Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
File: h-uX-YyILvQms2ZjQR1AgUMKxCE.mft (raw, json)
Hash identifier: Id8pq1kKc8tKZ/xsgNp7RoYrfkFIP6oyZQulfbg66cg=
Subject key identifier: 02:CF:73:37:16:7D:6E:D0:05:CC:43:E9:AF:5A:78:5E:85:A7:00:15
Authority key identifier: 87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21
Certificate issuer: /CN=87eb97f98c882ef426b36663411d4081430ac421
Certificate serial: 01A0DC17474C8C3B4A7F7CDF629E61D9076A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
Manifest number: 063D
Signing time: Sat 26 Sep 2026 05:01:48 +0000
Manifest this update: Sat 26 Sep 2026 05:01:48 +0000
Manifest next update: Sun 27 Sep 2026 05:01:48 +0000
Files and hashes: 1: h-uX-YyILvQms2ZjQR1AgUMKxCE.crl (hash: 8/HJK2BATysHWbXO9RL/mMW5kkFQIppKRIqyAk5ujgA=)
2: sOo_7lt_CItRUPeJIsaf3epL6wo.roa (hash: FUDCuTGox9W1RZs2Qc7K596tec/Dho0eAg3ld5/PpMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 05:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:17:47:4c:8c:3b:4a:7f:7c:df:62:9e:61:d9:07:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87eb97f98c882ef426b36663411d4081430ac421
Validity
Not Before: Sep 26 05:01:48 2026 GMT
Not After : Sep 27 05:01:48 2026 GMT
Subject: CN=02cf7337167d6ed005cc43e9af5a785e85a70015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:df:81:b5:79:21:ed:9c:cb:a9:81:7f:00:2d:
ac:86:eb:29:67:77:c7:ee:f0:ee:61:05:35:34:3a:
49:c4:1a:9c:e3:57:1e:58:6e:71:c4:86:e2:32:e4:
8d:7c:20:a6:5f:ed:18:b7:28:60:09:04:a2:4e:68:
be:a7:25:24:24:50:b1:57:0d:ae:a5:82:2b:b7:28:
18:66:6f:e7:69:5a:60:6c:db:8e:cb:53:74:90:54:
b2:b0:1f:1c:28:06:68:b5:8c:7c:5f:12:7c:27:3d:
a8:ed:94:69:34:2a:2c:e3:84:aa:9e:ad:cd:cf:04:
7f:1c:54:c8:ac:47:59:45:74:d0:34:c3:44:48:21:
fd:cf:04:dd:e5:36:d7:6d:48:0f:95:2b:e7:f9:76:
79:27:f1:aa:53:db:ac:26:13:c6:68:75:f2:63:67:
1b:d2:a3:b6:79:8f:38:c8:f1:b7:1d:50:2a:2b:42:
b0:8c:0b:7b:d2:5a:3a:05:7f:40:47:e5:60:2a:04:
e6:67:ed:9e:8d:ce:01:6b:00:97:43:a4:71:19:d7:
2c:b9:7a:9d:7b:31:8f:dc:5f:58:7c:ac:63:18:0b:
d2:82:21:93:93:e0:b6:80:b3:6b:ac:2b:c9:d2:1d:
3a:6a:b7:c6:5c:e8:c9:c8:34:2c:06:5e:b9:d6:51:
24:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CF:73:37:16:7D:6E:D0:05:CC:43:E9:AF:5A:78:5E:85:A7:00:15
X509v3 Authority Key Identifier:
keyid:87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:95:e3:cc:e7:63:47:25:2c:62:a8:42:70:52:01:23:d6:88:
1b:9c:3f:93:10:c0:e6:9f:71:f8:86:7b:32:e3:27:f9:f4:f8:
df:ef:71:aa:dc:9c:1a:3c:54:50:dd:cd:08:5e:4f:6f:5f:ac:
dc:66:f2:34:a9:37:11:39:01:2f:06:e3:2c:cb:e7:ef:ac:2f:
a5:de:cd:30:e9:30:a6:26:7b:10:cf:6a:85:7e:10:f7:30:a6:
f9:67:d1:7c:65:45:77:82:53:53:64:06:bd:13:2d:2a:d6:b1:
99:c3:34:1a:4d:67:4a:84:e0:c7:e4:21:60:a6:06:8b:5d:66:
22:e9:5e:2e:cc:71:64:6f:45:16:15:53:74:a8:f7:6f:fa:12:
cd:84:87:5a:ca:49:3f:89:7a:9b:88:a0:f9:23:f6:eb:58:32:
b6:d7:50:18:2d:ae:7f:b3:42:a6:57:3a:94:8c:3c:d5:19:47:
b0:07:86:70:3b:e5:89:93:0e:03:54:de:4d:41:d0:f8:7f:90:
3e:73:3d:91:23:13:9c:05:a7:cd:91:1a:3e:98:83:95:74:6a:
7a:1f:94:c7:7b:d1:f9:0b:2d:72:ca:3a:2f:81:37:80:84:24:
22:bb:41:92:3f:39:61:3d:38:de:f3:86:bc:22:c7:a3:8c:07:
db:ce:0a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:53:44 2026 by rpki-client