Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.mft
File: uuKqXiYD98-V17CaeLWIrc7-Mig.mft (raw, json)
Hash identifier: OtZkGH7+sjbBY8/Hiag3B+mG1egYgMkOF3Jj6FWvk8U=
Subject key identifier: AD:0D:60:5F:85:B2:92:C6:F6:DE:2A:BD:0F:31:AC:00:D4:B8:E7:EC
Authority key identifier: BA:E2:AA:5E:26:03:F7:CF:95:D7:B0:9A:78:B5:88:AD:CE:FE:32:28
Certificate issuer: /CN=bae2aa5e2603f7cf95d7b09a78b588adcefe3228
Certificate serial: 019D9D07E96A6490C0CD64AC7531AA03A20B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uuKqXiYD98-V17CaeLWIrc7-Mig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.mft
Manifest number: 0E
Signing time: Fri 17 Apr 2026 20:00:34 +0000
Manifest this update: Fri 17 Apr 2026 20:00:34 +0000
Manifest next update: Sat 18 Apr 2026 20:00:34 +0000
Files and hashes: 1: TkW7QsEHj7p4co1qQ-4GY3yy26s.roa (hash: iaZGknezVQgDJrbwMB8HGoEB5UI8hMfa/n4ACZ8oQkM=)
2: uuKqXiYD98-V17CaeLWIrc7-Mig.crl (hash: wrQHi2YShWw2qVuQv5PKerwsSS/xdfLVqhC2ve4ULMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.mft
rsync://rpki.ripe.net/repository/DEFAULT/uuKqXiYD98-V17CaeLWIrc7-Mig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:07:e9:6a:64:90:c0:cd:64:ac:75:31:aa:03:a2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bae2aa5e2603f7cf95d7b09a78b588adcefe3228
Validity
Not Before: Apr 17 20:00:34 2026 GMT
Not After : Apr 18 20:00:34 2026 GMT
Subject: CN=ad0d605f85b292c6f6de2abd0f31ac00d4b8e7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:07:62:88:de:2f:3c:32:ed:56:4b:ef:01:9d:
d3:cb:3c:b3:5d:33:c2:26:62:86:e0:33:83:52:e4:
b6:4f:f8:ed:96:fc:ff:b9:20:30:cc:d9:19:1e:4a:
6e:8f:fe:e8:f5:3f:38:f8:23:82:fd:fa:56:c1:6a:
cf:94:ca:de:d5:52:62:6c:1d:59:14:ee:96:0c:eb:
29:1a:75:08:ca:67:9e:00:c8:22:30:c1:a8:c3:b7:
a9:63:76:29:de:52:6d:4f:fd:81:48:a5:b1:d1:9e:
06:7a:c1:4e:e6:19:75:e7:bb:3f:d5:cb:d2:82:cb:
94:17:ef:35:49:bd:ba:1c:d0:aa:4b:ee:8f:55:61:
6f:ff:b3:c8:2a:44:e6:80:b9:ec:42:fd:45:1f:fb:
3c:aa:f9:83:01:1c:79:b4:2a:db:81:aa:83:d1:ad:
9d:66:ce:42:80:09:0a:90:7d:0a:7d:70:09:6e:e1:
0b:85:a2:80:49:c0:0b:41:80:d3:7a:b3:39:6c:d1:
29:2a:d6:a7:4b:8a:8f:22:df:fc:5b:b8:73:4d:9c:
96:fc:54:f7:b2:83:8f:4a:3c:ba:b0:f7:18:38:27:
13:a4:b4:7e:72:ef:4e:af:6a:c1:c6:55:09:54:bb:
e3:e2:47:e0:68:67:92:06:ff:6d:ac:3f:e3:5e:3d:
4a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0D:60:5F:85:B2:92:C6:F6:DE:2A:BD:0F:31:AC:00:D4:B8:E7:EC
X509v3 Authority Key Identifier:
keyid:BA:E2:AA:5E:26:03:F7:CF:95:D7:B0:9A:78:B5:88:AD:CE:FE:32:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uuKqXiYD98-V17CaeLWIrc7-Mig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:fc:13:3e:f8:25:36:9e:a7:98:bd:3f:d0:01:9c:e8:c8:7a:
95:c2:39:85:5f:41:2f:3d:b9:b8:05:5a:7d:0d:17:ab:ee:df:
41:78:28:a7:a2:a6:c7:2a:3f:36:01:20:74:72:f6:22:55:0f:
6e:9d:a7:38:30:63:0f:62:e8:53:7e:03:45:f5:93:cd:be:67:
e9:30:c5:fd:06:d7:54:e6:12:aa:a6:ed:21:6a:b2:0c:3e:51:
a2:c3:6b:7b:38:ee:10:72:46:dd:64:61:36:9a:eb:c0:0a:43:
17:c2:42:4c:eb:41:22:ce:e8:59:36:e1:a1:82:10:f4:85:0c:
62:49:eb:d6:ea:dd:3e:95:50:20:96:a3:de:e8:1d:52:d1:04:
32:bd:8a:24:38:73:8f:c3:c5:e8:58:08:3e:78:f0:22:17:cd:
25:2c:57:2e:72:d6:73:16:b8:2b:65:fe:c4:05:cb:0f:dd:36:
26:82:8e:23:43:f4:9a:9f:e5:99:b5:01:8d:97:8e:60:77:9f:
23:e8:00:4b:c9:ee:84:dc:d6:21:db:a5:71:cd:c5:14:51:92:
10:be:99:47:3f:7c:55:0f:48:ba:8f:41:29:65:3b:8f:a9:a7:
cc:d9:34:a5:e3:1d:9e:8a:76:7a:0b:ce:5d:13:26:65:7d:03:
1d:1b:fb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:43:49 2026 by rpki-client