Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.mft
File: uW476Z3sY7ErK4J3nfz142PTIcE.mft (raw, json)
Hash identifier: EAV/dljziOdkZjcttFUXqOP9NARdTMkvYrggpc2hVzc=
Subject key identifier: BF:6D:4B:AF:C6:E9:47:E9:B4:09:EE:19:6D:7E:13:8C:62:80:5F:5D
Authority key identifier: B9:6E:3B:E9:9D:EC:63:B1:2B:2B:82:77:9D:FC:F5:E3:63:D3:21:C1
Certificate issuer: /CN=b96e3be99dec63b12b2b82779dfcf5e363d321c1
Certificate serial: 019D3941250B86D9DECD33EFD4128A400045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uW476Z3sY7ErK4J3nfz142PTIcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.mft
Manifest number: 06AC
Signing time: Sun 29 Mar 2026 11:01:03 +0000
Manifest this update: Sun 29 Mar 2026 11:01:03 +0000
Manifest next update: Mon 30 Mar 2026 11:01:03 +0000
Files and hashes: 1: uW476Z3sY7ErK4J3nfz142PTIcE.crl (hash: YhhDr4c5keeEDN2bp/1HC/+5EHpuZzsHIumIOM/u9Cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uW476Z3sY7ErK4J3nfz142PTIcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:25:0b:86:d9:de:cd:33:ef:d4:12:8a:40:00:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b96e3be99dec63b12b2b82779dfcf5e363d321c1
Validity
Not Before: Mar 29 11:01:03 2026 GMT
Not After : Mar 30 11:01:03 2026 GMT
Subject: CN=bf6d4bafc6e947e9b409ee196d7e138c62805f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a6:5f:f6:78:43:b1:38:0a:f6:d4:3e:7e:af:
ac:8e:7c:9b:4a:d4:a6:63:18:c0:eb:3c:22:a8:ed:
c0:c2:31:5a:02:f3:be:58:66:10:78:88:a2:e9:9f:
c5:3e:ff:95:d2:2d:08:84:d3:b6:04:59:9e:2d:56:
80:ea:84:c4:bd:d3:94:8d:c7:00:5b:fd:12:da:86:
0f:57:ce:cf:63:8a:6d:36:15:70:2d:5e:fd:1f:6f:
7f:25:23:e6:b4:56:1f:b8:4d:48:c4:1f:96:50:69:
34:9b:44:b1:ae:5d:dc:0f:57:6a:7c:e5:2f:f4:21:
e1:82:73:d4:63:57:c7:8b:6d:78:35:ae:38:69:24:
94:dc:3b:fe:6f:86:68:18:c1:6e:04:64:07:31:41:
49:5a:4c:f8:90:9b:83:15:13:f8:22:7f:b8:88:d5:
5a:b7:bf:76:59:b5:20:79:0f:3c:87:26:05:e3:73:
61:77:51:7e:f1:bf:ee:7a:7a:4b:7f:b3:f9:dc:92:
b5:ff:d9:c6:86:ff:3f:74:fa:a9:6f:fa:0c:ee:c4:
5b:c7:de:5f:51:7d:1a:ae:ae:26:5a:ca:40:78:46:
46:4d:a1:5e:e4:bf:ba:70:ea:4d:a1:d7:fd:fe:e9:
38:9d:bd:19:48:5a:aa:24:86:ef:88:2a:f2:bb:64:
f2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6D:4B:AF:C6:E9:47:E9:B4:09:EE:19:6D:7E:13:8C:62:80:5F:5D
X509v3 Authority Key Identifier:
keyid:B9:6E:3B:E9:9D:EC:63:B1:2B:2B:82:77:9D:FC:F5:E3:63:D3:21:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uW476Z3sY7ErK4J3nfz142PTIcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:27:63:17:a2:70:1b:cf:5c:d7:56:86:10:64:77:a7:f9:6c:
74:7d:d1:8f:d1:d9:22:54:89:8e:82:37:1a:bc:13:7d:98:55:
db:cf:d9:f8:a8:cb:b4:ca:ab:bf:3f:f9:36:fa:16:ad:fb:c0:
79:bb:ec:fe:a6:bb:4f:f7:83:4b:9b:eb:4d:2e:5c:50:81:3c:
20:f9:bb:0a:31:69:2c:2a:4b:e1:84:c7:20:30:84:bf:62:b5:
cf:13:bb:60:33:ee:e5:a3:90:df:0e:37:ce:73:ed:e8:57:2a:
84:22:55:0a:d0:11:f4:67:ba:f3:9d:bd:5f:84:2f:3e:a1:2f:
d4:b7:38:79:8e:78:e8:c9:8b:b5:11:bb:09:eb:3f:aa:53:0b:
81:73:4b:83:16:c0:3a:74:80:d7:bc:c5:b9:33:81:ef:81:d9:
fd:20:2a:4e:5a:e5:24:fb:d1:7f:c6:b4:03:31:d0:ec:ac:88:
d5:ad:b6:ed:04:ca:d4:d6:22:6e:ff:0c:79:ff:0f:e0:d5:d7:
8b:e6:2c:2f:a2:78:57:c4:63:6d:e2:b3:c0:3c:f1:e4:dc:e5:
27:ff:2c:a9:e3:28:54:28:97:2c:6c:f1:be:9b:63:c2:18:92:
06:40:5b:c5:de:86:bf:34:34:90:d7:52:86:58:d3:ec:7f:6c:
7e:c7:18:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:37:44 2026 by rpki-client