Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
File: hu-0nfJHSmBCufIQv-qGGxsohu0.mft (raw, json)
Hash identifier: ExXrDsUcI+ndlfcxEROXyGLdFxzfYOqZ+hL0NtlbXoA=
Subject key identifier: 00:C5:E6:D3:C8:7E:EE:41:5B:84:7B:83:A7:E2:FC:7B:66:20:A5:91
Authority key identifier: 86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED
Certificate issuer: /CN=86efb49df2474a6042b9f210bfea861b1b2886ed
Certificate serial: 019ED50779806F33765AB0FD27E10DFA6A03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
Manifest number: 0FDF
Signing time: Wed 17 Jun 2026 10:01:37 +0000
Manifest this update: Wed 17 Jun 2026 10:01:37 +0000
Manifest next update: Thu 18 Jun 2026 10:01:37 +0000
Files and hashes: 1: 8ptK5EyL818ELWz7bccjTkhrDT8.roa (hash: J57Tpp1jGmkjoUMhY5enpHuf4ytrasZEoVVY530U8w0=)
2: OpdDMo8Cp988IQdFH-astgl9hzE.roa (hash: Nf3Kn5VC0A0Dtv20MogIVytEl5Z6pgrh2zjqqaobSxw=)
3: hu-0nfJHSmBCufIQv-qGGxsohu0.crl (hash: 5arboIDb/VA6KPi8T4g028oKYixcKVaXWhtwzP1lxrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:07:79:80:6f:33:76:5a:b0:fd:27:e1:0d:fa:6a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86efb49df2474a6042b9f210bfea861b1b2886ed
Validity
Not Before: Jun 17 10:01:37 2026 GMT
Not After : Jun 18 10:01:37 2026 GMT
Subject: CN=00c5e6d3c87eee415b847b83a7e2fc7b6620a591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c9:8f:b8:53:8a:c6:17:e2:05:57:b2:ae:02:
94:84:f6:aa:91:22:40:2b:39:27:c7:0b:02:25:fb:
7f:2a:be:7b:13:c0:4c:4a:3a:8e:ff:00:34:1a:27:
ec:85:f1:08:9a:a7:c7:39:01:ea:ee:fd:6d:fb:55:
ba:0d:6c:e7:83:6a:2e:c9:b0:08:03:21:1d:8b:34:
07:21:2d:14:ec:cc:17:35:d2:6a:68:33:4d:72:e7:
d7:94:24:21:b8:33:c7:53:33:99:7c:02:8a:25:ff:
32:fa:16:1e:3e:e0:ef:7f:45:79:56:a3:29:6d:e8:
d8:94:e4:20:0e:a2:f4:c8:00:f7:ac:76:97:89:9a:
fe:93:44:73:6a:e7:e4:ed:13:e7:fb:a4:2d:33:93:
1a:40:47:4d:2c:9b:fc:39:d0:9b:88:66:ae:bd:e1:
ff:74:b2:c8:d3:84:15:93:47:6c:6a:9b:60:e3:87:
2e:f4:cb:0b:ec:ce:7e:23:68:b7:b5:4b:3c:71:07:
3c:c2:9a:1f:83:71:be:9a:7f:31:d6:39:0f:e4:eb:
ba:27:fc:f9:57:33:9d:7f:70:44:b3:98:fb:79:96:
a5:8a:a7:19:26:06:d2:77:ee:9f:03:1f:55:a2:a4:
49:ed:f8:82:54:b6:63:fb:9f:08:aa:36:05:fb:ed:
f4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C5:E6:D3:C8:7E:EE:41:5B:84:7B:83:A7:E2:FC:7B:66:20:A5:91
X509v3 Authority Key Identifier:
keyid:86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:47:fb:35:0f:ff:68:1f:6b:46:98:99:4b:25:74:1f:01:c6:
fd:43:c2:6a:16:4d:15:53:98:79:dc:07:a1:ae:20:44:21:09:
9e:f3:f6:15:9c:b6:c6:20:0c:fb:6e:4a:34:f2:4f:46:9c:27:
97:c8:84:a2:34:d8:57:7a:a4:b5:c6:40:cd:49:13:aa:75:b8:
8b:ce:52:ef:c7:22:e7:a0:f5:cf:31:ea:d7:f8:8c:1c:f7:a8:
e5:ee:4e:e4:10:47:98:70:25:49:31:e7:c3:f0:09:17:57:d0:
bb:61:77:f9:47:e6:67:8f:63:81:c1:73:3a:7a:d6:d2:ec:23:
fe:53:82:17:c3:3a:62:36:a2:49:ca:a6:38:ae:bf:40:21:b8:
32:94:cd:4a:b9:e4:25:88:8c:7f:44:37:e8:fa:1e:58:41:c6:
c8:40:fc:84:2b:b0:19:ee:a5:e1:51:dd:52:67:50:d2:88:73:
cd:7b:06:6b:77:84:a2:f6:15:e1:5e:c8:82:06:d7:b0:54:2d:
0f:ff:d1:cc:bd:23:7b:d6:2f:94:44:1d:5c:57:19:f9:96:fc:
b1:70:c4:d7:9f:7c:44:f0:c9:f5:a9:d7:5c:65:7b:22:81:34:
ff:ac:ec:ab:76:67:c2:00:0c:4f:01:12:b8:72:97:54:fd:cf:
64:b5:86:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 15:17:41 2026 by rpki-client