Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
File: A-uwAVKCgXNL9clLxL729umaN34.mft (raw, json)
Hash identifier: 62SuJJ356jMleagSUwi4W7XkgmYQZNa+zN2wXwJDfX4=
Subject key identifier: 83:77:7F:6E:4B:A2:B7:31:9E:4C:C8:D9:56:BF:F6:E8:25:A6:53:BC
Authority key identifier: 03:EB:B0:01:52:82:81:73:4B:F5:C9:4B:C4:BE:F6:F6:E9:9A:37:7E
Certificate issuer: /CN=03ebb001528281734bf5c94bc4bef6f6e99a377e
Certificate serial: 019D37894349AFEDBA75A7C449DD15D6E401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
Manifest number: 1012
Signing time: Sun 29 Mar 2026 03:00:35 +0000
Manifest this update: Sun 29 Mar 2026 03:00:35 +0000
Manifest next update: Mon 30 Mar 2026 03:00:35 +0000
Files and hashes: 1: A-uwAVKCgXNL9clLxL729umaN34.crl (hash: Y6iFLDD7q0xVHcM1hqCOohAv9cxVykVjOHlaRBVH1Q8=)
2: FKqbBbCatHDV91uCIV2iSLiR4J4.roa (hash: OiRQx3xEWtooKV7KslWbkFM1gAMKnnIL8/Yhr2gA9Io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:43:49:af:ed:ba:75:a7:c4:49:dd:15:d6:e4:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ebb001528281734bf5c94bc4bef6f6e99a377e
Validity
Not Before: Mar 29 03:00:35 2026 GMT
Not After : Mar 30 03:00:35 2026 GMT
Subject: CN=83777f6e4ba2b7319e4cc8d956bff6e825a653bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d5:b9:0f:bc:64:43:d9:fb:ce:f6:91:17:5f:
27:c4:e0:4e:13:ab:c6:fd:2c:e1:52:72:0b:a1:b3:
db:a1:96:16:39:27:e1:3d:42:a0:a1:46:98:a0:7a:
4f:44:9c:df:35:bc:8b:e0:4d:a9:c4:2f:df:e0:d9:
a9:a9:90:16:d7:77:01:2a:c6:de:2a:69:cb:d7:f4:
8c:2d:fb:28:af:24:e7:ed:5e:2c:3c:f6:da:e7:5d:
b4:81:3d:e4:96:b1:6b:a7:95:e4:34:27:44:d8:10:
9e:3c:a9:cf:38:4b:6f:99:29:12:35:7f:12:f1:68:
09:e3:b8:bc:59:dc:92:da:6c:41:d6:24:1d:7c:89:
7b:e8:a3:bc:4f:17:27:84:77:7f:5c:6e:f9:f0:bb:
e4:c3:25:dd:e8:c0:0e:b2:11:5e:c2:e7:20:b5:78:
90:8d:81:09:85:33:8f:d9:d6:7a:68:0d:66:71:79:
c2:a4:b9:07:ee:60:b5:f8:e5:82:9f:10:73:90:70:
06:ce:3e:0e:59:36:73:41:a6:74:8b:30:98:c3:49:
c4:2e:e5:e3:8b:7c:f9:0b:0b:95:9a:ca:11:d3:43:
5d:c0:98:ae:43:6d:43:10:ce:12:74:f4:de:25:3c:
d4:33:a0:e3:8c:a3:67:43:75:43:bb:2b:6e:7c:a0:
42:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:77:7F:6E:4B:A2:B7:31:9E:4C:C8:D9:56:BF:F6:E8:25:A6:53:BC
X509v3 Authority Key Identifier:
keyid:03:EB:B0:01:52:82:81:73:4B:F5:C9:4B:C4:BE:F6:F6:E9:9A:37:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e8:7c:cf:64:49:d1:f3:12:41:70:c6:3c:83:1a:03:1f:6d:
