Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
File: hu-0nfJHSmBCufIQv-qGGxsohu0.mft (raw, json)
Hash identifier: o+drwbjBr0XgzTtNDb8mChyBsY0UZKrURJH5YKDI1w4=
Subject key identifier: CC:EA:32:C4:73:2E:30:AF:2F:8F:9F:D0:3B:F1:15:7A:C7:3A:94:FE
Authority key identifier: 86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED
Certificate issuer: /CN=86efb49df2474a6042b9f210bfea861b1b2886ed
Certificate serial: 019CACB4CC812B01420D65873CA82C1B6A26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
Manifest number: 0EC1
Signing time: Mon 02 Mar 2026 04:00:55 +0000
Manifest this update: Mon 02 Mar 2026 04:00:55 +0000
Manifest next update: Tue 03 Mar 2026 04:00:55 +0000
Files and hashes: 1: 8ptK5EyL818ELWz7bccjTkhrDT8.roa (hash: J57Tpp1jGmkjoUMhY5enpHuf4ytrasZEoVVY530U8w0=)
2: OpdDMo8Cp988IQdFH-astgl9hzE.roa (hash: Nf3Kn5VC0A0Dtv20MogIVytEl5Z6pgrh2zjqqaobSxw=)
3: hu-0nfJHSmBCufIQv-qGGxsohu0.crl (hash: Z3j/J55y084krM2y1ZxPaqphkDeDnJJNo1QTDZApkZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:cc:81:2b:01:42:0d:65:87:3c:a8:2c:1b:6a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86efb49df2474a6042b9f210bfea861b1b2886ed
Validity
Not Before: Mar 2 04:00:55 2026 GMT
Not After : Mar 3 04:00:55 2026 GMT
Subject: CN=ccea32c4732e30af2f8f9fd03bf1157ac73a94fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b7:d6:e9:9c:0a:84:f0:e9:4b:29:f4:95:5f:
58:6b:72:c9:cc:dc:89:3d:1e:a8:91:59:2a:05:e3:
47:b9:64:78:a1:d1:d4:df:5e:e6:76:98:65:8b:b0:
92:a2:9b:fa:54:dc:e1:98:6b:19:0c:77:38:1f:db:
4a:2c:23:0b:4e:e7:3c:f5:fe:9c:30:cd:6a:dd:34:
10:ef:7e:b4:bd:38:89:c0:63:64:85:9f:01:1f:e9:
4c:2e:e7:5b:cd:fe:5b:81:47:f8:ee:98:b9:11:fb:
a2:5c:e0:7d:6a:32:bd:2c:56:58:f4:a0:ca:a8:20:
31:ed:f1:56:2d:8d:c9:05:c3:cb:30:63:ed:14:98:
a9:db:ea:bd:01:11:96:c7:11:11:a7:4f:a2:66:ac:
b1:ae:69:2a:da:22:39:04:61:8c:fc:d9:9a:2b:c9:
5c:c8:0e:e5:32:0f:3a:7e:64:b1:dc:7b:7d:7c:19:
54:59:79:62:dd:85:1f:0b:f5:cd:f4:81:d2:8b:f1:
44:81:ad:57:65:3c:27:17:8e:5d:a5:7b:67:9b:c0:
2a:0e:0b:d7:de:59:ef:35:2b:d3:68:30:eb:ea:4a:
07:5a:df:b7:77:b2:12:76:68:61:55:75:6e:c8:7b:
8c:1b:d1:46:5f:00:c3:80:6f:07:78:98:65:b6:8e:
d3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:EA:32:C4:73:2E:30:AF:2F:8F:9F:D0:3B:F1:15:7A:C7:3A:94:FE
X509v3 Authority Key Identifier:
keyid:86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:80:91:eb:11:a5:08:32:fc:3c:e6:69:09:81:bd:49:17:84:
0d:f7:2c:d3:90:79:9e:85:f0:0d:e7:52:38:e1:07:83:e4:a5:
ce:84:aa:b9:2b:d8:b2:59:ec:74:b5:21:f8:2d:9e:17:20:9c:
d7:23:19:15:62:e1:a9:1e:4a:3d:d1:25:d1:35:ab:1c:70:d7:
27:47:c2:b8:43:4a:56:4c:c9:ff:dd:38:90:6d:46:23:6f:bf:
d8:a7:39:f0:b5:d4:16:ae:13:02:1b:4c:ee:56:27:9e:6f:60:
28:8e:1c:39:16:61:6d:4e:39:65:ff:a3:a1:59:cb:7a:65:f7:
17:7e:74:43:f4:06:17:5e:89:39:3c:10:d8:d8:14:47:1d:4d:
ca:46:1e:ae:4a:e7:db:d9:5d:58:98:3a:74:81:3b:8b:92:7a:
2b:ac:eb:1e:9d:08:36:24:aa:9a:b5:59:26:19:4a:ba:93:4b:
4a:70:cf:8e:46:6a:1f:45:6f:03:32:13:4a:8b:c1:f0:20:55:
bb:1a:46:46:bc:87:91:3b:16:b0:46:11:ac:ac:74:9b:c3:b0:
92:7f:20:41:cf:99:61:44:76:83:a5:ca:9c:c2:cb:f0:6e:ae:
3a:9d:8f:e0:14:00:05:49:9b:1f:3c:5f:6b:ec:62:25:98:29:
9b:86:74:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:33:36 2026 by rpki-client