Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6a12ce-afbc-4583-9773-c1813947e233/1/uvzQImt58j3kemr95RRLGynii1w.mft
File: uvzQImt58j3kemr95RRLGynii1w.mft (raw, json)
Hash identifier: Amv9i5dlib1prFP3vQ4SOWJGmuCOn9lMMLQu7sX0hbg=
Subject key identifier: 14:BA:6D:01:2C:37:02:8F:EF:30:94:2C:EA:D0:D4:02:C2:31:49:02
Authority key identifier: BA:FC:D0:22:6B:79:F2:3D:E4:7A:6A:FD:E5:14:4B:1B:29:E2:8B:5C
Certificate issuer: /CN=bafcd0226b79f23de47a6afde5144b1b29e28b5c
Certificate serial: 019D333EC1A632F437F4C84B9E51E032687C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uvzQImt58j3kemr95RRLGynii1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a12ce-afbc-4583-9773-c1813947e233/1/uvzQImt58j3kemr95RRLGynii1w.mft
Manifest number: 0A63
Signing time: Sat 28 Mar 2026 07:00:43 +0000
Manifest this update: Sat 28 Mar 2026 07:00:43 +0000
Manifest next update: Sun 29 Mar 2026 07:00:43 +0000
Files and hashes: 1: uvzQImt58j3kemr95RRLGynii1w.crl (hash: 9rTCBYZlo5WrfyTKCVrcX5MC+3z+dCZPe9rAuAMMrLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a12ce-afbc-4583-9773-c1813947e233/1/uvzQImt58j3kemr95RRLGynii1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/6a12ce-afbc-4583-9773-c1813947e233/1/uvzQImt58j3kemr95RRLGynii1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/uvzQImt58j3kemr95RRLGynii1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:c1:a6:32:f4:37:f4:c8:4b:9e:51:e0:32:68:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bafcd0226b79f23de47a6afde5144b1b29e28b5c
Validity
Not Before: Mar 28 07:00:43 2026 GMT
Not After : Mar 29 07:00:43 2026 GMT
Subject: CN=14ba6d012c37028fef30942cead0d402c2314902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:84:3f:44:83:3c:1a:a0:d4:70:6f:b0:82:4d:
90:b8:d6:10:e7:92:68:b7:5d:e9:4f:af:c7:9a:64:
35:d8:69:08:82:23:33:80:6f:9b:a7:11:7e:96:f0:
1e:48:ca:63:31:a6:f2:47:07:ee:57:fc:d8:0e:d7:
89:85:10:7f:c3:ea:ff:04:75:bb:7f:48:05:0b:65:
0b:e6:c9:c7:e6:a8:23:ec:6b:b4:4d:1c:67:92:98:
fd:05:2f:45:12:52:1a:1e:03:c4:30:95:77:78:0e:
30:2d:ee:f2:e2:a9:62:d1:b9:1f:5a:8f:a4:b9:33:
00:99:d9:af:76:f1:4d:ee:76:2b:9e:72:e3:67:c1:
26:78:83:92:bf:e0:e1:03:50:ed:a1:8f:18:d3:f3:
23:45:a0:1c:9e:1b:7a:a6:2b:6a:0f:ab:6a:cc:fa:
1c:56:eb:1f:fd:5e:a4:dd:6e:f1:8b:17:a6:b1:e8:
a1:ba:4b:45:1c:30:d6:fb:06:ef:91:3a:28:39:e6:
fd:1a:2b:73:07:a8:91:1f:18:31:98:f1:e8:b6:30:
36:fb:17:01:ae:62:56:d3:0f:ba:b4:05:e6:73:d2:
b4:70:a1:d1:19:27:a2:37:1b:88:d0:c1:af:ad:7b:
92:c8:61:02:60:83:d0:c5:6d:32:17:24:37:c6:b2:
76:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BA:6D:01:2C:37:02:8F:EF:30:94:2C:EA:D0:D4:02:C2:31:49:02
X509v3 Authority Key Identifier:
