Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/huVIzmZm6TlAQNl_mldr1FxyDkI.mft
File: huVIzmZm6TlAQNl_mldr1FxyDkI.mft (raw, json)
Hash identifier: HKl4Egotgb14Gt6sibcC2pje7x34oOHEscCfF2BOngM=
Subject key identifier: 17:23:28:16:A1:BD:A2:DF:90:13:F5:84:03:33:04:CC:63:B4:94:99
Authority key identifier: 86:E5:48:CE:66:66:E9:39:40:40:D9:7F:9A:57:6B:D4:5C:72:0E:42
Certificate issuer: /CN=86e548ce6666e9394040d97f9a576bd45c720e42
Certificate serial: 01A1588B8222E79113DD131D190771C820B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/huVIzmZm6TlAQNl_mldr1FxyDkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/huVIzmZm6TlAQNl_mldr1FxyDkI.mft
Manifest number: 0107
Signing time: Tue 20 Oct 2026 09:01:39 +0000
Manifest this update: Tue 20 Oct 2026 09:01:39 +0000
Manifest next update: Wed 21 Oct 2026 09:01:39 +0000
Files and hashes: 1: huVIzmZm6TlAQNl_mldr1FxyDkI.crl (hash: EWsKT2GaanXlW33sl5FKufLmjp4syYVh6XeZX0ipyMM=)
2: kWAwDb9QXu3iQi0JAJPcUBpsVOI.roa (hash: UX+7yg4TJhnCGO4kiz6ejPDETIdb9Mgqo1XA5XUPupY=)
3: oaMdDyOuMHLrZLQUfdyGK2klDt0.roa (hash: iBXiM+MZUWH8Mi/ysn+EmmuC3Xw+mlW+sWAsTir7KzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/huVIzmZm6TlAQNl_mldr1FxyDkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/huVIzmZm6TlAQNl_mldr1FxyDkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/huVIzmZm6TlAQNl_mldr1FxyDkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:58:8b:82:22:e7:91:13:dd:13:1d:19:07:71:c8:20:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e548ce6666e9394040d97f9a576bd45c720e42
Validity
Not Before: Oct 20 09:01:39 2026 GMT
Not After : Oct 21 09:01:39 2026 GMT
Subject: CN=17232816a1bda2df9013f584033304cc63b49499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1e:29:4a:f9:71:d2:51:55:f2:09:ee:51:f7:
c2:a4:36:20:87:8f:2c:29:de:2f:cb:62:4d:43:85:
e8:4d:3a:44:db:a0:e7:c3:85:b2:e5:f7:c7:0f:e3:
38:3e:d3:ce:8b:b5:24:86:da:80:ac:3d:53:43:82:
d4:22:18:dc:57:7a:60:3c:81:d0:fb:e5:86:23:2b:
55:8d:46:e2:02:0c:05:2d:06:dc:7e:a3:19:b4:d9:
a9:c4:13:d6:c2:0b:cc:95:33:3e:47:bd:db:13:92:
5c:03:6f:fb:f0:9f:b9:a0:b9:26:17:14:4c:66:86:
57:35:ab:d6:41:7f:4e:e3:75:4e:e2:4a:e1:c2:52:
18:9f:d8:f8:24:2e:60:02:a9:61:34:fb:54:38:4e:
e2:63:66:59:88:6e:91:7b:2c:0b:24:d1:8d:81:7d:
7c:d0:6f:9d:08:0b:5e:04:ac:df:fb:48:4f:ac:00:
7c:03:e6:c9:1e:df:0e:35:df:0c:47:ad:4e:23:03:
78:a0:89:b9:c0:b4:68:02:8b:cd:7a:e7:6b:f0:01:
e7:9d:98:68:03:70:24:83:18:2b:5f:f2:8e:ab:4d:
c9:ba:c2:16:35:f7:66:cf:b1:d4:63:8c:f5:2d:9e:
d1:67:16:44:17:03:5b:34:19:e5:cf:d6:0b:f3:86:
5c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:23:28:16:A1:BD:A2:DF:90:13:F5:84:03:33:04:CC:63:B4:94:99
X509v3 Authority Key Identifier:
keyid:86:E5:48:CE:66:66:E9:39:40:40:D9:7F:9A:57:6B:D4:5C:72:0E:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/huVIzmZm6TlAQNl_mldr1FxyDkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/huVIzmZm6TlAQNl_mldr1FxyDkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/huVIzmZm6TlAQNl_mldr1FxyDkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e4:4c:c9:a1:e0:ea:73:9f:90:cb:46:d0:df:62:c4:6d:17:
a4:29:f1:aa:1d:e5:5a:a7:6e:fc:72:af:28:a1:ec:b0:cd:aa:
f7:5c:91:f5:d8:a2:f5:df:75:cf:34:02:22:88:2b:a5:7b:80:
11:27:d1:d4:0c:14:5b:0a:90:df:8e:2e:a5:26:b4:c6:18:40:
db:c2:ab:c5:81:30:a6:91:f8:b9:c9:2f:20:5a:48:24:2b:8d:
b1:56:0f:a9:16:e6:a1:23:1d:08:b5:1b:4a:33:80:89:0f:2c:
c6:58:19:69:fe:6a:c2:a9:36:c7:4d:35:09:cf:e3:3d:06:d7:
8a:89:9d:02:1b:bb:a0:b9:95:de:61:46:cc:89:aa:1d:a0:83:
e6:48:e1:79:40:d1:e7:9a:90:27:d6:2c:a2:22:ff:fe:4f:0f:
d3:12:7f:2f:6c:d3:a7:f0:bb:9e:16:20:d5:7d:1b:bb:55:f3:
65:c9:40:8b:d8:b8:6a:1e:26:86:a4:86:a8:59:f2:1d:20:62:
d4:c5:6d:cd:3e:5e:9b:03:7f:fc:a0:1a:4a:38:71:a7:68:ab:
a3:70:04:b2:a8:f4:dd:38:89:93:1e:b1:61:d6:4e:46:e0:2f:
8f:ad:b7:fd:5c:d5:6b:6c:7f:45:9a:6b:3d:a0:32:07:41:73:
0c:2b:54:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:20:36 2026 by rpki-client