Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
File: h-uX-YyILvQms2ZjQR1AgUMKxCE.mft (raw, json)
Hash identifier: 7A7XnAe2E0x5aiMMm93b3vcCdUUXhOwmXeiOhD9VoxU=
Subject key identifier: 60:C7:35:D3:C9:D8:B8:16:96:8E:BA:A1:37:73:99:F7:F5:F6:F3:BF
Authority key identifier: 87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21
Certificate issuer: /CN=87eb97f98c882ef426b36663411d4081430ac421
Certificate serial: 019F93C9179BCD647A88FB868ADB6229C0A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
Manifest number: 0593
Signing time: Fri 24 Jul 2026 11:00:56 +0000
Manifest this update: Fri 24 Jul 2026 11:00:56 +0000
Manifest next update: Sat 25 Jul 2026 11:00:56 +0000
Files and hashes: 1: h-uX-YyILvQms2ZjQR1AgUMKxCE.crl (hash: I0LmrF9/F7YfggohdsOAVPeMvYuE0e0NRIATWCs+QlU=)
2: sOo_7lt_CItRUPeJIsaf3epL6wo.roa (hash: FUDCuTGox9W1RZs2Qc7K596tec/Dho0eAg3ld5/PpMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:17:9b:cd:64:7a:88:fb:86:8a:db:62:29:c0:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87eb97f98c882ef426b36663411d4081430ac421
Validity
Not Before: Jul 24 11:00:56 2026 GMT
Not After : Jul 25 11:00:56 2026 GMT
Subject: CN=60c735d3c9d8b816968ebaa1377399f7f5f6f3bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d9:0e:fc:b4:30:25:97:ad:6f:df:38:e6:4b:
c7:e8:11:28:49:bf:22:50:10:5a:da:a7:9e:9a:c4:
ac:19:ae:74:46:ac:b6:fe:e8:e6:89:b2:a5:ac:a7:
7e:c3:3f:24:2b:b5:57:a9:60:0e:e1:77:ff:46:0b:
ee:82:35:62:df:62:8e:82:9c:42:b5:9b:51:ce:00:
8f:73:bf:36:c3:f6:74:21:0d:79:7f:63:7e:bb:1c:
07:f1:f6:a3:50:7d:81:2e:40:fc:9f:e0:21:d1:db:
e8:90:16:0c:b0:4d:b1:31:53:91:30:9e:00:8e:ad:
e3:7a:4d:86:b5:59:53:d9:ed:d6:9f:94:77:e3:0a:
a8:04:96:6f:8d:2d:25:02:45:9b:14:26:2f:c1:68:
b8:de:32:4e:cb:7d:d5:13:05:cc:84:09:c4:43:9d:
06:f3:3d:bc:82:0c:31:b0:19:85:9f:25:e2:00:f7:
29:6c:97:a3:80:4b:d5:73:d2:e6:f7:42:78:14:30:
34:52:78:ad:7a:9e:d8:8d:bc:9e:74:d0:2e:88:91:
d6:3c:45:a1:ab:49:4a:ac:76:2f:1d:4d:26:48:2a:
61:eb:3f:76:53:f9:5d:18:b0:c1:49:35:35:93:ca:
2f:37:b2:0c:76:b9:8b:a1:76:7f:32:15:fc:28:87:
f2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C7:35:D3:C9:D8:B8:16:96:8E:BA:A1:37:73:99:F7:F5:F6:F3:BF
X509v3 Authority Key Identifier:
keyid:87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b0:15:1b:90:32:99:7b:ae:e4:d1:bd:fa:a3:b2:05:00:f6:
24:30:d6:3e:84:da:02:43:68:06:db:fd:32:df:ff:63:be:6b:
c0:a5:b5:f0:f3:d7:17:eb:f0:8a:f2:7d:20:61:d7:6d:ac:e6:
a7:81:6b:70:cf:32:22:59:03:be:c6:ad:2c:eb:4a:7a:6a:c3:
49:84:ec:d6:e1:4f:0f:aa:22:4c:e6:2a:fd:28:ed:0f:75:50:
56:88:a2:ab:16:8d:84:30:46:8c:87:1c:b1:3d:5f:43:43:25:
11:87:5b:06:0f:08:64:57:76:eb:c4:65:20:bd:be:b6:a5:74:
52:a8:b4:27:cd:6e:a7:56:e7:32:0d:64:77:72:0a:ee:6b:29:
84:6e:0f:a7:22:bc:99:13:ec:a9:b5:d7:63:75:1f:f4:1e:92:
82:35:ca:95:b7:a8:53:64:5a:b8:4f:72:27:b4:46:32:6c:ae:
12:2d:61:16:d6:62:bd:2d:b4:60:81:07:4f:b3:8d:f5:cb:d2:
dd:d7:a3:af:aa:9b:04:1a:a0:fc:56:9b:61:b5:73:e6:4d:7f:
b1:f6:47:b7:2a:9a:c4:03:06:1f:98:ed:7d:5e:52:e3:d0:68:
77:44:d9:31:8e:bc:d9:33:79:a8:ab:73:1e:a8:37:5c:74:69:
39:65:ad:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:27:46 2026 by rpki-client