e5:f4:dc:19:96:58:38:ec:e1:b7:6b:f3:36:49:8b:0d:e6:5c:
ce:a2:af:53:1a:f9:0b:1d:f1:1c:d0:8c:67:16:87:df:27:a1:
08:03:e7:3b:2f:72:f3:89:e8:27:6e:26:a3:6c:6d:46:8a:4d:
25:dc:3c:85:b3:0c:62:27:1c:7d:1d:55:b5:dd:f3:2a:c7:cf:
dc:9b:34:7f:1b:72:16:3e:32:dc:14:51:14:d6:00:46:86:71:
fb:0d:dc:53:2a:de:04:5c:f6:b3:ff:2e:de:c8:63:79:67:ab:
13:4c:0c:86:d0:80:4d:a9:e2:84:0e:0a:a5:69:b2:f1:42:8f:
99:63:8c:f4:0a:39:3a:a3:fe:ee:cf:58:a1:84:df:1d:4e:8c:
1d:43:a0:42:1b:0c:73:a5:77:44:e5:28:3c:b4:f3:c6:71:9f:
d2:fd:a3:39:74:30:3d:9f:dc:89:3b:27:80:54:77:f5:65:9f:
0c:e7:fd:5d:fd:c3:e0:8d:d8:12:27:51:c1:b2:67:0f:65:54:
5e:b3:12:b5:fa:ef:1e:1e:a6:7c:c5:5e:7b:50:96:df:13:4d:
1d:33:2b:49:eb:26:c3:d3:c3:1b:73:e4:27:92:e4:46:98:d1:
58:fa:88:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iUNJr+26dafESd0V1uQBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZWJiMDAxNTI4MjgxNzM0YmY1Yzk0YmM0YmVmNmY2ZTk5
YTM3N2UwHhcNMjYwMzI5MDMwMDM1WhcNMjYwMzMwMDMwMDM1WjAzMTEwLwYDVQQD
Eyg4Mzc3N2Y2ZTRiYTJiNzMxOWU0Y2M4ZDk1NmJmZjZlODI1YTY1M2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttW5D7xkQ9n7zvaRF18nxOBOE6vG
/SzhUnILobPboZYWOSfhPUKgoUaYoHpPRJzfNbyL4E2pxC/f4NmpqZAW13cBKsbe
KmnL1/SMLfsoryTn7V4sPPba5120gT3klrFrp5XkNCdE2BCePKnPOEtvmSkSNX8S
8WgJ47i8WdyS2mxB1iQdfIl76KO8TxcnhHd/XG758LvkwyXd6MAOshFewucgtXiQ
jYEJhTOP2dZ6aA1mcXnCpLkH7mC1+OWCnxBzkHAGzj4OWTZzQaZ0izCYw0nELuXj
i3z5CwuVmsoR00NdwJiuQ21DEM4SdPTeJTzUM6DjjKNnQ3VDuytufKBCewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIN3f25LorcxnkzI2Va/9uglplO8MB8GA1UdIwQY
MBaAFAPrsAFSgoFzS/XJS8S+9vbpmjd+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQS11d0FWS0NnWE5MOWNsTHhMNzI5dW1hTjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wZDNmNTEtYWY3My00MDQ1LWEwZjEt
ZWFiODI4ZWNhNDViLzEvQS11d0FWS0NnWE5MOWNsTHhMNzI5dW1hTjM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8wZDNmNTEtYWY3My00MDQ1LWEwZjEtZWFiODI4ZWNhNDVi
LzEvQS11d0FWS0NnWE5MOWNsTHhMNzI5dW1hTjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmOh8z2RJ
0fMSQXDGPIMaAx9t5fTcGZZYOOzht2vzNkmLDeZczqKvUxr5Cx3xHNCMZxaH3yeh
CAPnOy9y84noJ24mo2xtRopNJdw8hbMMYiccfR1Vtd3zKsfP3Js0fxtyFj4y3BRR
FNYARoZx+w3cUyreBFz2s/8u3shjeWerE0wMhtCATanihA4KpWmy8UKPmWOM9Ao5
OqP+7s9YoYTfHU6MHUOgQhsMc6V3ROUoPLTzxnGf0v2jOXQwPZ/ciTsngFR39WWf
DOf9Xf3D4I3YEidRwbJnD2VUXrMStfrvHh6mfMVee1CW3xNNHTMrSesmw9PDG3Pk
J5LkRpjRWPqI4g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:53:36 2026 by rpki-client