
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
File: h-uX-YyILvQms2ZjQR1AgUMKxCE.mft (raw, json)
Hash identifier: EtT0JeflaOLAp09nCAeeUkFC9/YLB9gBlYubkXquzUA=
Subject key identifier: EE:E1:A2:62:F4:EA:10:D9:26:FA:9F:C8:69:1D:6E:D5:8F:1C:EC:3A
Authority key identifier: 87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21
Certificate issuer: /CN=87eb97f98c882ef426b36663411d4081430ac421
Certificate serial: 019E3072896187E3781C587F8ED0BAC62371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
Manifest number: 04DB
Signing time: Sat 16 May 2026 11:01:13 +0000
Manifest this update: Sat 16 May 2026 11:01:13 +0000
Manifest next update: Sun 17 May 2026 11:01:13 +0000
Files and hashes: 1: h-uX-YyILvQms2ZjQR1AgUMKxCE.crl (hash: GQ2iZlcIjGL92CcR19bcGSZKHa2EN80WNI38vF17cvY=)
2: sOo_7lt_CItRUPeJIsaf3epL6wo.roa (hash: FUDCuTGox9W1RZs2Qc7K596tec/Dho0eAg3ld5/PpMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:89:61:87:e3:78:1c:58:7f:8e:d0:ba:c6:23:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87eb97f98c882ef426b36663411d4081430ac421
Validity
Not Before: May 16 11:01:13 2026 GMT
Not After : May 17 11:01:13 2026 GMT
Subject: CN=eee1a262f4ea10d926fa9fc8691d6ed58f1cec3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:52:29:28:21:09:2f:51:13:d8:e4:07:3c:1a:
96:79:16:06:3e:94:70:b3:78:82:34:1e:60:8e:46:
ca:08:09:92:80:cc:9e:04:33:6b:63:09:ef:fd:3b:
f7:35:20:3d:56:cf:2f:fc:c6:e9:c4:77:26:9a:27:
25:c9:ae:8b:99:d0:d6:30:5a:61:e9:38:39:3d:8e:
e1:c2:a0:07:f0:f2:ce:68:cd:00:8d:6d:cc:e9:ec:
1e:67:b7:77:75:2e:db:67:86:7f:52:19:53:a5:41:
57:e8:8f:8c:24:7d:24:71:66:b8:5a:bd:97:bb:62:
67:63:0f:d2:00:fc:65:8c:ce:43:81:8c:3c:0b:b2:
0a:61:87:c0:ba:78:5b:c2:11:ec:54:2f:c2:1e:09:
3d:c8:6a:bb:09:de:6a:c5:65:55:b9:9f:72:7c:3c:
67:10:da:06:47:7c:e8:79:78:e0:cb:97:94:3d:5a:
08:3b:10:f4:21:55:a0:8a:2b:06:25:a4:ba:ef:c3:
ee:57:91:a5:72:6c:42:9a:c3:bf:7c:1e:ed:7e:84:
b0:14:96:a3:ec:26:09:d4:af:3f:57:5d:ac:a1:c8:
e9:12:3e:0a:cd:0b:14:05:86:e5:ec:b5:ae:23:4e:
3c:b8:6a:be:95:40:92:ac:13:76:23:13:27:66:65:
6e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E1:A2:62:F4:EA:10:D9:26:FA:9F:C8:69:1D:6E:D5:8F:1C:EC:3A
X509v3 Authority Key Identifier:
keyid:87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:6d:4f:3c:d8:65:2e:04:23:f6:4a:fe:fb:39:e4:26:ad:e4:
8f:2f:28:3b:c8:bc:de:b6:3e:09:62:f2:b4:90:9d:5b:cf:47:
