Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
File: h-uX-YyILvQms2ZjQR1AgUMKxCE.mft (raw, json)
Hash identifier: FD2cvhtKatzVmcP4zLgQgo8Os1rFlZDzwhW0SvqhFw4=
Subject key identifier: D4:BD:61:32:B0:DE:90:7D:79:CF:EB:8D:BC:E3:ED:E5:21:AB:71:C3
Authority key identifier: 87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21
Certificate issuer: /CN=87eb97f98c882ef426b36663411d4081430ac421
Certificate serial: 019E1F10B9A0F3E6D7FE24F3D0EAB3FA5F95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
Manifest number: 04D2
Signing time: Wed 13 May 2026 02:00:50 +0000
Manifest this update: Wed 13 May 2026 02:00:50 +0000
Manifest next update: Thu 14 May 2026 02:00:50 +0000
Files and hashes: 1: h-uX-YyILvQms2ZjQR1AgUMKxCE.crl (hash: dplgCT57eO6fwv7EQTqe7V3P4WjLXsVDjZHBOzY9ytw=)
2: sOo_7lt_CItRUPeJIsaf3epL6wo.roa (hash: FUDCuTGox9W1RZs2Qc7K596tec/Dho0eAg3ld5/PpMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:b9:a0:f3:e6:d7:fe:24:f3:d0:ea:b3:fa:5f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87eb97f98c882ef426b36663411d4081430ac421
Validity
Not Before: May 13 02:00:50 2026 GMT
Not After : May 14 02:00:50 2026 GMT
Subject: CN=d4bd6132b0de907d79cfeb8dbce3ede521ab71c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8e:d4:55:47:d5:d9:39:23:73:9a:5a:cf:40:
ab:0d:d8:ae:c2:34:88:4f:25:b3:3b:22:69:a8:5d:
bc:e8:ac:21:f3:38:55:ef:09:6b:89:b9:3c:e5:f1:
39:db:ec:a7:ab:b6:03:b0:3c:57:9d:27:9d:3d:7a:
78:b6:0d:8a:77:c7:26:61:d1:7f:46:03:26:19:37:
78:22:7c:4c:6d:91:7b:f6:d5:0d:c9:d1:23:3e:60:
59:9e:81:d4:3e:00:72:35:7b:9e:b4:5f:df:a8:a2:
bd:35:02:ae:30:17:b4:70:82:c5:c8:d7:2c:7b:83:
b2:7a:d1:b7:37:99:70:85:f7:05:70:0e:b4:11:be:
a5:13:ac:70:1e:e4:3e:ae:af:68:6a:25:ae:ba:fc:
dd:be:e1:fa:b3:b5:78:84:d5:ee:14:80:ac:10:86:
69:20:54:68:de:1d:1d:f9:df:c6:1a:77:cb:c4:cd:
a2:d4:1a:8e:53:0a:e3:b7:cd:0d:94:f5:c5:09:59:
0c:00:21:65:96:63:bd:02:8b:75:5e:23:d8:16:3e:
e3:ee:5d:44:19:c6:b4:c8:65:2b:1c:35:66:39:dc:
4c:28:23:63:8f:d1:f2:09:cd:0e:bb:1d:c9:04:b6:
a2:6c:fb:9f:95:75:b4:bd:7b:e3:3a:c6:26:cb:01:
9e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BD:61:32:B0:DE:90:7D:79:CF:EB:8D:BC:E3:ED:E5:21:AB:71:C3
X509v3 Authority Key Identifier:
keyid:87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:39:52:4d:84:2c:b5:b2:6f:98:0b:53:75:b1:c9:a5:4c:be:
af:32:a4:0d:4d:b8:49:6e:0d:8f:fd:86:ec:14:c3:e9:a6:53:
