Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.mft
File: uuKqXiYD98-V17CaeLWIrc7-Mig.mft (raw, json)
Hash identifier: 8HJVB8AqR5ueiG20oXuoictROmHmSeGFCGyFL7/ecYk=
Subject key identifier: 20:9E:DD:83:C3:52:E4:F7:35:9F:07:26:CB:C0:A6:F2:75:A6:13:56
Authority key identifier: BA:E2:AA:5E:26:03:F7:CF:95:D7:B0:9A:78:B5:88:AD:CE:FE:32:28
Certificate issuer: /CN=bae2aa5e2603f7cf95d7b09a78b588adcefe3228
Certificate serial: 019FAC3EE3347B7D39A4B311219C8F0E55F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uuKqXiYD98-V17CaeLWIrc7-Mig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.mft
Manifest number: 011F
Signing time: Wed 29 Jul 2026 05:00:30 +0000
Manifest this update: Wed 29 Jul 2026 05:00:30 +0000
Manifest next update: Thu 30 Jul 2026 05:00:30 +0000
Files and hashes: 1: TkW7QsEHj7p4co1qQ-4GY3yy26s.roa (hash: iaZGknezVQgDJrbwMB8HGoEB5UI8hMfa/n4ACZ8oQkM=)
2: uuKqXiYD98-V17CaeLWIrc7-Mig.crl (hash: X2afUicDCULqGXBuK1qriXkSOgBg/Rcw39dBjLw4EpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.mft
rsync://rpki.ripe.net/repository/DEFAULT/uuKqXiYD98-V17CaeLWIrc7-Mig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:e3:34:7b:7d:39:a4:b3:11:21:9c:8f:0e:55:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bae2aa5e2603f7cf95d7b09a78b588adcefe3228
Validity
Not Before: Jul 29 05:00:30 2026 GMT
Not After : Jul 30 05:00:30 2026 GMT
Subject: CN=209edd83c352e4f7359f0726cbc0a6f275a61356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5b:54:4d:86:79:f1:94:ff:43:54:61:53:44:
6e:e7:8f:93:b3:74:7f:57:37:36:08:57:06:82:cf:
26:22:33:98:bf:a4:01:d0:06:88:4e:e3:0a:0f:7a:
c4:61:c8:3f:52:42:e3:e6:0e:42:5d:d2:29:6c:fd:
38:19:1e:4c:51:c3:c5:8d:62:94:40:cb:7c:1f:56:
2a:3e:51:25:b8:e4:5d:8a:43:88:d9:bd:76:87:e7:
ea:01:ae:a5:2c:80:dc:d6:03:85:e6:de:02:40:b3:
f1:40:1e:8d:86:73:36:c3:58:5b:54:11:cd:10:2e:
84:7e:2d:c0:10:60:62:1b:24:c4:04:8e:ac:8b:1e:
7f:dc:64:46:19:cc:5a:07:06:fa:49:cb:c2:d9:f9:
d6:a1:8e:e6:1f:98:16:bd:df:a9:bc:3f:20:3e:23:
f9:14:c3:c6:44:86:95:0e:c0:09:e4:0d:f7:60:bb:
90:03:67:1b:d6:42:91:65:06:2a:59:66:69:17:0a:
b8:ae:66:ef:d6:5e:ba:1c:52:26:42:53:cb:d3:3c:
b5:06:c4:c7:8d:0a:f1:bc:dd:ec:14:f0:d0:2d:f4:
21:9b:8e:e4:c2:f3:c4:9c:22:d9:a5:2c:c1:57:a7:
f3:96:c0:46:1f:51:eb:4e:b6:cc:cb:0a:1f:44:61:
de:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9E:DD:83:C3:52:E4:F7:35:9F:07:26:CB:C0:A6:F2:75:A6:13:56
X509v3 Authority Key Identifier:
keyid:BA:E2:AA:5E:26:03:F7:CF:95:D7:B0:9A:78:B5:88:AD:CE:FE:32:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uuKqXiYD98-V17CaeLWIrc7-Mig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:7a:9a:dc:5d:78:e5:59:3b:d6:d8:aa:cd:c2:e8:1f:37:63:
8e:ad:73:0f:00:22:3e:7e:67:26:67:3c:ee:f6:9e:08:b5:0d:
dc:36:b3:da:18:b6:5a:05:4d:9b:bb:04:3a:1a:8f:3c:ff:e5:
42:8f:ee:95:61:c5:1f:8f:1f:bf:16:95:65:ec:04:36:1d:cd:
d0:85:88:cc:75:ab:24:bc:a7:e3:c2:ea:b5:2c:f5:75:38:58:
6c:d0:1f:83:6a:27:b8:c7:58:31:68:41:22:63:43:90:ea:5e:
fd:98:33:80:ff:2e:16:51:c1:e2:25:68:31:aa:76:bd:08:e5:
bb:88:07:7e:a2:2a:a5:11:55:44:d4:40:4e:bb:68:0a:5c:ff:
cc:96:5d:b2:f3:6b:3c:c6:3d:5a:05:eb:ab:af:cc:c1:2f:84:
2b:dc:78:0f:f0:ca:c4:61:55:e4:2d:42:82:70:10:de:9b:12:
b6:63:b4:15:c8:4c:1d:c9:4c:95:42:e5:48:a6:63:33:54:ae:
e0:51:67:30:a9:b7:10:0f:43:28:cf:a0:69:c7:5c:db:fe:4c:
f9:fd:f4:b0:97:48:78:a3:6c:fd:76:b5:f8:0e:65:50:f4:5e:
5e:f9:de:1a:f7:00:b4:27:b1:db:bb:47:15:29:39:dc:94:39:
62:10:88:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:03:10 2026 by rpki-client