Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
File: A-uwAVKCgXNL9clLxL729umaN34.mft (raw, json)
Hash identifier: YPRt+Cs2XTxOgmoS/aCOhMfNqallzaI1mm0iwXdR2DU=
Subject key identifier: C7:A4:B5:2B:A6:9D:A7:E7:FC:B9:58:62:5C:09:0F:E7:01:1A:81:3B
Authority key identifier: 03:EB:B0:01:52:82:81:73:4B:F5:C9:4B:C4:BE:F6:F6:E9:9A:37:7E
Certificate issuer: /CN=03ebb001528281734bf5c94bc4bef6f6e99a377e
Certificate serial: 019CAA8FE1D37CDD54C36C54E7A4AA9A4E34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
Manifest number: 0FC9
Signing time: Sun 01 Mar 2026 18:01:21 +0000
Manifest this update: Sun 01 Mar 2026 18:01:21 +0000
Manifest next update: Mon 02 Mar 2026 18:01:21 +0000
Files and hashes: 1: A-uwAVKCgXNL9clLxL729umaN34.crl (hash: WEvekJImDx1TY2AmDF2IYdwLiePbWYjHRUafbbvpAsM=)
2: FKqbBbCatHDV91uCIV2iSLiR4J4.roa (hash: OiRQx3xEWtooKV7KslWbkFM1gAMKnnIL8/Yhr2gA9Io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:e1:d3:7c:dd:54:c3:6c:54:e7:a4:aa:9a:4e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ebb001528281734bf5c94bc4bef6f6e99a377e
Validity
Not Before: Mar 1 18:01:21 2026 GMT
Not After : Mar 2 18:01:21 2026 GMT
Subject: CN=c7a4b52ba69da7e7fcb958625c090fe7011a813b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:38:4e:d1:59:bf:81:6f:0d:73:1b:96:3e:4f:
3d:7f:c7:79:58:d3:ac:b8:f5:24:57:a9:70:a9:cb:
8b:4e:10:8a:6c:0d:00:28:03:4b:51:23:6b:6a:f4:
28:ac:b4:6d:f3:a1:17:44:a1:1a:0c:e7:97:4e:51:
f4:85:8b:fa:d4:a6:27:b0:84:42:f3:59:e4:64:92:
4a:9e:83:5f:2e:d1:18:01:e1:9f:1c:42:20:71:21:
5d:82:11:f3:3c:32:9e:68:fc:9f:5a:aa:82:c4:f3:
ba:18:03:db:e8:79:40:f9:7c:1b:dd:51:85:73:39:
96:6f:99:2f:31:37:f8:85:f1:9c:8d:a1:e3:ea:b7:
cf:e1:22:34:54:38:c8:94:4c:24:c1:e1:85:54:99:
97:12:3e:64:63:42:be:39:65:d8:86:17:ac:bd:89:
5f:07:49:7f:47:c3:dc:f7:9d:93:77:2e:3b:8f:88:
c1:87:ef:d5:f4:ad:ff:85:2d:9a:ca:4b:cb:43:77:
bb:17:e3:1d:80:55:f6:16:06:88:71:76:f2:14:e1:
bc:80:12:ac:66:a4:c2:a8:01:68:2e:10:f4:e6:a0:
c4:77:a0:a3:6f:67:fa:21:cf:6e:b9:c0:dc:30:dd:
ff:f5:39:32:fd:90:92:fb:0b:52:1e:7c:7f:e7:af:
01:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A4:B5:2B:A6:9D:A7:E7:FC:B9:58:62:5C:09:0F:E7:01:1A:81:3B
X509v3 Authority Key Identifier:
keyid:03:EB:B0:01:52:82:81:73:4B:F5:C9:4B:C4:BE:F6:F6:E9:9A:37:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f9:84:a0:07:c7:60:7a:f8:c7:a9:04:ca:bd:2c:88:84:39:
83:cf:d2:ba:52:50:67:3e:7a:4a:60:bf:35:cc:9c:7f:e5:6a:
84:fe:86:f2:1f:5a:a4:5c:35:f1:fd:43:3d:79:b9:e0:dc:2f:
13:cb:5c:49:87:16:8d:b9:3e:15:3c:22:04:95:39:15:35:66:
ae:d7:6b:5e:23:f4:50:15:71:33:6c:55:6e:06:f7:74:06:78:
4f:62:72:d5:11:b3:77:93:a9:df:f3:d1:c9:eb:23:f9:09:18:
5a:cb:c9:c9:2d:ca:7c:86:4c:3a:3f:da:46:45:10:f1:4d:77:
3f:8b:44:87:a0:14:cd:51:a3:a7:b0:13:3a:c2:23:59:f9:f8:
fa:7f:dd:87:08:7d:c7:74:3f:f8:92:b9:77:62:79:58:ef:fa:
58:d0:e6:c8:44:5f:9f:59:f4:cd:27:90:0a:6a:fb:f9:a4:c4:
bb:1c:01:d4:e9:75:a8:27:24:58:12:22:20:c9:e6:b8:9b:c5:
b0:5c:d3:fb:a4:1f:7b:89:f6:55:12:07:52:11:9e:15:c1:cb:
09:7d:a7:df:72:59:27:5f:36:ce:87:2f:80:8f:90:3c:2a:8a:
be:0e:42:4c:c7:15:8e:7e:b9:8f:51:1b:6a:61:96:77:a9:28:
b6:03:da:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:48 2026 by rpki-client