keyid:BA:FC:D0:22:6B:79:F2:3D:E4:7A:6A:FD:E5:14:4B:1B:29:E2:8B:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uvzQImt58j3kemr95RRLGynii1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a12ce-afbc-4583-9773-c1813947e233/1/uvzQImt58j3kemr95RRLGynii1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a12ce-afbc-4583-9773-c1813947e233/1/uvzQImt58j3kemr95RRLGynii1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e9:22:a7:e2:4b:ab:8e:f6:42:fb:22:fd:d3:1b:fd:d4:95:
6c:0a:ec:79:02:9b:ab:f2:8e:d0:af:b7:d0:1b:6e:48:fe:fc:
e3:84:2a:a5:95:29:fe:60:58:1b:ce:74:eb:58:de:ca:d1:bc:
31:a1:d4:08:1b:c8:22:94:90:3e:36:47:88:48:eb:6d:de:2a:
29:a6:5b:7d:56:0a:33:b1:a7:a0:8d:96:68:29:2a:79:90:7a:
e8:fd:f8:61:9c:f5:7a:14:f8:2b:5b:a4:54:29:9d:06:14:b6:
7f:86:24:8e:00:c6:75:7c:49:df:15:94:a0:5a:97:8f:1f:73:
8a:b1:7f:61:f8:ff:b7:bf:4a:af:98:d5:5c:89:f0:70:b6:8f:
a9:b8:70:e0:70:07:e0:60:b1:e2:8c:b0:1c:00:7f:9f:02:42:
34:c4:32:0b:ad:11:0e:fb:8e:03:88:66:80:1e:98:1b:b7:b7:
3d:38:f5:8f:e0:c0:48:41:22:a5:2e:95:c1:5e:c0:49:a7:92:
cc:0b:52:78:f3:f5:35:c2:ca:fd:ab:90:31:0c:87:89:39:ee:
27:20:94:9f:8a:e8:fe:ed:23:1d:78:d4:82:27:a5:7b:8a:c4:
15:55:8f:cb:e4:70:9b:71:02:5e:1e:31:02:4b:64:a6:49:98:
dd:ea:96:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zPsGmMvQ39MhLnlHgMmh8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhZmNkMDIyNmI3OWYyM2RlNDdhNmFmZGU1MTQ0YjFiMjll
MjhiNWMwHhcNMjYwMzI4MDcwMDQzWhcNMjYwMzI5MDcwMDQzWjAzMTEwLwYDVQQD
EygxNGJhNmQwMTJjMzcwMjhmZWYzMDk0MmNlYWQwZDQwMmMyMzE0OTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIQ/RIM8GqDUcG+wgk2QuNYQ55Jo
t13pT6/HmmQ12GkIgiMzgG+bpxF+lvAeSMpjMabyRwfuV/zYDteJhRB/w+r/BHW7
f0gFC2UL5snH5qgj7Gu0TRxnkpj9BS9FElIaHgPEMJV3eA4wLe7y4qli0bkfWo+k
uTMAmdmvdvFN7nYrnnLjZ8EmeIOSv+DhA1DtoY8Y0/MjRaAcnht6pitqD6tqzPoc
Vusf/V6k3W7xixemseihuktFHDDW+wbvkTooOeb9GitzB6iRHxgxmPHotjA2+xcB
rmJW0w+6tAXmc9K0cKHRGSeiNxuI0MGvrXuSyGECYIPQxW0yFyQ3xrJ26wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBS6bQEsNwKP7zCULOrQ1ALCMUkCMB8GA1UdIwQY
MBaAFLr80CJrefI95Hpq/eUUSxsp4otcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXZ6UUltdDU4ajNrZW1yOTVSUkxHeW5paTF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82YTEyY2UtYWZiYy00NTgzLTk3NzMt
YzE4MTM5NDdlMjMzLzEvdXZ6UUltdDU4ajNrZW1yOTVSUkxHeW5paTF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS82YTEyY2UtYWZiYy00NTgzLTk3NzMtYzE4MTM5NDdlMjMz
LzEvdXZ6UUltdDU4ajNrZW1yOTVSUkxHeW5paTF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASukip+JL
q472Qvsi/dMb/dSVbArseQKbq/KO0K+30BtuSP7844QqpZUp/mBYG85061jeytG8
MaHUCBvIIpSQPjZHiEjrbd4qKaZbfVYKM7GnoI2WaCkqeZB66P34YZz1ehT4K1uk
VCmdBhS2f4YkjgDGdXxJ3xWUoFqXjx9zirF/Yfj/t79Kr5jVXInwcLaPqbhw4HAH
4GCx4oywHAB/nwJCNMQyC60RDvuOA4hmgB6YG7e3PTj1j+DASEEipS6VwV7ASaeS
zAtSePP1NcLK/auQMQyHiTnuJyCUn4ro/u0jHXjUgiele4rEFVWPy+Rwm3ECXh4x
AktkpkmY3eqWRA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:25 2026 by rpki-client