Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
File: A-uwAVKCgXNL9clLxL729umaN34.mft (raw, json)
Hash identifier: Ot74IlSD81ptamTccZAbzP+ggqF/9IWR895XQvaBUHI=
Subject key identifier: 30:D5:79:63:47:E7:60:9E:57:4C:5C:F1:9B:DF:20:B7:84:0D:0E:DB
Authority key identifier: 03:EB:B0:01:52:82:81:73:4B:F5:C9:4B:C4:BE:F6:F6:E9:9A:37:7E
Certificate issuer: /CN=03ebb001528281734bf5c94bc4bef6f6e99a377e
Certificate serial: 019D9A06BB6042397E3C653E779CE1D01D04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
Manifest number: 1045
Signing time: Fri 17 Apr 2026 06:00:25 +0000
Manifest this update: Fri 17 Apr 2026 06:00:25 +0000
Manifest next update: Sat 18 Apr 2026 06:00:25 +0000
Files and hashes: 1: A-uwAVKCgXNL9clLxL729umaN34.crl (hash: x/nh9v0OsIvyhTtm4pJgKQ13gqhOh2lw1kAUj41MPbA=)
2: FKqbBbCatHDV91uCIV2iSLiR4J4.roa (hash: OiRQx3xEWtooKV7KslWbkFM1gAMKnnIL8/Yhr2gA9Io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:bb:60:42:39:7e:3c:65:3e:77:9c:e1:d0:1d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ebb001528281734bf5c94bc4bef6f6e99a377e
Validity
Not Before: Apr 17 06:00:25 2026 GMT
Not After : Apr 18 06:00:25 2026 GMT
Subject: CN=30d5796347e7609e574c5cf19bdf20b7840d0edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:65:d2:c4:59:7b:60:7b:f4:b0:c8:2e:7d:81:
a3:9a:2b:02:15:8a:4a:02:fe:69:bc:a7:0e:77:fa:
ff:e4:fa:d0:98:de:c5:1a:a0:16:5b:00:aa:83:71:
d0:9d:e7:4d:48:c0:a8:f0:da:1c:ef:6f:bd:6a:41:
79:72:d6:dd:b1:d9:e5:a1:6f:4b:5f:85:5b:6b:1d:
45:b7:13:75:40:bf:d3:0f:b2:39:62:f3:af:c3:df:
78:25:8b:58:15:fc:bd:b0:6e:63:6e:dc:c0:84:77:
f0:2d:48:4d:c3:70:02:24:d3:3e:43:c6:dd:76:3c:
f9:ba:6a:c8:36:f1:06:34:5e:2f:ae:b3:c4:b6:0c:
8f:ba:d5:39:d2:89:34:b2:15:f7:2a:30:dd:39:c7:
fe:f3:39:25:37:64:c5:ad:45:8c:84:fe:a8:de:fe:
65:4b:1d:a3:d2:46:5e:b6:20:23:96:7a:a7:16:32:
00:ae:13:ad:47:0f:20:79:16:7b:80:c4:ac:98:4a:
68:34:cf:ad:c4:f3:51:56:c7:b1:8d:4f:04:35:aa:
58:df:79:dc:07:9c:0b:ef:27:39:06:aa:5e:b2:1f:
42:60:7d:c0:fa:76:b4:7a:c6:e7:3e:0e:84:31:46:
26:7c:36:ed:26:e1:be:80:5b:ac:ed:f8:e7:41:81:
9d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D5:79:63:47:E7:60:9E:57:4C:5C:F1:9B:DF:20:B7:84:0D:0E:DB
X509v3 Authority Key Identifier:
keyid:03:EB:B0:01:52:82:81:73:4B:F5:C9:4B:C4:BE:F6:F6:E9:9A:37:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a6:a6:d7:f2:61:01:64:8f:8c:f8:0b:31:da:dc:c9:96:71:
0c:d6:c6:23:b2:0f:0a:8b:64:02:5c:77:e1:92:2a:e7:58:03:
60:0d:ab:ba:4e:b6:1c:eb:83:19:ab:76:67:a8:56:b9:1c:bf:
87:34:ef:97:39:88:94:e2:a6:92:d9:42:85:95:0f:bb:f8:45:
da:3a:b4:93:ab:ed:ce:b1:0c:5a:6b:a7:b2:04:11:df:b9:24:
2f:c9:fe:2a:01:15:d2:76:c2:e8:ad:10:a7:79:f0:1b:9b:2a:
77:1e:b7:ff:04:16:35:53:65:a5:7c:63:28:a0:d7:73:ed:2f:
d8:e7:aa:70:b0:85:b3:2e:67:14:ef:9a:be:26:3b:3e:bc:32:
50:74:aa:43:e0:96:f4:36:3a:fb:58:c1:cb:0e:32:b0:8e:36:
cb:a9:14:18:ab:88:f9:e8:7c:72:2c:81:0b:ee:22:70:21:6b:
34:24:d7:6b:aa:69:6a:85:41:5e:f1:38:18:c2:d7:13:9f:17:
4b:d5:ec:5a:d8:ad:aa:d9:88:15:44:a5:17:0a:00:e3:52:ab:
f9:42:35:cf:4a:00:01:17:27:63:1f:da:b2:31:62:92:de:44:
07:cc:b5:2e:5b:a7:4e:8b:10:79:28:f9:b4:5b:7e:ae:12:6e:
f2:dd:6b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:47:42 2026 by rpki-client