Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
File: A-uwAVKCgXNL9clLxL729umaN34.mft (raw, json)
Hash identifier: 3zTqji+svYypCEvGUrHpK8WeJkuMOIT60K1s8xk38ws=
Subject key identifier: E9:DA:A1:02:B6:AC:C9:C1:DB:2E:45:C9:91:FF:1F:26:17:D8:36:0B
Authority key identifier: 03:EB:B0:01:52:82:81:73:4B:F5:C9:4B:C4:BE:F6:F6:E9:9A:37:7E
Certificate issuer: /CN=03ebb001528281734bf5c94bc4bef6f6e99a377e
Certificate serial: 01A0C3323DB03901518D503B5CF8B84C05E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
Manifest number: 11E8
Signing time: Mon 21 Sep 2026 09:00:44 +0000
Manifest this update: Mon 21 Sep 2026 09:00:44 +0000
Manifest next update: Tue 22 Sep 2026 09:00:44 +0000
Files and hashes: 1: A-uwAVKCgXNL9clLxL729umaN34.crl (hash: wnXM505V6deXxshUOMR8rSZbPCSTwv+gMsEZ5hGhIRE=)
2: FKqbBbCatHDV91uCIV2iSLiR4J4.roa (hash: OiRQx3xEWtooKV7KslWbkFM1gAMKnnIL8/Yhr2gA9Io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:32:3d:b0:39:01:51:8d:50:3b:5c:f8:b8:4c:05:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ebb001528281734bf5c94bc4bef6f6e99a377e
Validity
Not Before: Sep 21 09:00:44 2026 GMT
Not After : Sep 22 09:00:44 2026 GMT
Subject: CN=e9daa102b6acc9c1db2e45c991ff1f2617d8360b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:48:0d:85:af:72:d0:9c:68:c8:e6:af:c5:95:
2d:88:65:ad:df:20:5d:b1:3f:dd:c5:5d:8b:27:f1:
e3:12:80:b5:6c:60:8f:ea:8f:e3:4a:f0:34:0c:38:
23:f0:a2:b5:ca:02:c5:58:b1:b7:20:41:14:3b:0c:
a7:11:70:69:f3:26:0d:ad:39:c3:98:57:df:3a:1c:
32:91:10:e1:7e:68:2c:da:3f:06:74:e9:5e:13:94:
c3:b9:12:d7:a2:60:95:f8:bd:63:95:24:e2:2f:bc:
9e:57:8b:62:d1:b8:40:69:20:9c:78:6d:98:46:e3:
59:75:42:20:dd:b3:4e:4f:9d:88:1f:7f:1e:e5:e4:
57:73:f8:23:74:7a:92:fe:50:d0:db:b3:43:81:c5:
0c:1c:16:4d:81:51:6d:49:10:e4:97:5f:00:35:fa:
da:61:df:ad:67:1b:c1:34:b3:ab:34:3c:d4:e3:65:
52:c9:68:37:1c:1e:39:bd:5e:9e:d3:25:f3:25:37:
51:0f:08:a8:dc:04:5d:0c:a0:84:0f:dc:64:d6:ad:
e5:90:aa:3c:c1:2c:9b:b3:dc:8b:34:06:6a:34:27:
4a:66:a4:b8:b4:6d:6f:c2:1a:cb:4e:05:68:8b:42:
c0:d9:20:03:55:47:f9:6d:6b:41:4e:a4:70:cd:30:
17:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:DA:A1:02:B6:AC:C9:C1:DB:2E:45:C9:91:FF:1F:26:17:D8:36:0B
X509v3 Authority Key Identifier:
keyid:03:EB:B0:01:52:82:81:73:4B:F5:C9:4B:C4:BE:F6:F6:E9:9A:37:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ed:91:76:aa:f4:3f:78:12:ac:77:69:3e:66:97:99:bb:98:
a5:78:2b:c0:b5:ac:50:c8:16:b7:81:87:11:12:a3:4b:ee:95:
15:92:cb:8d:0a:87:d6:98:f5:7f:a5:c7:cb:b9:53:e1:29:03:
8c:50:ea:ed:3e:96:0f:ba:9a:c4:a7:5b:5a:60:90:1a:bf:c5:
9f:81:30:cb:7c:52:5c:36:62:e7:14:e7:87:ea:fb:f7:66:60:
f8:58:a0:2d:b9:84:53:5e:da:17:72:e4:ed:71:d6:5e:5c:55:
64:42:7d:1d:61:b5:2a:2e:7d:30:59:77:a8:fa:6e:73:23:d8:
50:12:37:74:35:d8:0d:2f:d1:f6:5a:e0:5a:42:78:ae:14:51:
4f:dd:46:f4:75:57:fa:d7:4d:46:cb:27:9c:7e:81:22:22:ef:
34:26:b3:37:70:8f:d2:1e:f1:a4:b6:d0:a2:19:5f:23:75:a5:
5f:45:17:e4:5e:1a:9b:9e:6d:36:20:78:df:1b:24:62:65:3b:
8f:b1:fa:4e:7d:76:9e:fa:cb:95:43:26:65:5d:7e:06:38:d1:
eb:cf:7d:9c:01:b0:9d:75:1c:d4:38:6d:78:bc:1b:f6:76:57:
7d:79:ad:cc:ef:a4:c1:66:e3:67:1c:7c:91:49:51:98:8a:8f:
57:87:0b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:32:51 2026 by rpki-client