Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
File: h-uX-YyILvQms2ZjQR1AgUMKxCE.mft (raw, json)
Hash identifier: gVzvA1HriTRyMB+dIrZoh8E70Z8FFRCEw8Liad6hhzs=
Subject key identifier: F2:CB:EB:23:9C:17:DE:0C:95:81:81:A1:FF:81:91:BD:A5:A7:0C:8A
Authority key identifier: 87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21
Certificate issuer: /CN=87eb97f98c882ef426b36663411d4081430ac421
Certificate serial: 019CB0240EABD8F53F658B73B0D5D5EE467F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
Manifest number: 0414
Signing time: Mon 02 Mar 2026 20:01:18 +0000
Manifest this update: Mon 02 Mar 2026 20:01:18 +0000
Manifest next update: Tue 03 Mar 2026 20:01:18 +0000
Files and hashes: 1: h-uX-YyILvQms2ZjQR1AgUMKxCE.crl (hash: OL96G3AFnI+UuK+Gs6e8GPTBaV2B3ez8n2Pydu6aaxk=)
2: sOo_7lt_CItRUPeJIsaf3epL6wo.roa (hash: FUDCuTGox9W1RZs2Qc7K596tec/Dho0eAg3ld5/PpMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 20:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:24:0e:ab:d8:f5:3f:65:8b:73:b0:d5:d5:ee:46:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87eb97f98c882ef426b36663411d4081430ac421
Validity
Not Before: Mar 2 20:01:18 2026 GMT
Not After : Mar 3 20:01:18 2026 GMT
Subject: CN=f2cbeb239c17de0c958181a1ff8191bda5a70c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4f:9d:2f:8c:c4:d5:ce:b9:be:25:08:7d:7e:
3b:ef:c2:a7:67:4f:fe:f8:1f:e8:bc:1c:a5:0b:fb:
1d:77:96:99:ae:c8:c1:c8:c2:e2:8e:42:a4:f8:2e:
cc:c5:24:c4:9d:1f:4f:af:39:d4:9b:30:f6:b6:64:
cf:9f:13:17:7c:5a:c0:7a:d8:0d:a3:69:fe:29:68:
79:37:b0:fa:2c:b6:77:1c:e7:71:36:2b:3a:bf:4d:
3e:6e:bb:d4:de:24:12:78:7c:8b:c1:09:7a:6e:ff:
24:49:f5:fc:7e:96:bd:0b:23:23:68:d9:d2:9d:0b:
5e:2c:5c:a1:b6:b6:a5:fe:42:11:ff:08:d6:40:af:
d0:37:eb:f7:bb:a3:d1:2e:53:fe:e5:74:b6:e3:9e:
ea:48:53:8d:11:c4:4c:80:9a:30:e5:1d:cd:e5:6e:
66:5c:a1:95:ca:fe:fe:62:91:cb:43:dd:1d:d9:9a:
3e:30:b4:9f:62:69:b2:3b:fe:b1:4d:25:05:55:74:
40:c6:ee:45:41:35:25:63:f0:ee:f1:8c:6d:6b:58:
72:6c:51:d5:cd:eb:ca:98:d3:fc:50:8f:fc:70:d7:
2b:a9:ad:b3:d3:d7:b7:73:9e:98:e2:e7:e2:1c:b0:
ae:e9:3b:a7:f0:c0:b4:ee:05:cf:3e:59:dc:6b:45:
da:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CB:EB:23:9C:17:DE:0C:95:81:81:A1:FF:81:91:BD:A5:A7:0C:8A
X509v3 Authority Key Identifier:
keyid:87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d7:ba:68:69:ab:84:2f:4f:af:47:ad:9d:68:5d:2c:8c:25:
1c:53:5d:6e:8a:40:1e:e7:03:8b:77:99:2a:c8:74:90:e0:e1:
3a:24:ff:06:36:ee:fc:a7:57:64:dc:b1:70:93:23:2c:6b:eb:
e1:67:8d:ba:f1:b4:c6:5b:7a:b5:76:bd:70:e2:61:a5:0c:0f:
94:b8:48:bc:5e:5f:f9:da:98:3f:7e:53:38:d9:0c:4b:bb:32:
11:0b:6c:71:55:01:0a:e3:66:c1:3d:bb:91:f6:88:d6:9e:3b:
df:7b:e8:e6:d9:e2:e0:a3:c2:a4:2b:c0:15:e2:1a:81:90:64:
08:68:30:2e:5e:7a:2f:45:81:4f:8d:4c:8a:1a:d2:ad:77:3b:
9b:71:f5:4d:67:0e:fc:e7:3f:37:07:5f:81:de:07:92:6e:c1:
83:82:8c:d0:a3:78:44:cf:7f:56:0d:89:dc:cb:40:93:e8:9b:
93:99:45:d4:35:97:86:62:bf:14:68:7d:dd:8d:ec:2e:58:91:
f9:c4:d0:f9:15:ea:f2:74:32:66:c5:44:e8:3b:84:fc:dc:46:
3e:59:0d:d2:b1:c2:9d:45:bb:ae:2f:8a:d8:88:ed:c1:2a:c9:
b0:25:21:6a:70:27:b7:86:9e:ea:b7:34:36:24:ab:b0:ec:32:
01:6f:f6:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZywJA6r2PU/ZYtzsNXV7kZ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZWI5N2Y5OGM4ODJlZjQyNmIzNjY2MzQxMWQ0MDgxNDMw
YWM0MjEwHhcNMjYwMzAyMjAwMTE4WhcNMjYwMzAzMjAwMTE4WjAzMTEwLwYDVQQD
EyhmMmNiZWIyMzljMTdkZTBjOTU4MTgxYTFmZjgxOTFiZGE1YTcwYzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvk+dL4zE1c65viUIfX4778KnZ0/+
+B/ovBylC/sdd5aZrsjByMLijkKk+C7MxSTEnR9PrznUmzD2tmTPnxMXfFrAetgN
o2n+KWh5N7D6LLZ3HOdxNis6v00+brvU3iQSeHyLwQl6bv8kSfX8fpa9CyMjaNnS
nQteLFyhtral/kIR/wjWQK/QN+v3u6PRLlP+5XS2457qSFONEcRMgJow5R3N5W5m
XKGVyv7+YpHLQ90d2Zo+MLSfYmmyO/6xTSUFVXRAxu5FQTUlY/Du8Yxta1hybFHV
zevKmNP8UI/8cNcrqa2z09e3c56Y4ufiHLCu6Tun8MC07gXPPlnca0XaDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLL6yOcF94MlYGBof+Bkb2lpwyKMB8GA1UdIwQY
MBaAFIfrl/mMiC70JrNmY0EdQIFDCsQhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaC11WC1ZeUlMdlFtczJaalFSMUFnVU1LeENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kZWE4ZjQtZDY4OC00NTI0LWFmMjkt
M2Y2ZDdkN2VhMWIwLzEvaC11WC1ZeUlMdlFtczJaalFSMUFnVU1LeENFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kZWE4ZjQtZDY4OC00NTI0LWFmMjktM2Y2ZDdkN2VhMWIw
LzEvaC11WC1ZeUlMdlFtczJaalFSMUFnVU1LeENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiNe6aGmr
hC9Pr0etnWhdLIwlHFNdbopAHucDi3eZKsh0kODhOiT/Bjbu/KdXZNyxcJMjLGvr
4WeNuvG0xlt6tXa9cOJhpQwPlLhIvF5f+dqYP35TONkMS7syEQtscVUBCuNmwT27
kfaI1p4733vo5tni4KPCpCvAFeIagZBkCGgwLl56L0WBT41MihrSrXc7m3H1TWcO
/Oc/Nwdfgd4Hkm7Bg4KM0KN4RM9/Vg2J3MtAk+ibk5lF1DWXhmK/FGh93Y3sLliR
+cTQ+RXq8nQyZsVE6DuE/NxGPlkN0rHCnUW7ri+K2IjtwSrJsCUhanAnt4ae6rc0
NiSrsOwyAW/2nw==
-----END CERTIFICATE-----
Generated at Tue Mar 3 03:31:21 2026 by rpki-client