Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
File: h-uX-YyILvQms2ZjQR1AgUMKxCE.mft (raw, json)
Hash identifier: h+5FhxnsIGcUNRY2XbwDxBoC4cxcbhWi8DZHzd0gSMs=
Subject key identifier: 8E:3F:95:79:9D:86:BC:E7:44:87:5C:57:ED:E6:76:D6:FC:46:FF:6D
Authority key identifier: 87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21
Certificate issuer: /CN=87eb97f98c882ef426b36663411d4081430ac421
Certificate serial: 019D3752499BD31DB6E91591A9247594176B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
Manifest number: 045A
Signing time: Sun 29 Mar 2026 02:00:32 +0000
Manifest this update: Sun 29 Mar 2026 02:00:32 +0000
Manifest next update: Mon 30 Mar 2026 02:00:32 +0000
Files and hashes: 1: h-uX-YyILvQms2ZjQR1AgUMKxCE.crl (hash: 0jKFYZmr8T5O9+BKjllo/k+T6B3pw14P4yEqJ+i4Kzo=)
2: sOo_7lt_CItRUPeJIsaf3epL6wo.roa (hash: FUDCuTGox9W1RZs2Qc7K596tec/Dho0eAg3ld5/PpMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:49:9b:d3:1d:b6:e9:15:91:a9:24:75:94:17:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87eb97f98c882ef426b36663411d4081430ac421
Validity
Not Before: Mar 29 02:00:32 2026 GMT
Not After : Mar 30 02:00:32 2026 GMT
Subject: CN=8e3f95799d86bce744875c57ede676d6fc46ff6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:df:b6:11:fc:55:c5:ee:89:c8:21:f5:98:e4:
f1:52:ea:08:23:f9:74:83:56:81:ff:4d:a4:d8:3c:
30:ab:2c:21:b5:95:d6:91:ca:f7:d7:70:98:1d:20:
13:c7:4b:c5:a6:96:7f:28:c6:0a:fe:ce:c4:ce:88:
d2:28:3a:0d:6a:c2:9e:96:b7:3f:78:cd:9c:42:a3:
d5:4a:96:23:02:96:ad:45:b3:82:90:ff:87:26:df:
c7:05:4c:f4:f2:7c:85:b6:bb:e6:d7:76:54:ae:f6:
e6:d1:3d:98:4c:3f:6b:3f:13:5e:12:ad:de:ec:5f:
d1:fc:98:32:1c:8b:2f:3b:d0:6c:fa:36:af:c5:ff:
90:ad:26:06:df:4f:12:2a:19:4d:90:bf:a2:c6:02:
01:63:05:4c:84:17:0f:5c:e3:e6:b1:42:c2:e2:d3:
2b:6a:2d:6a:fb:f1:12:27:0b:9a:4b:fc:bc:8d:3c:
b8:c9:40:30:84:97:43:f8:14:ef:43:7a:59:d1:78:
fb:15:42:42:83:1d:70:70:b0:ea:75:18:e5:bb:18:
93:e6:75:c3:ee:49:5b:dd:12:45:a8:a7:d7:4e:fd:
4f:1f:24:1f:67:83:1a:2a:be:ab:f1:ee:4e:b8:e3:
26:b7:2d:d9:d3:ba:21:a1:29:e2:6e:d3:49:25:98:
78:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3F:95:79:9D:86:BC:E7:44:87:5C:57:ED:E6:76:D6:FC:46:FF:6D
X509v3 Authority Key Identifier:
keyid:87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:5f:74:0e:c4:56:04:3e:0e:9d:36:8b:ed:13:49:bb:30:8a:
11:e6:aa:45:7d:1e:f5:12:72:62:6c:5a:e9:5f:f2:52:a6:14:
2e:f0:1a:f3:78:ad:a0:2b:af:41:19:0b:69:99:f2:99:81:e4:
33:58:32:44:a0:5b:14:04:56:41:03:21:4b:ce:a0:89:75:6a:
76:6d:f7:b6:36:4a:29:3f:f5:60:eb:7b:7f:0c:d5:1c:35:de:
0d:95:12:dd:50:ac:20:25:36:53:7b:17:72:d7:f6:ad:77:c7:
21:0c:b8:63:02:14:7f:88:ce:bc:39:09:dc:46:aa:e7:a5:35:
97:c4:1b:b0:57:57:74:64:80:89:3e:80:59:1a:bc:d6:33:81:
6f:49:7a:e0:3c:14:5c:02:7a:05:f6:ed:65:8e:f7:7f:07:63:
b3:21:ec:a1:6c:f1:a3:5a:24:f3:13:4c:5e:a2:74:a5:6b:3e:
34:c7:8a:ab:31:95:c1:6e:84:5f:94:e0:23:20:8f:07:c6:e0:
41:03:1f:10:63:6b:4e:f3:71:2a:34:6a:8a:bb:a9:19:38:98:
95:fe:7e:e2:15:c8:6a:02:f9:43:19:15:4d:cf:f7:0f:c1:0f:
bc:75:15:07:a9:3a:78:a4:f8:e4:e7:e7:96:d8:64:50:77:51:
55:ee:c9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:34 2026 by rpki-client