Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
File: h-uX-YyILvQms2ZjQR1AgUMKxCE.mft (raw, json)
Hash identifier: oe8epQ/TcfLRQ0xDbiH+Sujp0AqvBhFwnE3GEFwcHn8=
Subject key identifier: DB:9B:55:C7:3B:AF:63:F3:1C:CF:95:9E:D0:54:34:5C:85:8C:71:71
Authority key identifier: 87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21
Certificate issuer: /CN=87eb97f98c882ef426b36663411d4081430ac421
Certificate serial: 019F1A1F26E237151320FD6319DA5C144A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
Manifest number: 0554
Signing time: Tue 30 Jun 2026 20:01:16 +0000
Manifest this update: Tue 30 Jun 2026 20:01:16 +0000
Manifest next update: Wed 01 Jul 2026 20:01:16 +0000
Files and hashes: 1: h-uX-YyILvQms2ZjQR1AgUMKxCE.crl (hash: 4i5ZC2q0yvcugj/kPGv999CKheyDUSZW7z62qn5bkNI=)
2: sOo_7lt_CItRUPeJIsaf3epL6wo.roa (hash: FUDCuTGox9W1RZs2Qc7K596tec/Dho0eAg3ld5/PpMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:1f:26:e2:37:15:13:20:fd:63:19:da:5c:14:4a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87eb97f98c882ef426b36663411d4081430ac421
Validity
Not Before: Jun 30 20:01:16 2026 GMT
Not After : Jul 1 20:01:16 2026 GMT
Subject: CN=db9b55c73baf63f31ccf959ed054345c858c7171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:79:be:8c:9b:25:d9:51:79:be:b1:95:ac:ed:
14:45:22:b8:e5:06:a3:b9:c9:51:d4:b2:de:4b:e5:
60:3d:cc:c9:66:55:ef:f8:2c:58:c6:0e:39:cc:d8:
5d:51:ac:e8:08:48:d4:c6:9e:39:da:d5:39:3a:b7:
e7:25:4f:19:4c:39:e8:da:8c:68:8e:c9:02:d7:38:
e7:81:91:c8:75:a5:fc:80:ca:6b:f3:77:ae:59:16:
ef:cb:d4:a1:ab:83:6b:a7:f9:12:a5:ba:03:9d:70:
0b:3e:1e:b4:dc:d0:48:97:91:36:70:51:5e:c1:01:
2e:f6:35:41:ae:eb:be:bc:4e:91:59:10:88:7d:ad:
b6:c6:14:2f:c9:0f:86:b8:1a:fb:21:3d:59:3e:40:
93:21:f0:3b:b8:a6:06:9d:66:c9:17:c6:9f:16:b4:
56:b6:77:09:cb:35:21:f7:eb:18:22:bb:41:87:51:
8c:65:30:1b:01:a2:52:11:80:9f:93:f3:68:9f:19:
a0:18:fb:b3:ad:3d:0e:b4:da:01:3d:6d:c2:a2:61:
ea:16:65:7f:76:80:a8:2c:96:cc:a0:43:25:cb:ef:
8a:a3:b1:2d:90:d7:86:28:75:85:5b:f5:f1:a4:b6:
f3:72:45:f1:e5:36:eb:2a:69:c9:98:ca:e3:e3:e3:
28:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9B:55:C7:3B:AF:63:F3:1C:CF:95:9E:D0:54:34:5C:85:8C:71:71
X509v3 Authority Key Identifier:
keyid:87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:d7:67:d2:1c:f7:12:42:63:12:c8:89:7c:9f:fd:e3:74:12:
1c:6b:6a:2c:46:d1:6a:bc:bd:3b:71:8b:a5:41:87:d3:06:ca:
76:1e:0a:07:70:c8:e5:3f:60:29:58:6a:5b:2f:05:84:ab:d3:
9d:2a:ec:5e:08:6a:54:62:9b:ad:de:0f:f2:b6:6c:35:a6:4a:
ed:08:ed:4b:6f:3c:1f:1f:9e:56:73:65:42:dd:0a:af:6b:69:
cb:19:82:ab:0b:08:43:ec:54:1b:0a:5f:31:2b:f2:e4:22:20:
b7:ee:79:4f:de:e8:b1:b3:90:04:82:ce:1a:f9:ca:9c:f3:51:
39:16:45:f2:f1:11:4f:69:c0:7e:d4:37:cc:08:03:e7:91:91:
f8:82:75:87:1b:5a:03:40:49:47:c3:d7:be:39:76:db:db:04:
c4:56:be:1d:a5:b1:f5:8d:6e:05:c1:28:ec:33:9c:5d:25:74:
84:4b:d6:8b:e7:4b:06:97:ba:e5:6d:08:90:82:c1:e8:de:c0:
81:7f:e1:01:a3:3e:ba:7c:c4:a7:47:40:52:ad:e4:d3:2a:8a:
bf:8e:f3:b4:7d:46:68:42:46:d8:b2:a6:e8:ef:45:04:e4:0d:
14:cb:ca:94:95:0f:8d:9c:25:ac:ea:61:84:eb:83:ef:13:c2:
3e:86:09:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:35:08 2026 by rpki-client