
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
File: A-uwAVKCgXNL9clLxL729umaN34.mft (raw, json)
Hash identifier: 1AE/tYnAr9kjAaVBZuf5+BFFI8sXsoD9pi0xxlRI4XI=
Subject key identifier: 7A:3E:70:9D:3C:20:F2:30:9E:CF:35:61:A8:13:FC:05:59:EC:96:6F
Authority key identifier: 03:EB:B0:01:52:82:81:73:4B:F5:C9:4B:C4:BE:F6:F6:E9:9A:37:7E
Certificate issuer: /CN=03ebb001528281734bf5c94bc4bef6f6e99a377e
Certificate serial: 01A0D493EE63986FE4A882774D4460A5BE2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
Manifest number: 11F1
Signing time: Thu 24 Sep 2026 18:00:59 +0000
Manifest this update: Thu 24 Sep 2026 18:00:59 +0000
Manifest next update: Fri 25 Sep 2026 18:00:59 +0000
Files and hashes: 1: A-uwAVKCgXNL9clLxL729umaN34.crl (hash: 0z5SmKJtHOUscaHrD5/cr9Qil7SO7WFx/FvokKSVCW4=)
2: FKqbBbCatHDV91uCIV2iSLiR4J4.roa (hash: OiRQx3xEWtooKV7KslWbkFM1gAMKnnIL8/Yhr2gA9Io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:93:ee:63:98:6f:e4:a8:82:77:4d:44:60:a5:be:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ebb001528281734bf5c94bc4bef6f6e99a377e
Validity
Not Before: Sep 24 18:00:59 2026 GMT
Not After : Sep 25 18:00:59 2026 GMT
Subject: CN=7a3e709d3c20f2309ecf3561a813fc0559ec966f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d8:6e:9a:61:b3:0d:47:1e:5e:07:23:eb:56:
b9:5f:26:b0:b6:0c:bd:62:b0:07:d9:75:42:9e:4e:
54:d1:3a:8d:f3:82:af:6d:83:21:05:0d:49:86:9f:
c8:a9:ca:a8:9d:27:ad:38:d1:ef:dc:94:2d:a3:09:
c6:ae:a8:8f:88:af:9f:fe:c9:44:ef:00:e1:96:df:
9f:f1:dc:a8:df:0f:3d:76:5c:a7:f9:b7:42:17:17:
3c:cd:75:d0:c4:4b:9b:60:e0:5a:d2:8b:29:dc:24:
9f:6e:d3:02:d9:83:05:cf:3c:6f:a4:84:e7:e2:54:
8b:d2:c8:6f:a1:34:5e:19:99:9a:9e:d2:bf:aa:27:
0d:82:d3:53:3a:e7:27:9e:47:10:ef:2a:b5:d3:62:
60:4c:a4:05:dd:97:32:bd:40:29:d4:f5:10:fe:72:
75:d9:2c:5b:dd:0d:d4:8e:59:f1:85:30:1f:06:3c:
7e:7f:e2:ca:13:d5:47:67:61:3c:86:91:2f:8f:55:
c5:00:68:ec:81:30:52:cf:f3:ff:d3:6a:f9:b5:b7:
38:90:ff:f1:7a:11:96:9d:f5:f7:65:1d:da:97:5f:
58:b0:26:75:95:2f:3d:87:61:2c:91:ac:2f:bb:0d:
45:1c:32:51:62:e8:26:f9:63:f6:f6:c5:cf:e4:80:
be:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3E:70:9D:3C:20:F2:30:9E:CF:35:61:A8:13:FC:05:59:EC:96:6F
X509v3 Authority Key Identifier:
keyid:03:EB:B0:01:52:82:81:73:4B:F5:C9:4B:C4:BE:F6:F6:E9:9A:37:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:cd:cf:dd:fd:a4:fc:5c:a3:d1:7b:f7:87:47:ce:59:26:7f:
07:ec:2a:bf:5d:4f:7b:f2:cb:c7:b1:ca:6d:c8:60:93:7c:bf:
0d:59:80:98:02:4b:8d:57:10:c0:4b:02:d4:f9:1b:13:06:be:
54:ae:15:c7:6a:67:a9:a4:a2:f4:93:73:87:1f:93:8b:b9:4a:
cb:42:f4:c6:bd:a2:ed:bb:bd:31:02:cc:9a:90:67:67:24:a1:
54:49:70:4f:53:8d:a6:35:d4:c0:d9:f3:2e:af:d2:83:86:7f:
43:1b:12:fe:97:0f:2e:f2:ed:d2:17:fa:30:26:e2:9e:4a:26:
75:ab:f1:e0:bb:4c:91:0e:6c:46:62:34:24:a5:37:50:a1:ab:
7d:94:5b:91:54:ab:8b:c6:c6:8e:54:2a:12:61:b4:4e:d7:15:
00:90:dd:6c:10:19:e3:09:74:55:a7:a2:2d:5e:c8:cc:ce:bc:
b7:64:c5:76:46:df:23:2d:4d:f2:66:b1:b7:2a:ec:76:34:85:
5c:70:02:d1:5f:0a:af:4e:7e:a2:bf:8a:8a:6a:78:f6:37:64:
61:e4:51:b8:7b:df:54:f9:df:db:29:85:42:21:02:dc:b0:0a:
55:02:80:3f:f7:d7:21:6b:68:6f:30:df:4c:59:61:26:59:ee:
8b:ff:52:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:48:39 2026 by rpki-client