
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.mft
File: uW476Z3sY7ErK4J3nfz142PTIcE.mft (raw, json)
Hash identifier: tTGzdsOkSG93xwBuxaWXnwAP6P31UNe4APpf4RW5c3g=
Subject key identifier: 4A:74:6D:2E:7C:E4:1B:08:BD:C9:12:2A:F3:BA:7F:13:98:C8:2C:25
Authority key identifier: B9:6E:3B:E9:9D:EC:63:B1:2B:2B:82:77:9D:FC:F5:E3:63:D3:21:C1
Certificate issuer: /CN=b96e3be99dec63b12b2b82779dfcf5e363d321c1
Certificate serial: 019CAA58A4D5BB6D467B4A5463D8CD2C5F19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uW476Z3sY7ErK4J3nfz142PTIcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.mft
Manifest number: 0662
Signing time: Sun 01 Mar 2026 17:01:01 +0000
Manifest this update: Sun 01 Mar 2026 17:01:01 +0000
Manifest next update: Mon 02 Mar 2026 17:01:01 +0000
Files and hashes: 1: uW476Z3sY7ErK4J3nfz142PTIcE.crl (hash: rILMDwW2fx6qyh28QEZ14s7pcHczmj62EP6GR53ACxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uW476Z3sY7ErK4J3nfz142PTIcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:a4:d5:bb:6d:46:7b:4a:54:63:d8:cd:2c:5f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b96e3be99dec63b12b2b82779dfcf5e363d321c1
Validity
Not Before: Mar 1 17:01:01 2026 GMT
Not After : Mar 2 17:01:01 2026 GMT
Subject: CN=4a746d2e7ce41b08bdc9122af3ba7f1398c82c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f8:1a:34:91:8b:fb:27:66:e3:20:d2:d4:e8:
ee:4d:e0:4e:3b:ea:7e:c3:6b:e0:b6:90:e6:ba:df:
04:77:42:d3:08:cc:cd:76:30:f7:01:da:8a:1c:d4:
aa:ca:ac:a7:1e:31:2c:b3:ff:0d:fd:f8:1e:b9:ed:
5a:5c:6d:da:d2:2e:43:c0:5c:0c:8f:66:ac:cf:ec:
a9:57:22:a8:55:05:8d:06:e8:73:a0:87:6c:6b:51:
83:3c:33:09:26:c7:6a:83:fc:7e:64:41:5e:02:14:
cc:b6:4a:bd:e3:f6:2e:bc:71:08:34:a6:a0:c9:0b:
fa:ce:b0:e6:ab:22:27:7c:73:ba:4e:50:11:7e:82:
98:b7:d3:f2:83:67:a2:68:87:63:e1:34:34:4c:4e:
5d:ac:2a:d6:27:43:a4:54:b1:bf:9d:25:0b:a7:bd:
1f:8f:0e:a9:82:70:24:68:02:ca:50:59:ea:bc:f7:
13:18:d4:e1:5c:cb:1f:57:26:97:8b:51:60:7f:80:
cf:36:fd:74:d1:9b:5b:a4:5b:1e:10:7c:a7:59:3f:
28:77:dc:92:f8:4e:5c:7a:31:e8:c6:79:1b:04:04:
76:8e:91:e0:85:f1:e2:0e:d7:7b:f2:28:3d:96:41:
07:e6:ab:6b:ff:72:96:54:a7:e5:c2:32:ca:50:fb:
d5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:74:6D:2E:7C:E4:1B:08:BD:C9:12:2A:F3:BA:7F:13:98:C8:2C:25
X509v3 Authority Key Identifier:
keyid:B9:6E:3B:E9:9D:EC:63:B1:2B:2B:82:77:9D:FC:F5:E3:63:D3:21:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uW476Z3sY7ErK4J3nfz142PTIcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:49:65:8e:f7:63:4f:76:c4:5a:02:6a:08:61:66:c9:17:b9:
