Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.mft
File: uuKqXiYD98-V17CaeLWIrc7-Mig.mft (raw, json)
Hash identifier: uCBfSNaivq1JHbPKsW41JjimEhPi5zvqEFX+ro8wE8E=
Subject key identifier: BD:F8:AD:F4:FD:F8:CF:AD:B7:6D:C3:A4:E3:50:3E:38:0E:6D:C5:05
Authority key identifier: BA:E2:AA:5E:26:03:F7:CF:95:D7:B0:9A:78:B5:88:AD:CE:FE:32:28
Certificate issuer: /CN=bae2aa5e2603f7cf95d7b09a78b588adcefe3228
Certificate serial: 019DD12C45119A18A6DE3B2A7F4FE66612F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uuKqXiYD98-V17CaeLWIrc7-Mig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.mft
Manifest number: 29
Signing time: Mon 27 Apr 2026 23:00:32 +0000
Manifest this update: Mon 27 Apr 2026 23:00:32 +0000
Manifest next update: Tue 28 Apr 2026 23:00:32 +0000
Files and hashes: 1: TkW7QsEHj7p4co1qQ-4GY3yy26s.roa (hash: iaZGknezVQgDJrbwMB8HGoEB5UI8hMfa/n4ACZ8oQkM=)
2: uuKqXiYD98-V17CaeLWIrc7-Mig.crl (hash: 4g7zZN3uvkP0dqDb/kvFeDKMVJEIvIwE8hbcjT2cq3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.mft
rsync://rpki.ripe.net/repository/DEFAULT/uuKqXiYD98-V17CaeLWIrc7-Mig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 23:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:2c:45:11:9a:18:a6:de:3b:2a:7f:4f:e6:66:12:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bae2aa5e2603f7cf95d7b09a78b588adcefe3228
Validity
Not Before: Apr 27 23:00:32 2026 GMT
Not After : Apr 28 23:00:32 2026 GMT
Subject: CN=bdf8adf4fdf8cfadb76dc3a4e3503e380e6dc505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:31:6d:32:ee:58:de:9e:07:9d:15:8e:1e:c1:
3b:47:12:99:6d:ac:72:e6:b9:91:0f:68:9d:f1:8f:
5c:3b:c8:79:de:54:d2:fd:cd:de:74:52:8b:f5:0f:
ad:36:eb:6f:0b:92:76:0e:e4:cd:b1:ab:20:5b:c3:
83:1e:3d:7c:ed:6f:5a:3c:ec:40:ca:7b:a8:a5:f2:
6b:fe:04:23:82:93:24:70:8e:35:c7:ca:bc:00:cf:
d3:d2:6e:04:79:31:98:b7:69:4e:da:32:64:95:05:
ee:e0:64:fd:b6:d8:b9:7c:b7:8e:1c:07:4e:32:f5:
85:36:8e:e0:43:c9:9c:02:15:ab:33:8c:ef:b0:ca:
ad:c4:05:ef:f2:d5:38:40:6d:c3:30:16:8e:3a:ce:
ca:ce:d0:24:c4:1f:76:b0:9a:97:39:8f:3b:e4:b0:
c7:91:10:20:df:44:8c:6c:24:a1:fc:66:1a:ea:3b:
8a:e2:96:93:0f:7f:ec:5a:56:a3:b0:56:48:24:8e:
a1:ca:c2:24:d0:85:5d:7f:a3:cc:6e:a9:db:0d:1b:
85:d0:73:df:dd:3a:6b:60:99:91:dc:a6:a8:39:97:
6a:31:68:b5:1d:b4:1d:58:62:d8:db:ac:3b:94:86:
c7:b6:3f:d1:04:98:31:be:80:de:8a:58:04:b5:71:
a3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F8:AD:F4:FD:F8:CF:AD:B7:6D:C3:A4:E3:50:3E:38:0E:6D:C5:05
X509v3 Authority Key Identifier:
keyid:BA:E2:AA:5E:26:03:F7:CF:95:D7:B0:9A:78:B5:88:AD:CE:FE:32:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uuKqXiYD98-V17CaeLWIrc7-Mig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:84:4b:a2:2e:a5:6a:b7:c6:2e:34:e9:66:d7:5d:a8:9c:73:
09:5a:37:58:e2:fb:64:ff:7c:e3:fa:b6:8d:16:a1:2e:7a:84:
45:81:09:a5:c5:cd:93:2e:ce:59:bf:c5:73:17:f0:2b:34:7e:
73:00:44:32:86:64:63:14:e1:e2:13:07:bf:80:e0:6c:d9:99:
c1:67:ad:81:0b:00:af:47:50:06:49:08:c8:28:f1:40:06:5d:
d3:0f:90:0b:b8:4e:b3:95:a5:3c:b9:b7:48:0a:1b:fc:2f:7c:
b0:b6:6a:d0:0f:f2:57:4c:8c:ec:33:60:9a:e8:57:a7:96:e2:
83:ba:14:b1:4f:42:a9:10:ed:b6:bb:12:cd:69:16:85:28:e8:
03:23:86:45:38:32:ee:f8:35:57:1c:bf:90:60:47:0f:44:43:
8c:0a:4a:3c:a5:65:47:1b:7e:3e:19:8a:c4:5f:92:19:d9:ac:
bc:5c:fe:3b:cf:44:58:26:9f:5b:c5:98:ea:e9:1b:f2:78:9b:
77:d0:a3:4f:fe:56:c7:4e:5f:08:3b:26:3d:f4:63:0b:1e:e6:
5a:61:ae:54:b6:4c:28:aa:b5:5b:ec:92:90:76:5d:3c:4f:b9:
92:01:c6:eb:b4:92:b6:0a:5b:9a:39:f7:e8:ff:06:43:bf:84:
f0:8e:f0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 04:38:06 2026 by rpki-client