Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft
File: hUu3qjkIyZjePEL34YSVOLBZJhc.mft (raw, json)
Hash identifier: mV+cy2JdIDvcYfE+k7Zomw7BHV+wXsA4NVc6ludLquQ=
Subject key identifier: 60:D0:1B:85:B4:D3:18:CF:32:85:15:D2:6E:C2:9A:38:D8:C7:12:6E
Authority key identifier: 85:4B:B7:AA:39:08:C9:98:DE:3C:42:F7:E1:84:95:38:B0:59:26:17
Certificate issuer: /CN=854bb7aa3908c998de3c42f7e1849538b0592617
Certificate serial: 019E1F481134F8E564CE4DC6959864A98175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft
Manifest number: 1189
Signing time: Wed 13 May 2026 03:01:17 +0000
Manifest this update: Wed 13 May 2026 03:01:17 +0000
Manifest next update: Thu 14 May 2026 03:01:17 +0000
Files and hashes: 1: 7MqIqmbLOZCvYlEMG9u9KyE6Ytk.roa (hash: zRxcr077zFRaZAIgIWm+iYU3FdaVL/l6dLqFNAGhIKM=)
2: hUu3qjkIyZjePEL34YSVOLBZJhc.crl (hash: iVgUdQhJLpfXd877AEQQX4x161hxtrHriegR7OBlUl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:48:11:34:f8:e5:64:ce:4d:c6:95:98:64:a9:81:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854bb7aa3908c998de3c42f7e1849538b0592617
Validity
Not Before: May 13 03:01:17 2026 GMT
Not After : May 14 03:01:17 2026 GMT
Subject: CN=60d01b85b4d318cf328515d26ec29a38d8c7126e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:31:bc:c1:c0:b9:32:5d:65:9f:46:e3:63:20:
e5:07:9d:0e:25:f9:80:6e:3d:60:49:b5:58:45:cc:
21:0e:97:87:6b:a2:04:05:98:1b:f1:a7:3f:66:a8:
b2:75:70:c5:aa:0f:28:a7:aa:0d:e5:57:55:fa:6c:
b7:e9:43:0f:00:5e:be:ca:4b:90:3a:cc:2b:4d:00:
60:40:f2:1c:28:9a:59:15:d9:4e:59:99:0b:2e:c7:
b0:95:e4:71:48:9f:26:99:70:9f:45:ed:16:6a:45:
e7:54:b7:af:ee:c4:a0:8c:1d:9b:c9:e4:af:75:5d:
5e:7f:aa:31:c2:9a:a6:e0:e2:74:ee:9c:72:e1:ce:
1f:f5:af:64:06:28:7d:85:45:ca:ee:f7:42:bb:c2:
10:84:84:e0:f8:06:75:1d:c9:02:79:49:17:63:fd:
08:04:51:5b:87:05:ec:34:fe:14:92:2f:fb:3c:fc:
5e:79:fe:0c:d1:20:b0:de:8d:df:37:c6:c5:2c:1e:
bb:b3:07:00:a6:a0:d7:36:66:7d:ce:fa:ef:36:c5:
c9:3d:f0:c1:16:af:84:e7:c8:b7:ae:6c:ea:d9:55:
e4:a5:e7:6e:a9:c9:ba:31:f6:08:00:49:50:6e:e2:
59:a9:2f:e4:36:fa:ca:03:5c:d5:84:80:7e:5c:1b:
ad:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D0:1B:85:B4:D3:18:CF:32:85:15:D2:6E:C2:9A:38:D8:C7:12:6E
X509v3 Authority Key Identifier:
keyid:85:4B:B7:AA:39:08:C9:98:DE:3C:42:F7:E1:84:95:38:B0:59:26:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:28:c7:22:42:d5:bb:ae:e2:71:71:49:61:d2:a4:4d:f4:d6:
d5:59:f5:78:7d:44:57:bd:2b:87:b4:20:4b:98:12:c8:15:0b:
f3:c2:a8:18:e8:50:b8:1b:96:65:1b:e4:43:2a:dd:34:21:b1:
a4:ea:03:7d:ca:c5:7f:1d:fb:e2:ea:65:3d:32:68:00:25:6e:
80:df:d9:28:9d:cf:e9:35:e5:6c:bd:ef:85:fe:8f:37:96:21:
50:70:54:ca:89:c9:7a:2d:b1:42:45:6f:b3:fb:32:1e:c2:45:
ba:00:75:47:32:f1:64:2f:96:46:63:b5:6b:bc:9e:1c:1f:df:
a8:ed:54:83:a1:d2:24:16:6c:8d:10:63:bc:8e:d7:5f:67:81:
76:e3:a8:93:db:b4:7c:76:2e:58:4d:6a:6e:f4:7e:ae:b3:7b:
6e:61:1b:cb:8a:dd:c0:45:fd:cd:0a:19:c9:93:35:35:f8:f2:
55:a4:61:4b:59:80:f0:0a:cf:a5:42:e7:bb:f6:f2:a9:ae:63:
30:d6:1f:db:ea:3a:60:2e:69:17:4d:a1:19:e1:89:2b:ee:c3:
32:98:a1:82:54:b2:f0:ff:2e:cc:79:e5:e4:4f:67:3d:51:9a:
b0:5e:fc:2a:b8:f6:fc:bc:f9:7a:58:fc:47:e5:4d:9d:19:a5:
90:a6:a1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:52:39 2026 by rpki-client