3b:15:11:97:c3:d7:86:13:8b:9f:a0:33:db:f3:6c:dd:63:e3:
2d:ad:f2:ee:68:b7:28:66:a1:66:a2:f5:f6:73:9d:64:be:83:
ac:a5:1a:27:fe:35:cd:4b:17:aa:41:5b:33:b3:b8:22:0b:a2:
7e:ff:eb:86:82:8f:f1:9e:cd:a5:3a:8a:95:c6:4a:90:29:44:
7d:8c:e1:80:61:6c:f0:cb:10:7a:25:32:59:bb:d0:5b:ca:81:
19:2a:56:f2:72:ef:56:65:ba:1e:c9:b1:83:02:33:eb:27:8e:
ec:10:e9:d1:53:49:e8:57:a7:3d:cc:9d:49:6e:ba:85:34:22:
e7:85:b7:dc:77:e2:dc:1d:53:ad:78:e0:34:28:91:35:87:3f:
89:a9:a9:b6:6a:19:47:39:13:05:d9:01:43:8b:44:a2:ef:da:
28:00:f3:a7:78:ae:85:45:49:5c:bd:f7:1b:60:ce:40:58:6b:
27:22:9d:03:b9:65:be:ae:90:f4:64:85:dc:00:29:ee:33:6d:
71:16:36:79:e2:9d:92:26:e7:e1:24:03:4d:04:56:a3:86:f8:
5e:26:0f:78:63:9d:31:85:79:50:24:0a:2a:40:9a:5a:b5:90:
da:07:17:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWKTVu21Ge0pUY9jNLF8ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NmUzYmU5OWRlYzYzYjEyYjJiODI3NzlkZmNmNWUzNjNk
MzIxYzEwHhcNMjYwMzAxMTcwMTAxWhcNMjYwMzAyMTcwMTAxWjAzMTEwLwYDVQQD
Eyg0YTc0NmQyZTdjZTQxYjA4YmRjOTEyMmFmM2JhN2YxMzk4YzgyYzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPgaNJGL+ydm4yDS1OjuTeBOO+p+
w2vgtpDmut8Ed0LTCMzNdjD3AdqKHNSqyqynHjEss/8N/fgeue1aXG3a0i5DwFwM
j2asz+ypVyKoVQWNBuhzoIdsa1GDPDMJJsdqg/x+ZEFeAhTMtkq94/YuvHEINKag
yQv6zrDmqyInfHO6TlARfoKYt9Pyg2eiaIdj4TQ0TE5drCrWJ0OkVLG/nSULp70f
jw6pgnAkaALKUFnqvPcTGNThXMsfVyaXi1Fgf4DPNv100ZtbpFseEHynWT8od9yS
+E5cejHoxnkbBAR2jpHghfHiDtd78ig9lkEH5qtr/3KWVKflwjLKUPvVIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEp0bS585BsIvckSKvO6fxOYyCwlMB8GA1UdIwQY
MBaAFLluO+md7GOxKyuCd5389eNj0yHBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVc0NzZaM3NZN0VySzRKM25mejE0MlBUSWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8xYWFmM2YtOWQzZi00OTMzLTk5ZWUt
MjViMzYwY2Y4YTIxLzEvdVc0NzZaM3NZN0VySzRKM25mejE0MlBUSWNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8xYWFmM2YtOWQzZi00OTMzLTk5ZWUtMjViMzYwY2Y4YTIx
LzEvdVc0NzZaM3NZN0VySzRKM25mejE0MlBUSWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABElljvdj
T3bEWgJqCGFmyRe5OxURl8PXhhOLn6Az2/Ns3WPjLa3y7mi3KGahZqL19nOdZL6D
rKUaJ/41zUsXqkFbM7O4Iguifv/rhoKP8Z7NpTqKlcZKkClEfYzhgGFs8MsQeiUy
WbvQW8qBGSpW8nLvVmW6HsmxgwIz6yeO7BDp0VNJ6FenPcydSW66hTQi54W33Hfi
3B1TrXjgNCiRNYc/iamptmoZRzkTBdkBQ4tEou/aKADzp3iuhUVJXL33G2DOQFhr
JyKdA7llvq6Q9GSF3AAp7jNtcRY2eeKdkibn4SQDTQRWo4b4XiYPeGOdMYV5UCQK
KkCaWrWQ2gcXTA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:00:01 2026 by rpki-client