Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
File: h-uX-YyILvQms2ZjQR1AgUMKxCE.mft (raw, json)
Hash identifier: os8SWkMjWPoV66VjvP9BgZlmU2akiokEyu0JZrxLtVM=
Subject key identifier: DE:DB:12:4C:18:68:D7:21:87:7C:77:09:8D:12:13:5F:A4:74:2D:00
Authority key identifier: 87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21
Certificate issuer: /CN=87eb97f98c882ef426b36663411d4081430ac421
Certificate serial: 01A0D45E09E8DF6B9877AAC2B9D58E721894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
Manifest number: 0639
Signing time: Thu 24 Sep 2026 17:02:07 +0000
Manifest this update: Thu 24 Sep 2026 17:02:07 +0000
Manifest next update: Fri 25 Sep 2026 17:02:07 +0000
Files and hashes: 1: h-uX-YyILvQms2ZjQR1AgUMKxCE.crl (hash: OGN0v0NzPottnjyJyTvhArmx209SWJQVJ7awPl36wm8=)
2: sOo_7lt_CItRUPeJIsaf3epL6wo.roa (hash: FUDCuTGox9W1RZs2Qc7K596tec/Dho0eAg3ld5/PpMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5e:09:e8:df:6b:98:77:aa:c2:b9:d5:8e:72:18:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87eb97f98c882ef426b36663411d4081430ac421
Validity
Not Before: Sep 24 17:02:07 2026 GMT
Not After : Sep 25 17:02:07 2026 GMT
Subject: CN=dedb124c1868d721877c77098d12135fa4742d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:14:43:91:79:7f:8a:97:90:df:f2:a9:c1:6f:
40:5c:f9:78:aa:5c:51:3c:19:56:5d:20:68:68:af:
e3:15:1d:f7:43:e9:97:02:c9:08:e3:68:9d:6e:0f:
97:1a:f2:9c:b2:ed:c5:d7:0e:4a:74:40:e8:6e:87:
34:14:96:2a:bd:cb:ab:19:12:93:6e:08:bd:1a:61:
f5:5f:62:5a:0e:77:92:01:79:af:e9:21:a0:42:1a:
45:8d:5a:0d:44:af:c0:c2:81:f4:f6:06:d8:9a:21:
f1:9d:e3:b7:c1:59:83:04:ac:9c:04:63:ac:ad:78:
86:5a:57:91:65:44:5e:86:86:75:f1:0e:a6:49:24:
f7:dd:21:17:9e:52:7f:ec:63:b5:79:95:bc:28:86:
96:43:57:b9:ee:ac:28:83:96:a3:69:db:fe:53:7e:
b8:53:9a:95:cb:52:21:1e:b9:1a:7c:59:85:12:94:
cf:39:85:94:e1:fc:ec:6e:78:c1:69:4f:a0:e1:de:
c1:47:25:9b:a8:5f:d5:e7:de:e8:f6:cc:a8:b6:6a:
df:b4:7a:38:b2:5b:45:ab:dd:7a:43:b2:94:98:f0:
6a:ce:4f:d4:e1:57:14:62:e8:13:37:9a:39:f9:4c:
09:21:11:fe:b2:3f:2c:e6:f7:b9:f8:cb:54:3e:ae:
40:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DB:12:4C:18:68:D7:21:87:7C:77:09:8D:12:13:5F:A4:74:2D:00
X509v3 Authority Key Identifier:
keyid:87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b8:3d:bf:4c:00:c4:c9:75:60:ca:5b:e6:b4:83:d0:ca:dc:
ba:d8:41:ca:82:9a:31:e9:c1:a6:09:c1:97:78:7d:e9:a1:d1:
