Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.mft
File: uuKqXiYD98-V17CaeLWIrc7-Mig.mft (raw, json)
Hash identifier: EyURhaGCJOnNmn6I8uVcbakeG1+8SM78/Sm3jYnbqCk=
Subject key identifier: 39:C0:D4:DA:18:4C:9F:71:F9:AF:60:EC:9D:7F:E8:E5:26:31:18:9F
Authority key identifier: BA:E2:AA:5E:26:03:F7:CF:95:D7:B0:9A:78:B5:88:AD:CE:FE:32:28
Certificate issuer: /CN=bae2aa5e2603f7cf95d7b09a78b588adcefe3228
Certificate serial: 01A177DE58393386A8C32D700C4F2875F720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uuKqXiYD98-V17CaeLWIrc7-Mig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.mft
Manifest number: 020D
Signing time: Mon 26 Oct 2026 11:00:22 +0000
Manifest this update: Mon 26 Oct 2026 11:00:22 +0000
Manifest next update: Tue 27 Oct 2026 11:00:22 +0000
Files and hashes: 1: TkW7QsEHj7p4co1qQ-4GY3yy26s.roa (hash: iaZGknezVQgDJrbwMB8HGoEB5UI8hMfa/n4ACZ8oQkM=)
2: uuKqXiYD98-V17CaeLWIrc7-Mig.crl (hash: YoIRaru4ScGMlNVy1JTTe/8HZdDKObgEQgSIMX0XUxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.mft
rsync://rpki.ripe.net/repository/DEFAULT/uuKqXiYD98-V17CaeLWIrc7-Mig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:de:58:39:33:86:a8:c3:2d:70:0c:4f:28:75:f7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bae2aa5e2603f7cf95d7b09a78b588adcefe3228
Validity
Not Before: Oct 26 11:00:22 2026 GMT
Not After : Oct 27 11:00:22 2026 GMT
Subject: CN=39c0d4da184c9f71f9af60ec9d7fe8e52631189f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:36:6f:5c:7c:08:20:cd:8e:8d:7c:2f:a9:bd:
a2:60:7c:56:a4:b3:f5:e9:1f:e1:f8:89:00:6e:d7:
b8:65:49:a5:f1:ce:7b:84:aa:ed:87:cd:93:ac:b0:
14:9d:36:2a:42:cf:95:b3:d3:82:67:90:3b:7e:cc:
56:cc:01:1e:1c:a2:df:58:25:f7:6e:dc:f8:b6:e9:
ec:00:2a:ce:e2:de:db:a3:8b:5d:51:57:16:87:d1:
9a:c5:a2:11:99:f0:20:25:1b:fa:00:83:4c:dc:c7:
8b:bb:b8:39:39:38:86:78:c0:24:b0:4b:0d:3a:bc:
b1:ea:5f:ea:fb:e4:30:b1:aa:6f:eb:33:43:86:85:
67:4d:9e:b3:1d:1e:ab:f3:b5:15:71:50:4e:3d:8d:
cc:38:ad:a6:a4:47:f0:21:dc:5f:0a:25:9c:28:c3:
92:61:8b:63:e9:46:87:2e:fb:09:0e:21:90:8d:06:
f6:41:29:c6:a0:81:32:51:df:18:3a:a1:a2:5a:d9:
29:e1:6e:5d:e2:70:f5:c7:a2:0f:5a:50:8e:f9:dc:
8b:71:c2:13:99:31:c4:2b:ac:59:7b:8b:96:f7:36:
aa:b9:0a:04:d7:6c:03:0e:1d:52:1a:ea:44:cc:10:
8c:3a:a1:ac:bd:ee:1c:94:1b:d9:8d:6a:01:db:3f:
96:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C0:D4:DA:18:4C:9F:71:F9:AF:60:EC:9D:7F:E8:E5:26:31:18:9F
X509v3 Authority Key Identifier:
keyid:BA:E2:AA:5E:26:03:F7:CF:95:D7:B0:9A:78:B5:88:AD:CE:FE:32:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uuKqXiYD98-V17CaeLWIrc7-Mig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:28:6e:dc:5d:d5:bb:8a:9e:db:a8:86:be:f9:a6:cd:bc:01:
3a:11:fc:5f:de:61:94:b1:74:36:46:9a:08:37:e6:c4:3c:74:
f6:49:85:a2:aa:da:e2:0c:50:9c:24:01:8a:70:7c:47:8d:55:
19:7e:ad:40:6c:6a:af:9e:65:54:e7:0c:8f:1e:ec:71:ac:5a:
be:41:37:31:37:1c:f2:98:b5:b7:a1:86:75:d9:72:28:d6:cc:
57:e5:09:af:1a:e3:c0:a1:37:5a:94:3a:9d:94:b9:b2:f5:1b:
d6:84:00:43:10:ee:09:f7:82:b7:87:00:1c:ef:47:58:d4:7d:
ec:a5:10:d2:38:54:aa:88:da:df:d0:f3:10:7b:4b:f1:4c:65:
f7:72:cb:f6:49:94:e8:b2:61:c3:d6:36:1e:2e:1c:5e:33:57:
1c:c9:99:0a:1a:43:20:86:21:d3:1b:f6:27:da:31:35:29:db:
2c:f2:49:36:5a:d6:da:38:27:52:95:20:a0:c8:26:71:96:30:
d5:fe:aa:28:9b:d0:a3:55:42:26:b6:db:f2:27:79:11:1a:fd:
f6:5f:a2:b3:0c:34:6b:d2:4b:01:c9:74:e7:03:db:c1:69:8d:
5e:a5:d4:aa:85:15:77:ae:10:d1:38:63:14:cb:73:00:eb:aa:
04:1f:f2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:57:49 2026 by rpki-client