Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
File: h-uX-YyILvQms2ZjQR1AgUMKxCE.mft (raw, json)
Hash identifier: 1bg+hsT0QRtryMeqmWAuvKegsYp+O04VoBq5tDcHQ5U=
Subject key identifier: 55:7C:A7:57:DF:E1:6D:46:32:9E:9E:7B:83:A5:6D:86:2D:F9:E5:99
Authority key identifier: 87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21
Certificate issuer: /CN=87eb97f98c882ef426b36663411d4081430ac421
Certificate serial: 01A14A2A2C3E79E333BE32C46ACF2F769FED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
Manifest number: 0676
Signing time: Sat 17 Oct 2026 14:00:40 +0000
Manifest this update: Sat 17 Oct 2026 14:00:40 +0000
Manifest next update: Sun 18 Oct 2026 14:00:40 +0000
Files and hashes: 1: h-uX-YyILvQms2ZjQR1AgUMKxCE.crl (hash: IpU/e3PPx4YypxPot8H65hrgk6I2Q4ZO7x3bCxw2mSc=)
2: sOo_7lt_CItRUPeJIsaf3epL6wo.roa (hash: FUDCuTGox9W1RZs2Qc7K596tec/Dho0eAg3ld5/PpMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4a:2a:2c:3e:79:e3:33:be:32:c4:6a:cf:2f:76:9f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87eb97f98c882ef426b36663411d4081430ac421
Validity
Not Before: Oct 17 14:00:40 2026 GMT
Not After : Oct 18 14:00:40 2026 GMT
Subject: CN=557ca757dfe16d46329e9e7b83a56d862df9e599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c1:db:9d:cc:7c:9f:26:1d:6a:c4:7c:fb:55:
c1:7f:10:d3:38:c9:b2:05:7d:d2:15:23:05:a9:74:
b8:2c:2d:b2:8e:37:5f:58:94:75:cc:0b:79:12:2d:
0b:03:68:39:db:2a:18:16:31:16:3d:44:b4:d4:68:
db:2f:37:13:3b:24:6d:39:b7:fb:13:9b:09:44:86:
43:3a:29:60:e4:a6:f3:b4:b0:28:ac:f2:90:42:b9:
e1:40:1f:27:99:5b:15:4d:8e:70:11:97:14:17:00:
b6:2a:93:f6:da:08:87:9f:20:96:86:5e:1e:cc:66:
46:61:44:e9:8d:8f:75:a6:10:51:01:25:df:87:ec:
38:56:7d:5f:ad:3b:46:bd:0d:3d:11:ac:11:b2:2d:
db:d7:1f:01:50:4e:98:eb:d6:f4:89:4a:93:ee:ed:
3d:c8:57:1e:b0:8a:94:e6:88:23:83:e8:51:19:d5:
54:e2:b3:4f:62:df:01:b9:8f:0a:ee:02:4a:e2:00:
70:d4:53:6e:4e:12:cd:4b:eb:cb:ec:3a:e3:0a:93:
03:b0:4f:89:68:79:82:42:13:cd:3a:3b:28:1f:50:
4a:09:fc:4d:76:ae:eb:df:d6:70:9d:85:e5:7e:c7:
e0:c0:c0:62:81:71:fb:ca:8f:f6:50:2b:71:eb:24:
6c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7C:A7:57:DF:E1:6D:46:32:9E:9E:7B:83:A5:6D:86:2D:F9:E5:99
X509v3 Authority Key Identifier:
keyid:87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:c2:0b:e7:fd:49:d6:40:1a:c8:58:0b:77:7a:0c:8b:3f:96:
cd:ec:fb:59:6e:b7:7f:ca:97:c3:35:a0:22:f3:ef:74:55:62:
00:cd:48:46:99:cd:99:3b:ea:58:e9:23:28:cd:a5:df:67:05:
61:03:b5:3a:a0:37:ff:b9:a6:c4:e5:8d:c4:d8:73:20:04:c1:
7e:02:6a:f3:0c:cc:18:96:6d:f0:75:a3:d1:cc:ad:6c:95:77:
e9:b9:78:ca:e3:e3:45:5f:f3:46:a7:38:94:84:44:26:44:a4:
72:b5:ee:3e:a7:46:b8:0b:b5:cf:65:39:2a:28:48:34:7d:f6:
4c:79:a8:6c:8b:3e:9b:2e:8c:18:30:4f:b3:85:a6:db:03:fa:
c8:21:51:32:05:27:cf:38:fb:1f:20:37:19:be:99:b1:d5:ea:
68:0c:69:fe:7a:80:c4:94:03:df:61:74:b5:3a:74:7c:90:9c:
78:41:c1:67:01:cc:d3:d0:e7:95:44:56:c3:da:22:2b:7e:ed:
4b:17:27:83:27:f9:b8:7d:69:65:51:b0:ac:11:70:e6:7a:06:
d1:b9:d4:04:f1:4c:7d:06:88:11:cf:5d:0f:ad:f8:9d:40:5d:
e6:62:98:1d:02:96:61:3b:ff:5b:0d:d7:0c:66:a8:30:44:35:
56:d3:a4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 02:11:10 2026 by rpki-client