74:ba:60:1a:6a:57:78:95:d5:3a:f4:06:b1:04:e5:ae:ba:18:
6a:4f:a4:07:b7:e8:9e:8d:e9:fc:bd:66:de:e5:27:a0:5a:e1:
08:13:f1:1d:9e:d7:95:f0:4e:18:d4:54:98:52:e9:12:c8:0c:
11:d1:4f:b2:46:c5:36:f9:ce:de:3b:79:45:27:b5:8d:9a:fd:
bf:66:5c:67:3c:74:17:ed:3d:e4:2a:77:e6:e8:dc:28:23:e4:
65:a0:d2:80:5a:4f:da:d6:b6:30:f2:e1:6e:80:e5:34:62:da:
83:b8:4b:a0:11:9d:12:ca:f9:89:1f:bc:72:aa:e9:2e:a4:80:
84:cd:03:87:b5:9f:3e:a6:3d:a9:d7:9a:17:c1:5d:bb:59:7f:
3e:86:7b:c8:26:fe:50:27:da:21:6c:ef:09:b0:bb:d7:b2:50:
ec:d5:5b:6f:04:4c:f1:dd:6a:34:12:10:59:e5:cc:ed:e6:c3:
3c:ef:35:72:de:8a:42:be:b3:e4:c3:01:47:a8:fd:9a:e6:97:
43:1b:1a:0c:b5:bf:84:81:36:bc:fe:4e:8d:51:cb:59:4c:9f:
f1:78:cd:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUXgno32uYd6rCudWOchiUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZWI5N2Y5OGM4ODJlZjQyNmIzNjY2MzQxMWQ0MDgxNDMw
YWM0MjEwHhcNMjYwOTI0MTcwMjA3WhcNMjYwOTI1MTcwMjA3WjAzMTEwLwYDVQQD
EyhkZWRiMTI0YzE4NjhkNzIxODc3Yzc3MDk4ZDEyMTM1ZmE0NzQyZDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RRDkXl/ipeQ3/KpwW9AXPl4qlxR
PBlWXSBoaK/jFR33Q+mXAskI42idbg+XGvKcsu3F1w5KdEDoboc0FJYqvcurGRKT
bgi9GmH1X2JaDneSAXmv6SGgQhpFjVoNRK/AwoH09gbYmiHxneO3wVmDBKycBGOs
rXiGWleRZURehoZ18Q6mSST33SEXnlJ/7GO1eZW8KIaWQ1e57qwog5ajadv+U364
U5qVy1IhHrkafFmFEpTPOYWU4fzsbnjBaU+g4d7BRyWbqF/V597o9syotmrftHo4
sltFq916Q7KUmPBqzk/U4VcUYugTN5o5+UwJIRH+sj8s5ve5+MtUPq5AaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7bEkwYaNchh3x3CY0SE1+kdC0AMB8GA1UdIwQY
MBaAFIfrl/mMiC70JrNmY0EdQIFDCsQhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaC11WC1ZeUlMdlFtczJaalFSMUFnVU1LeENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kZWE4ZjQtZDY4OC00NTI0LWFmMjkt
M2Y2ZDdkN2VhMWIwLzEvaC11WC1ZeUlMdlFtczJaalFSMUFnVU1LeENFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kZWE4ZjQtZDY4OC00NTI0LWFmMjktM2Y2ZDdkN2VhMWIw
LzEvaC11WC1ZeUlMdlFtczJaalFSMUFnVU1LeENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZLg9v0wA
xMl1YMpb5rSD0MrcuthByoKaMenBpgnBl3h96aHRdLpgGmpXeJXVOvQGsQTlrroY
ak+kB7fono3p/L1m3uUnoFrhCBPxHZ7XlfBOGNRUmFLpEsgMEdFPskbFNvnO3jt5
RSe1jZr9v2ZcZzx0F+095Cp35ujcKCPkZaDSgFpP2ta2MPLhboDlNGLag7hLoBGd
Esr5iR+8cqrpLqSAhM0Dh7WfPqY9qdeaF8Fdu1l/PoZ7yCb+UCfaIWzvCbC717JQ
7NVbbwRM8d1qNBIQWeXM7ebDPO81ct6KQr6z5MMBR6j9muaXQxsaDLW/hIE2vP5O
jVHLWUyf8XjNEA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 19:05:40 2026 by rpki-client