Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
File: h-uX-YyILvQms2ZjQR1AgUMKxCE.mft (raw, json)
Hash identifier: +1pJJsbIPO7XM11Wq+/euoclYAFeln/42BpYh1Rp7j4=
Subject key identifier: 53:AE:23:4D:C5:A4:B2:4A:8D:64:66:C4:38:C7:47:E8:68:77:89:32
Authority key identifier: 87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21
Certificate issuer: /CN=87eb97f98c882ef426b36663411d4081430ac421
Certificate serial: 019DA5667B96BBE570FFC495C0F3622A04D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
Manifest number: 0493
Signing time: Sun 19 Apr 2026 11:00:50 +0000
Manifest this update: Sun 19 Apr 2026 11:00:50 +0000
Manifest next update: Mon 20 Apr 2026 11:00:50 +0000
Files and hashes: 1: h-uX-YyILvQms2ZjQR1AgUMKxCE.crl (hash: KG7EaQwzEIfHr7PxuZXgAIDhFR0W1UozlMMikuTlmpo=)
2: sOo_7lt_CItRUPeJIsaf3epL6wo.roa (hash: FUDCuTGox9W1RZs2Qc7K596tec/Dho0eAg3ld5/PpMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:66:7b:96:bb:e5:70:ff:c4:95:c0:f3:62:2a:04:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87eb97f98c882ef426b36663411d4081430ac421
Validity
Not Before: Apr 19 11:00:50 2026 GMT
Not After : Apr 20 11:00:50 2026 GMT
Subject: CN=53ae234dc5a4b24a8d6466c438c747e868778932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1a:d8:b9:f3:60:d6:c1:5e:e2:55:a3:a6:18:
32:e6:e7:d7:c6:b1:64:8d:ea:67:04:22:6d:27:33:
6c:1a:6c:66:67:52:fc:ef:2e:ec:6e:ab:10:9b:be:
20:e8:4e:e9:0a:67:14:83:5b:b8:09:79:00:2a:0c:
12:e5:ed:ed:fa:51:f8:b9:a9:0d:62:06:8e:0d:b3:
16:85:4e:98:3b:40:75:e2:32:77:23:08:9d:90:b4:
f8:90:ea:d8:0c:5c:bf:00:f6:0d:e4:e4:97:d7:02:
f7:39:fc:36:7b:b8:09:b1:0e:1d:1b:e4:59:57:52:
a3:73:a9:bc:46:a4:bc:6e:c5:1a:81:c3:ee:41:10:
36:b2:1c:3b:ec:6b:89:e0:fc:f5:9d:ed:25:7a:ee:
b4:f5:88:d2:dd:3d:5d:bc:64:23:59:e0:0c:0a:d3:
e3:1e:32:e5:05:24:bf:11:32:a0:bb:dc:85:98:16:
f1:31:9e:5e:03:4e:71:d7:8c:d8:55:77:70:0d:c4:
6c:74:73:f8:c4:a0:42:66:51:9a:d0:10:f1:b1:64:
72:2a:fc:41:04:72:2c:3a:f2:f8:31:fb:59:b7:d6:
af:a8:f4:98:7c:f7:b4:a0:3e:ad:c9:2c:4f:85:d8:
30:4e:6e:a5:fe:78:cf:21:a8:2c:e3:4e:a7:54:78:
3b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:AE:23:4D:C5:A4:B2:4A:8D:64:66:C4:38:C7:47:E8:68:77:89:32
X509v3 Authority Key Identifier:
keyid:87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:36:aa:9a:79:fa:8e:08:39:64:8f:1b:13:88:8f:62:07:40:
8d:ab:f9:d9:27:2b:13:0f:d9:07:c0:9f:a1:5c:18:e2:da:88:
57:02:7f:1a:57:13:ff:d9:21:40:d9:00:d2:43:52:bc:a3:d3:
2a:9b:f6:fd:4d:cb:be:43:bb:a5:ff:c3:88:67:dc:16:24:97:
16:89:32:17:d6:b0:f9:92:fe:71:3f:ef:bf:f5:ce:60:d6:23:
f6:d8:5b:12:c3:2a:9b:11:c7:34:23:29:4e:ec:22:d3:79:64:
38:68:e1:82:63:12:66:d9:46:fd:80:cb:00:28:8d:f6:88:0d:
af:40:29:3d:06:ad:5d:f9:c8:5d:84:3b:e1:d2:34:dd:a0:e5:
9c:c3:7e:a2:43:47:cf:f5:e2:44:48:85:47:bf:c9:bf:ac:ae:
44:32:21:0b:12:ac:40:e6:91:33:45:2e:59:e4:91:d7:25:54:
a3:d5:e7:a2:32:8a:db:28:51:8d:08:d5:41:4c:40:f0:8a:d6:
cc:88:67:fe:53:a6:a9:8a:77:a3:e1:6f:84:79:ae:2c:eb:06:
38:6a:8a:e3:fd:c5:a2:be:be:00:55:04:54:d4:1c:50:35:ff:
aa:50:fb:bc:b1:00:d8:5a:d0:45:95:36:aa:ac:8d:44:5d:85:
45:17:57:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 16:58:04 2026 by rpki-client