
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.mft
File: uuKqXiYD98-V17CaeLWIrc7-Mig.mft (raw, json)
Hash identifier: XY+6wnNg5x8lD6QFbRFh/tJ3dEOlcxw9OGoO/F7MEBY=
Subject key identifier: 29:5E:43:DD:3F:A9:30:D7:3B:5E:16:9B:C6:D8:D4:36:46:5A:07:01
Authority key identifier: BA:E2:AA:5E:26:03:F7:CF:95:D7:B0:9A:78:B5:88:AD:CE:FE:32:28
Certificate issuer: /CN=bae2aa5e2603f7cf95d7b09a78b588adcefe3228
Certificate serial: 019F95125C929A3EDE02DF9D20F341425A95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uuKqXiYD98-V17CaeLWIrc7-Mig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.mft
Manifest number: 0113
Signing time: Fri 24 Jul 2026 17:00:36 +0000
Manifest this update: Fri 24 Jul 2026 17:00:36 +0000
Manifest next update: Sat 25 Jul 2026 17:00:36 +0000
Files and hashes: 1: TkW7QsEHj7p4co1qQ-4GY3yy26s.roa (hash: iaZGknezVQgDJrbwMB8HGoEB5UI8hMfa/n4ACZ8oQkM=)
2: uuKqXiYD98-V17CaeLWIrc7-Mig.crl (hash: kAF4vUb6jkRD6DQp7q/a1AniM1/RTripelqVLcdE8dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.mft
rsync://rpki.ripe.net/repository/DEFAULT/uuKqXiYD98-V17CaeLWIrc7-Mig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:5c:92:9a:3e:de:02:df:9d:20:f3:41:42:5a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bae2aa5e2603f7cf95d7b09a78b588adcefe3228
Validity
Not Before: Jul 24 17:00:36 2026 GMT
Not After : Jul 25 17:00:36 2026 GMT
Subject: CN=295e43dd3fa930d73b5e169bc6d8d436465a0701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c6:d0:e0:9f:e7:e3:0e:48:8c:c8:ae:0f:4e:
ce:5e:57:ca:0d:c0:7b:70:8e:a2:dc:93:f0:96:ea:
d0:62:ec:c5:23:6c:42:67:5e:5c:3d:db:27:73:af:
2c:87:a3:bb:b6:92:d9:c0:76:ff:b8:6f:8b:4b:f5:
a0:3f:64:e7:65:8d:fb:db:ad:3e:a9:7e:bd:93:11:
46:d2:70:55:71:fb:b0:f5:32:c1:2c:ce:74:b9:6e:
e2:3f:2e:23:3a:c2:27:df:47:fd:12:54:3c:46:5f:
b2:d3:a2:20:cc:b0:39:52:c5:58:b3:d8:03:d0:9b:
40:c4:2b:5e:70:55:6e:3c:b9:be:fd:a9:63:f1:c6:
41:09:a6:20:a5:ca:03:1b:61:6e:b2:ef:d0:b0:0b:
56:96:a6:c7:bf:b2:c9:e8:0f:e7:09:5a:c2:bd:bd:
4e:20:95:50:f9:89:81:54:54:de:62:b3:4e:8c:b5:
c0:45:e7:15:32:92:59:73:2a:00:9f:69:17:fa:e1:
4f:08:96:2c:e8:09:1b:c2:6f:37:51:96:92:a0:41:
09:00:86:d4:ab:36:31:2c:c6:a1:e7:29:fe:8d:63:
77:0a:f6:6f:be:e5:0c:b0:d1:a6:c0:c3:e1:32:50:
39:c7:4e:18:a8:f1:c3:ac:18:87:0f:da:82:94:c5:
36:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5E:43:DD:3F:A9:30:D7:3B:5E:16:9B:C6:D8:D4:36:46:5A:07:01
X509v3 Authority Key Identifier:
keyid:BA:E2:AA:5E:26:03:F7:CF:95:D7:B0:9A:78:B5:88:AD:CE:FE:32:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uuKqXiYD98-V17CaeLWIrc7-Mig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d7:98:fb:99:c4:c6:dc:27:80:48:2d:db:c5:01:cf:14:ff:
73:7b:22:10:e9:fa:b9:9a:a0:d9:49:28:58:c9:17:81:66:d3:
58:f0:83:25:58:20:ef:a7:fa:f6:c7:8d:1d:cf:92:20:07:8c:
48:8c:82:2b:49:46:db:5d:d0:71:4b:7a:86:7a:18:94:eb:b7:
8b:d5:45:2b:47:2a:e8:1a:ea:2c:53:ae:88:af:ba:ea:e9:1f:
60:77:55:44:13:5a:99:1a:94:1d:2d:2e:6a:7a:b2:35:9b:95:
94:b1:9d:25:06:79:62:58:84:d3:41:f7:74:f2:0b:2f:38:33:
bc:b1:da:50:00:c2:7b:5f:d4:5c:56:8d:26:57:6e:47:06:d8:
a1:dc:35:c5:4a:39:44:e4:cc:94:5e:89:e7:b0:56:17:f3:a5:
32:4f:9c:45:57:86:ac:ec:48:e3:d0:7a:04:39:db:f3:6d:db:
a9:e1:49:04:4e:e7:16:8f:42:21:14:c2:32:18:6e:f7:a9:3d:
c8:a1:90:02:07:cf:31:65:2c:ff:a9:29:bc:80:96:4c:59:07:
52:ff:1f:4a:48:8f:a6:7b:48:ce:b2:4f:78:ef:81:0c:4d:b0:
46:79:6a:11:5e:d9:5e:3c:d6:a8:58:bf:df:9c:06:d5:6d:8d:
21:93:89:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:47:13 2026 by rpki-client