Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.mft
File: uuKqXiYD98-V17CaeLWIrc7-Mig.mft (raw, json)
Hash identifier: 0NEqGW5iigySfW6jYPDQJuwWfH9x3LmYCsBcXgz6x3w=
Subject key identifier: D5:A0:B1:CA:D7:91:A7:E5:8D:6C:41:56:F3:EF:2D:78:91:84:83:CD
Authority key identifier: BA:E2:AA:5E:26:03:F7:CF:95:D7:B0:9A:78:B5:88:AD:CE:FE:32:28
Certificate issuer: /CN=bae2aa5e2603f7cf95d7b09a78b588adcefe3228
Certificate serial: 019EBAD8BE6DFA23DC9A620FB1F8D28F2D0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uuKqXiYD98-V17CaeLWIrc7-Mig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.mft
Manifest number: A2
Signing time: Fri 12 Jun 2026 08:00:27 +0000
Manifest this update: Fri 12 Jun 2026 08:00:27 +0000
Manifest next update: Sat 13 Jun 2026 08:00:27 +0000
Files and hashes: 1: TkW7QsEHj7p4co1qQ-4GY3yy26s.roa (hash: iaZGknezVQgDJrbwMB8HGoEB5UI8hMfa/n4ACZ8oQkM=)
2: uuKqXiYD98-V17CaeLWIrc7-Mig.crl (hash: vpCLYPs63kj/Zve+plK9BTg7B6ef/lg4SxItT4FwvHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.mft
rsync://rpki.ripe.net/repository/DEFAULT/uuKqXiYD98-V17CaeLWIrc7-Mig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:d8:be:6d:fa:23:dc:9a:62:0f:b1:f8:d2:8f:2d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bae2aa5e2603f7cf95d7b09a78b588adcefe3228
Validity
Not Before: Jun 12 08:00:27 2026 GMT
Not After : Jun 13 08:00:27 2026 GMT
Subject: CN=d5a0b1cad791a7e58d6c4156f3ef2d78918483cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:35:6c:c3:36:32:5e:8e:b6:6d:b3:10:c0:cc:
d1:49:67:5a:cf:e6:b8:82:bf:e7:6e:7f:b9:52:90:
8e:8b:f7:6f:f5:ca:fc:a5:4b:a8:7b:f9:59:bf:6c:
77:2b:e5:c4:39:2f:d4:95:c0:ca:e2:a3:85:8e:be:
97:70:a2:df:b1:54:23:1f:6d:6e:61:9d:7d:0e:b7:
d2:f8:00:e1:b1:fa:c1:07:3f:85:1b:4d:f2:3c:a8:
17:33:69:e5:8e:0d:d1:2c:24:35:f1:80:24:30:a5:
e8:d3:24:c9:72:61:29:b0:c9:26:f1:eb:35:86:c7:
c0:fa:d4:d1:5c:3b:a2:7c:ba:3f:48:34:49:f4:8e:
4a:a4:bd:90:f8:2d:4e:ae:be:69:ee:04:c1:c6:1b:
91:c5:55:43:5f:a9:c6:64:1e:b0:27:ed:64:ee:58:
c2:46:d7:19:ea:fb:1a:d1:c2:69:45:81:2e:fd:dd:
aa:f7:bf:79:f1:7c:ed:09:66:65:37:5a:21:34:fe:
e3:27:be:71:97:83:3e:20:f1:1e:c6:96:ea:9f:0e:
ed:25:97:16:b5:98:bb:92:72:cd:96:04:e1:c0:9f:
48:39:f6:bc:f0:42:a8:2b:cb:d0:29:24:03:4d:6f:
9a:a7:cf:41:4d:c7:69:ae:df:47:81:c9:da:86:4e:
68:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A0:B1:CA:D7:91:A7:E5:8D:6C:41:56:F3:EF:2D:78:91:84:83:CD
X509v3 Authority Key Identifier:
keyid:BA:E2:AA:5E:26:03:F7:CF:95:D7:B0:9A:78:B5:88:AD:CE:FE:32:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uuKqXiYD98-V17CaeLWIrc7-Mig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:4f:ac:d2:50:87:0f:9d:98:b8:bf:2a:ed:8d:21:07:33:0f:
d8:76:8d:0e:01:82:70:21:31:5a:34:86:19:14:b4:9f:a8:b1:
14:81:b3:98:ae:ed:43:4b:63:50:40:49:ee:ff:4f:67:a3:e2:
01:ec:ff:c6:4f:0f:ac:6a:a0:8b:ae:af:8e:c3:a8:7e:cf:29:
c8:a0:24:9f:99:d1:4c:1f:32:7f:a2:5e:1e:cd:3a:19:93:7a:
83:3a:8d:77:7c:9e:b7:62:8d:3f:f9:ea:df:7e:8b:59:af:11:
32:09:56:dd:66:07:ed:5d:a5:27:37:65:c7:9b:d2:a8:89:aa:
73:4f:1a:68:98:c6:34:b2:ed:23:c2:d2:b1:34:11:ac:b0:8e:
77:7c:d2:59:86:f8:6c:25:39:dc:cf:9f:46:19:ed:7a:2e:97:
c4:01:a9:ce:9f:e2:1f:00:5b:fd:84:62:2c:cb:24:03:64:f0:
95:b5:fc:5f:a0:f0:53:b0:a4:a1:73:9f:5c:b9:42:d9:7e:95:
c6:6c:3b:8a:c0:76:28:e6:ee:e5:85:b1:51:64:40:b2:7d:e5:
44:4f:8b:41:f3:87:2b:78:4b:74:3f:26:c6:64:72:af:a4:00:
e5:d2:3a:ad:fb:df:ee:fb:53:33:40:87:12:b4:19:b7:c5:41:
b3:93:d2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 10:24:54 2026 by rpki-client