Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft
File: hUu3qjkIyZjePEL34YSVOLBZJhc.mft (raw, json)
Hash identifier: rleM4YNXWJafLuNJwigN1lJp4E8z+KKSlJnTKf5d9g0=
Subject key identifier: DA:66:2E:3E:AD:B8:0F:E7:5D:15:B0:1A:0F:39:66:53:B2:A2:76:43
Authority key identifier: 85:4B:B7:AA:39:08:C9:98:DE:3C:42:F7:E1:84:95:38:B0:59:26:17
Certificate issuer: /CN=854bb7aa3908c998de3c42f7e1849538b0592617
Certificate serial: 019EC17FA54B429775319CF2CE3472A6D662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft
Manifest number: 11DD
Signing time: Sat 13 Jun 2026 15:00:28 +0000
Manifest this update: Sat 13 Jun 2026 15:00:28 +0000
Manifest next update: Sun 14 Jun 2026 15:00:28 +0000
Files and hashes: 1: 7MqIqmbLOZCvYlEMG9u9KyE6Ytk.roa (hash: zRxcr077zFRaZAIgIWm+iYU3FdaVL/l6dLqFNAGhIKM=)
2: hUu3qjkIyZjePEL34YSVOLBZJhc.crl (hash: yaMhvnpg33GsQ63mswFnsBVgfwZUSJ9jFWmbpvprP14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:7f:a5:4b:42:97:75:31:9c:f2:ce:34:72:a6:d6:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854bb7aa3908c998de3c42f7e1849538b0592617
Validity
Not Before: Jun 13 15:00:28 2026 GMT
Not After : Jun 14 15:00:28 2026 GMT
Subject: CN=da662e3eadb80fe75d15b01a0f396653b2a27643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ae:dc:14:82:76:99:8a:1f:f9:58:c3:37:38:
d0:f2:3c:d3:86:5d:78:bf:8a:79:bf:cb:99:11:bd:
c2:40:c0:7f:53:cc:79:9e:2a:e7:ec:f9:cc:45:60:
c8:f4:6f:d9:94:05:18:6e:52:96:2c:3e:54:a6:70:
3f:fd:dd:1a:5a:7c:35:db:30:65:7a:d3:51:8e:de:
7a:b3:ed:28:a1:cb:61:68:e5:e1:36:72:e8:41:64:
79:1d:59:1e:61:69:2e:71:c9:53:31:56:65:c3:fe:
e6:17:5d:3e:f6:a7:77:f5:53:b7:3d:bb:e5:bc:ea:
88:cb:45:9a:fe:97:9a:47:72:a8:ba:81:6a:9f:b3:
a6:11:97:e0:1a:f8:1f:64:c6:cc:92:6e:d7:95:d6:
e4:36:0e:34:a2:31:c0:cd:04:ae:d8:2f:c6:90:d4:
28:cd:55:4b:4a:33:17:28:90:a2:aa:0a:10:bb:d6:
ef:21:3e:f2:14:6b:5b:54:4b:b0:0b:d4:f4:17:43:
bf:04:b2:e9:bf:ab:99:3e:e0:71:66:aa:54:5d:d5:
0e:cf:75:cb:c4:ca:47:4e:c0:d9:65:1f:57:8b:f7:
f6:47:2e:db:bd:e9:41:cd:61:ee:56:5f:0d:56:ff:
32:3c:59:a7:3d:4b:8c:74:83:9d:85:5c:ec:be:42:
da:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:66:2E:3E:AD:B8:0F:E7:5D:15:B0:1A:0F:39:66:53:B2:A2:76:43
X509v3 Authority Key Identifier:
keyid:85:4B:B7:AA:39:08:C9:98:DE:3C:42:F7:E1:84:95:38:B0:59:26:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:0d:98:c9:be:a9:a5:5e:40:a0:c9:fb:29:48:0e:c0:ca:4d:
8f:03:f7:1f:40:be:f7:83:2f:38:9b:94:39:02:6d:c5:5e:0d:
5a:88:7f:16:fd:22:2c:eb:50:b5:d7:64:8d:0c:2d:db:e8:4a:
79:8f:4b:e3:f7:82:cb:b5:7b:bf:6a:38:02:80:8e:90:e8:23:
70:40:33:19:56:c7:c4:27:76:90:c8:4a:76:2a:5a:76:36:3e:
0f:74:86:0b:0e:26:f5:62:8a:95:f7:60:38:02:ca:6f:51:68:
8d:a2:3f:9e:f6:c1:1f:cc:81:19:9a:72:15:20:35:67:50:ad:
1a:bc:a0:cb:d4:51:ed:d5:0d:5a:06:20:4f:e7:31:79:de:48:
8d:89:7d:7f:16:4a:62:f6:30:62:0d:1b:e3:2c:14:5b:74:a0:
b4:09:ec:c6:b7:09:66:eb:5d:38:ea:1c:60:18:1e:af:66:74:
66:7a:3f:92:60:73:05:dc:2f:da:0b:5e:f4:58:5f:58:ca:b4:
6b:12:5e:33:4e:f4:42:4d:bc:58:ea:5f:e6:a3:3f:2a:c1:c5:
cb:77:f4:98:b3:ac:99:6a:b9:5e:a4:fb:02:32:9b:6d:9a:cc:
1c:ae:15:3b:e5:7d:19:77:87:c9:79:e2:66:1b:8d:23:81:3a:
33:ad:81:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:02:58 2026 by rpki-client