61:23:32:c4:87:6b:b2:4b:3d:
5c:70:df:c9:bc:58:d2:4f:f5:89:69:5d:3f:6e:5a:b2:78:56:
b2:94:9e:83:66:f3:e4:1a:52:3e:ba:44:89:73:c9:09:a4:15:
44:21:f7:05:f4:e2:56:3b:8e:e8:48:0c:ff:f8:c2:69:11:d3:
15:dd:bf:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:48:57 2026 by rpki-client