3a:3b:70:0d:a0:ce:73:25:c5:0e:06:8a:52:68:b0:04:e8:4f:
3b:33:39:b6:c6:eb:05:8e:b2:ac:45:5b:d1:50:e1:4e:2b:c8:
5b:25:21:0f:9a:63:3a:d6:b9:c7:c0:6e:74:ac:58:5e:aa:c1:
dd:ce:1f:f6:63:cc:80:8d:34:6b:da:51:3c:1c:8a:d7:b5:2e:
21:9b:2e:fb:12:f4:bc:f3:59:91:89:35:4e:c1:b4:4a:89:41:
df:ab:1f:63:98:7d:d8:ee:2d:ee:6e:8a:95:2f:36:4e:50:0b:
ad:ba:92:5c:ac:11:9f:a0:a1:d4:1d:1b:54:7a:d9:bc:19:05:
6d:95:c2:52:86:bf:c1:1d:db:0b:64:bc:1c:47:25:49:1a:ee:
13:37:40:9e:04:d1:b7:cd:9b:78:ce:39:af:9b:ba:d1:fc:31:
8a:d1:17:c7:ea:de:3b:90:98:9f:f0:64:cd:9d:28:e2:f4:8e:
f5:3a:49:e2:2a:79:4c:37:de:47:99:4d:4e:ee:6b:e4:f8:be:
ac:52:3a:82:a5:85:36:1d:60:6e:ce:f9:8c:d4:3e:11:df:a9:
fa:a9:51:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wcolhh+N4HFh/jtC6xiNxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZWI5N2Y5OGM4ODJlZjQyNmIzNjY2MzQxMWQ0MDgxNDMw
YWM0MjEwHhcNMjYwNTE2MTEwMTEzWhcNMjYwNTE3MTEwMTEzWjAzMTEwLwYDVQQD
EyhlZWUxYTI2MmY0ZWExMGQ5MjZmYTlmYzg2OTFkNmVkNThmMWNlYzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlIpKCEJL1ET2OQHPBqWeRYGPpRw
s3iCNB5gjkbKCAmSgMyeBDNrYwnv/Tv3NSA9Vs8v/MbpxHcmmiclya6LmdDWMFph
6Tg5PY7hwqAH8PLOaM0AjW3M6eweZ7d3dS7bZ4Z/UhlTpUFX6I+MJH0kcWa4Wr2X
u2JnYw/SAPxljM5DgYw8C7IKYYfAunhbwhHsVC/CHgk9yGq7Cd5qxWVVuZ9yfDxn
ENoGR3zoeXjgy5eUPVoIOxD0IVWgiisGJaS678PuV5GlcmxCmsO/fB7tfoSwFJaj
7CYJ1K8/V12socjpEj4KzQsUBYbl7LWuI048uGq+lUCSrBN2IxMnZmVuvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7homL06hDZJvqfyGkdbtWPHOw6MB8GA1UdIwQY
MBaAFIfrl/mMiC70JrNmY0EdQIFDCsQhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaC11WC1ZeUlMdlFtczJaalFSMUFnVU1LeENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kZWE4ZjQtZDY4OC00NTI0LWFmMjkt
M2Y2ZDdkN2VhMWIwLzEvaC11WC1ZeUlMdlFtczJaalFSMUFnVU1LeENFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kZWE4ZjQtZDY4OC00NTI0LWFmMjktM2Y2ZDdkN2VhMWIw
LzEvaC11WC1ZeUlMdlFtczJaalFSMUFnVU1LeENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArm1PPNhl
LgQj9kr++znkJq3kjy8oO8i83rY+CWLytJCdW89HOjtwDaDOcyXFDgaKUmiwBOhP
OzM5tsbrBY6yrEVb0VDhTivIWyUhD5pjOta5x8BudKxYXqrB3c4f9mPMgI00a9pR
PByK17UuIZsu+xL0vPNZkYk1TsG0SolB36sfY5h92O4t7m6KlS82TlALrbqSXKwR
n6Ch1B0bVHrZvBkFbZXCUoa/wR3bC2S8HEclSRruEzdAngTRt82beM45r5u60fwx
itEXx+reO5CYn/BkzZ0o4vSO9TpJ4ip5TDfeR5lNTu5r5Pi+rFI6gqWFNh1gbs75
jNQ+Ed+p+qlRgQ==
-----END CERTIFICATE-----
Generated at Sat May 16 22:01:34 2026 by rpki-client