6a:c3:85:94:96:4b:41:3f:8d:c5:47:8f:6c:e6:05:64:b5:28:
51:0b:58:eb:69:ab:d3:aa:bc:c7:f1:c8:c2:16:4d:1f:9b:69:
38:69:dd:df:c7:c6:f1:e4:18:b5:d5:ef:99:a6:ca:e6:b9:78:
a3:d2:02:87:a5:bb:bb:95:ee:05:4c:ee:41:8a:b5:41:47:5b:
f2:7c:c6:3a:e3:d4:f7:a6:3b:12:97:60:00:ba:55:a0:77:0e:
9b:84:d5:ae:2c:03:68:27:10:e5:c6:a1:ab:79:28:5b:98:60:
af:da:e0:ba:b0:08:02:b1:e0:88:48:61:e0:43:28:9d:cc:80:
d7:00:ad:b2:76:1b:e3:d4:71:2d:4f:ca:9d:ee:e5:63:3f:98:
d6:93:13:83:c9:ed:80:d1:81:57:50:b8:bf:19:36:39:be:33:
39:d2:5a:0c:59:32:d3:fc:b7:8a:07:75:63:5e:11:25:1d:5b:
0e:75:66:f6:14:69:81:2b:b7:88:6b:51:6f:1e:6e:15:47:10:
09:1e:b2:50:65:19:2b:e6:68:05:39:f0:ef:2e:b4:98:c9:7d:
2f:f7:dd:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fELmg8+bX/iTz0Oqz+l+VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZWI5N2Y5OGM4ODJlZjQyNmIzNjY2MzQxMWQ0MDgxNDMw
YWM0MjEwHhcNMjYwNTEzMDIwMDUwWhcNMjYwNTE0MDIwMDUwWjAzMTEwLwYDVQQD
EyhkNGJkNjEzMmIwZGU5MDdkNzljZmViOGRiY2UzZWRlNTIxYWI3MWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqo7UVUfV2Tkjc5paz0CrDdiuwjSI
TyWzOyJpqF286Kwh8zhV7wlribk85fE52+ynq7YDsDxXnSedPXp4tg2Kd8cmYdF/
RgMmGTd4InxMbZF79tUNydEjPmBZnoHUPgByNXuetF/fqKK9NQKuMBe0cILFyNcs
e4OyetG3N5lwhfcFcA60Eb6lE6xwHuQ+rq9oaiWuuvzdvuH6s7V4hNXuFICsEIZp
IFRo3h0d+d/GGnfLxM2i1BqOUwrjt80NlPXFCVkMACFllmO9Aot1XiPYFj7j7l1E
Gca0yGUrHDVmOdxMKCNjj9HyCc0Oux3JBLaibPuflXW0vXvjOsYmywGevQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNS9YTKw3pB9ec/rjbzj7eUhq3HDMB8GA1UdIwQY
MBaAFIfrl/mMiC70JrNmY0EdQIFDCsQhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaC11WC1ZeUlMdlFtczJaalFSMUFnVU1LeENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kZWE4ZjQtZDY4OC00NTI0LWFmMjkt
M2Y2ZDdkN2VhMWIwLzEvaC11WC1ZeUlMdlFtczJaalFSMUFnVU1LeENFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kZWE4ZjQtZDY4OC00NTI0LWFmMjktM2Y2ZDdkN2VhMWIw
LzEvaC11WC1ZeUlMdlFtczJaalFSMUFnVU1LeENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwDlSTYQs
tbJvmAtTdbHJpUy+rzKkDU24SW4Nj/2G7BTD6aZTasOFlJZLQT+NxUePbOYFZLUo
UQtY62mr06q8x/HIwhZNH5tpOGnd38fG8eQYtdXvmabK5rl4o9ICh6W7u5XuBUzu
QYq1QUdb8nzGOuPU96Y7EpdgALpVoHcOm4TVriwDaCcQ5cahq3koW5hgr9rgurAI
ArHgiEhh4EMoncyA1wCtsnYb49RxLU/Kne7lYz+Y1pMTg8ntgNGBV1C4vxk2Ob4z
OdJaDFky0/y3igd1Y14RJR1bDnVm9hRpgSu3iGtRbx5uFUcQCR6yUGUZK+ZoBTnw
7y60mMl9L/fd2g==
-----END CERTIFICATE-----
Generated at Wed May 13 05:13:23 2026 by rpki-client