Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
File: UZhWegOeXM4j7pN0CW7tV7u6KY4.mft (raw, json)
Hash identifier: SCzpl4OoNfZCOIGsp9BoTqX6EVV0EjkW4joH9ThJ9k4=
Subject key identifier: 92:3B:A1:92:CD:11:1B:9E:D8:8D:7D:D6:A4:87:51:E1:A2:98:EE:CE
Authority key identifier: 51:98:56:7A:03:9E:5C:CE:23:EE:93:74:09:6E:ED:57:BB:BA:29:8E
Certificate issuer: /CN=5198567a039e5cce23ee9374096eed57bbba298e
Certificate serial: 019CA97C9E28C4E71114D86E26C23D1CF33C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZhWegOeXM4j7pN0CW7tV7u6KY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
Manifest number: 183F
Signing time: Sun 01 Mar 2026 13:00:42 +0000
Manifest this update: Sun 01 Mar 2026 13:00:42 +0000
Manifest next update: Mon 02 Mar 2026 13:00:42 +0000
Files and hashes: 1: UZhWegOeXM4j7pN0CW7tV7u6KY4.crl (hash: wBjjRe4d0ubrqEpr5PvI5c+g3yrt+3SrqUq1nVCQCEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZhWegOeXM4j7pN0CW7tV7u6KY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:9e:28:c4:e7:11:14:d8:6e:26:c2:3d:1c:f3:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5198567a039e5cce23ee9374096eed57bbba298e
Validity
Not Before: Mar 1 13:00:42 2026 GMT
Not After : Mar 2 13:00:42 2026 GMT
Subject: CN=923ba192cd111b9ed88d7dd6a48751e1a298eece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d3:7a:9e:4b:31:1b:65:7d:dd:02:33:0d:84:
55:7b:a8:29:6f:0b:a6:ce:ac:76:b2:6a:e5:af:60:
b4:e1:0d:54:13:a3:15:1c:2b:eb:7e:69:63:5c:f2:
f0:76:e6:5c:83:b0:e9:37:1f:f3:3b:9f:87:e6:c2:
0c:dc:49:9b:df:9c:b8:97:58:5c:b8:1c:57:9d:91:
3c:df:a3:9b:40:b2:36:40:7a:82:b9:d5:4a:09:94:
9f:0f:dd:bf:aa:d2:4a:b0:7c:44:76:cf:55:62:c8:
f4:d6:8d:70:72:c6:a0:1a:18:34:5f:4a:ce:0c:37:
07:8d:61:27:8e:e0:55:e0:5d:d7:62:75:6d:bd:eb:
a7:02:bc:df:10:08:81:e2:f6:a1:43:cc:75:63:d8:
ef:99:60:e8:4f:20:7a:ed:30:9d:df:26:d4:29:79:
e2:d2:6b:2a:bd:2e:01:64:b8:a5:a0:a3:a9:6e:28:
4c:03:f1:e4:c7:9a:32:12:a9:cd:4d:c1:fb:be:73:
1a:22:02:95:68:c7:3a:ac:ee:fb:f7:16:f8:b1:c7:
47:85:58:0a:27:1e:4c:ee:98:ac:ac:07:1b:ab:8d:
5a:46:9f:12:dc:1e:e1:68:fb:51:36:f2:ec:68:69:
83:5d:9b:78:8b:4b:9a:8a:88:7b:84:01:cd:5b:e5:
04:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3B:A1:92:CD:11:1B:9E:D8:8D:7D:D6:A4:87:51:E1:A2:98:EE:CE
X509v3 Authority Key Identifier:
keyid:51:98:56:7A:03:9E:5C:CE:23:EE:93:74:09:6E:ED:57:BB:BA:29:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZhWegOeXM4j7pN0CW7tV7u6KY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:2a:17:42:a4:10:b8:ce:3f:42:e9:09:2d:60:29:03:fb:d2:
f5:6b:61:40:7d:c6:ab:c6:93:85:f0:73:b6:61:b1:c7:6a:40:
f7:f8:67:a8:a4:44:07:e1:11:4c:c6:5f:a5:8a:19:3c:46:07:
1c:63:0c:65:9f:34:40:0f:15:16:8b:40:ae:d4:8e:ef:be:5d:
ae:fc:ff:4c:60:4f:d9:1b:5f:60:d9:ed:fb:e7:af:74:28:0a:
a5:c3:d1:e5:77:cb:5c:4a:9f:53:7f:96:31:1b:26:03:8b:fb:
c2:8d:34:0e:64:4c:f3:ac:d3:3b:89:d9:17:fc:9e:94:56:b2:
5d:e6:11:12:b0:85:d9:12:84:14:2b:9b:c6:db:96:f8:44:1c:
73:2e:d0:f5:a4:bc:c5:14:49:46:1b:cf:68:cc:e8:3d:41:04:
72:ef:8d:91:e3:4c:81:93:a2:30:f0:d8:0c:5c:22:d7:2d:c2:
4c:50:54:35:23:31:5a:11:aa:61:7a:bc:f3:50:44:cc:bb:7f:
f1:57:6a:57:ba:d8:df:2f:97:db:db:dd:25:a7:62:85:8c:ea:
15:6d:fd:72:65:d7:9a:b2:07:0c:36:53:70:9b:16:45:8f:ac:
7c:57:f9:bf:9c:21:be:39:73:da:cb:b8:63:b1:70:5f:7b:a3:
7d:01:a1:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypfJ4oxOcRFNhuJsI9HPM8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxOTg1NjdhMDM5ZTVjY2UyM2VlOTM3NDA5NmVlZDU3YmJi
YTI5OGUwHhcNMjYwMzAxMTMwMDQyWhcNMjYwMzAyMTMwMDQyWjAzMTEwLwYDVQQD
Eyg5MjNiYTE5MmNkMTExYjllZDg4ZDdkZDZhNDg3NTFlMWEyOThlZWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdN6nksxG2V93QIzDYRVe6gpbwum
zqx2smrlr2C04Q1UE6MVHCvrfmljXPLwduZcg7DpNx/zO5+H5sIM3Emb35y4l1hc
uBxXnZE836ObQLI2QHqCudVKCZSfD92/qtJKsHxEds9VYsj01o1wcsagGhg0X0rO
DDcHjWEnjuBV4F3XYnVtveunArzfEAiB4vahQ8x1Y9jvmWDoTyB67TCd3ybUKXni
0msqvS4BZLiloKOpbihMA/Hkx5oyEqnNTcH7vnMaIgKVaMc6rO779xb4scdHhVgK
Jx5M7pisrAcbq41aRp8S3B7haPtRNvLsaGmDXZt4i0uaioh7hAHNW+UEawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJI7oZLNERue2I191qSHUeGimO7OMB8GA1UdIwQY
MBaAFFGYVnoDnlzOI+6TdAlu7Ve7uimOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVpoV2VnT2VYTTRqN3BOMENXN3RWN3U2S1k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi82Njc5YTktMDkzZi00YmMzLWEzZDQt
ODhhYTgxNDg2NzgzLzEvVVpoV2VnT2VYTTRqN3BOMENXN3RWN3U2S1k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi82Njc5YTktMDkzZi00YmMzLWEzZDQtODhhYTgxNDg2Nzgz
LzEvVVpoV2VnT2VYTTRqN3BOMENXN3RWN3U2S1k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjSoXQqQQ
uM4/QukJLWApA/vS9WthQH3Gq8aThfBztmGxx2pA9/hnqKREB+ERTMZfpYoZPEYH
HGMMZZ80QA8VFotArtSO775drvz/TGBP2RtfYNnt++evdCgKpcPR5XfLXEqfU3+W
MRsmA4v7wo00DmRM86zTO4nZF/yelFayXeYRErCF2RKEFCubxtuW+EQccy7Q9aS8
xRRJRhvPaMzoPUEEcu+NkeNMgZOiMPDYDFwi1y3CTFBUNSMxWhGqYXq881BEzLt/
8VdqV7rY3y+X29vdJadihYzqFW39cmXXmrIHDDZTcJsWRY+sfFf5v5whvjlz2su4
Y7FwX3ujfQGhHQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:35 2026 by rpki-client