Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/huVIzmZm6TlAQNl_mldr1FxyDkI.mft
File: huVIzmZm6TlAQNl_mldr1FxyDkI.mft (raw, json)
Hash identifier: 0FFMp8OlJLZkd/pRMxp1K6iRt8L92bTGwkC/gmtlTXI=
Subject key identifier: 97:37:5D:91:1D:ED:85:D8:20:7F:FA:28:3E:13:BA:B8:09:5A:33:F3
Authority key identifier: 86:E5:48:CE:66:66:E9:39:40:40:D9:7F:9A:57:6B:D4:5C:72:0E:42
Certificate issuer: /CN=86e548ce6666e9394040d97f9a576bd45c720e42
Certificate serial: 019FA9E2BC72AB6FA4C50E1A98C2C4C9D215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/huVIzmZm6TlAQNl_mldr1FxyDkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/huVIzmZm6TlAQNl_mldr1FxyDkI.mft
Manifest number: 28
Signing time: Tue 28 Jul 2026 18:00:36 +0000
Manifest this update: Tue 28 Jul 2026 18:00:36 +0000
Manifest next update: Wed 29 Jul 2026 18:00:36 +0000
Files and hashes: 1: huVIzmZm6TlAQNl_mldr1FxyDkI.crl (hash: D74hq06yjs4lSLkCyI55lBK7OFF3+9f/w53BQWXz8ZQ=)
2: kWAwDb9QXu3iQi0JAJPcUBpsVOI.roa (hash: UX+7yg4TJhnCGO4kiz6ejPDETIdb9Mgqo1XA5XUPupY=)
3: oaMdDyOuMHLrZLQUfdyGK2klDt0.roa (hash: iBXiM+MZUWH8Mi/ysn+EmmuC3Xw+mlW+sWAsTir7KzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/huVIzmZm6TlAQNl_mldr1FxyDkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/huVIzmZm6TlAQNl_mldr1FxyDkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/huVIzmZm6TlAQNl_mldr1FxyDkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:bc:72:ab:6f:a4:c5:0e:1a:98:c2:c4:c9:d2:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e548ce6666e9394040d97f9a576bd45c720e42
Validity
Not Before: Jul 28 18:00:36 2026 GMT
Not After : Jul 29 18:00:36 2026 GMT
Subject: CN=97375d911ded85d8207ffa283e13bab8095a33f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:31:07:19:81:82:1e:bd:b6:53:36:3b:29:60:
c6:d7:59:dd:c2:2f:af:d9:1b:01:2f:ea:22:f9:bb:
c7:12:5e:e1:32:c4:d8:8c:5b:96:c8:50:b8:b8:42:
f1:10:40:b4:06:da:9d:3b:c9:09:71:f3:65:2c:b2:
2d:5c:cd:7e:67:c0:b9:eb:21:c8:99:27:14:27:68:
95:07:9a:de:6e:d5:ec:bb:29:e4:e4:1c:33:16:a0:
70:7a:ec:65:35:cb:aa:37:23:ed:3e:a5:11:a6:aa:
64:14:d0:91:46:ea:c1:41:97:91:42:a3:c1:ed:e6:
3a:65:de:60:2f:ef:de:d2:f1:ed:36:ff:52:77:a6:
a3:3e:ec:36:ba:12:cd:af:10:f6:69:c0:ea:44:16:
24:33:76:f3:2b:ab:03:ea:0d:6c:71:da:8f:da:aa:
46:0f:6b:d4:29:fd:17:e7:94:2f:fe:8e:f8:59:ee:
60:11:4d:c6:e0:ae:4a:33:89:35:d6:90:09:f2:81:
26:c5:26:6e:42:6f:6f:07:d6:49:fc:a6:c8:69:e7:
0f:f6:bd:cf:6b:9d:c0:a8:bd:21:a0:37:db:1c:41:
f8:34:78:a9:65:d4:91:13:5a:f0:a4:44:12:68:5d:
04:0c:b9:01:a8:f8:42:77:33:2b:f2:99:f9:c7:5d:
50:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:37:5D:91:1D:ED:85:D8:20:7F:FA:28:3E:13:BA:B8:09:5A:33:F3
X509v3 Authority Key Identifier:
keyid:86:E5:48:CE:66:66:E9:39:40:40:D9:7F:9A:57:6B:D4:5C:72:0E:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/huVIzmZm6TlAQNl_mldr1FxyDkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/huVIzmZm6TlAQNl_mldr1FxyDkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/huVIzmZm6TlAQNl_mldr1FxyDkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:89:d0:ac:56:63:15:2b:1b:35:b2:6b:1b:1e:a9:1e:bd:4d:
4b:ab:52:15:61:e0:af:17:11:49:b9:ca:2b:b6:8a:21:6f:44:
23:5a:31:79:35:88:03:24:99:c8:99:0a:fc:02:03:c7:f5:f4:
d6:d2:0d:11:31:83:e4:c1:13:93:09:3f:dc:53:05:60:a5:0a:
cf:72:98:29:96:10:5e:7d:64:28:a8:4a:19:91:e7:5c:9b:41:
89:84:fa:37:09:3e:59:e9:c7:62:4b:df:ac:59:4e:13:4f:c7:
78:63:ea:4f:e6:8f:b9:ec:40:a6:0c:28:77:a5:80:ee:c2:d8:
d9:0c:bc:58:cb:c1:b0:81:8c:14:22:0b:4e:1b:2b:34:6c:dc:
bc:8e:53:1d:1c:6f:6d:76:88:5f:06:2d:12:e8:75:22:51:ba:
f8:c8:02:6b:ae:51:74:5e:66:d8:53:69:d6:79:d2:2e:2b:c7:
54:7c:bc:f4:1b:d1:b0:eb:d0:b8:ba:f8:89:8b:c9:65:4b:f9:
27:84:85:a1:f6:26:3a:b9:bb:33:c5:05:b8:98:dd:4e:ef:5a:
22:79:15:d4:90:65:2b:4e:72:17:1f:82:b9:d4:9c:5f:5b:b6:
cc:65:31:5b:b3:96:95:da:9c:37:51:95:c9:3d:a0:61:dc:92:
ba:6a:5c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:07:15 2026 by rpki-client