Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
File: hu4gHGXWVe6c_iUflR6pG7oVRWc.mft (raw, json)
Hash identifier: 6XivTUwj0dhg2ny5kViTlP/K/6bi3d/JNYXmZQwDOWs=
Subject key identifier: A1:FC:5B:5E:D4:90:99:DE:6A:B8:A3:06:68:6B:2A:07:EE:96:78:78
Authority key identifier: 86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
Certificate issuer: /CN=86ee201c65d655ee9cfe251f951ea91bba154567
Certificate serial: 019CAB3400DE0D3E0F1C2C86C98C4E26C2D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
Manifest number: 1854
Signing time: Sun 01 Mar 2026 21:00:37 +0000
Manifest this update: Sun 01 Mar 2026 21:00:37 +0000
Manifest next update: Mon 02 Mar 2026 21:00:37 +0000
Files and hashes: 1: heKnF0nPw3navL7mvVdrP7ZenfE.roa (hash: SN8nxNReThCLTC+u68FN/Bqg6og3YUjtGA8xvnnpO7A=)
2: hu4gHGXWVe6c_iUflR6pG7oVRWc.crl (hash: D4L8/EewNphUWPFp9yEgt0Y79P1vmttoKpV+8M+I2fM=)
3: o_t0N0oazoSoRUIX38zmHacjpmI.roa (hash: 5Xwms+xTtZNdTeon1Aug9x31utWCflJ+A+WQraSsVuU=)
4: yyMfD3yfi-5ZFDYYqCi8ooAB_tc.roa (hash: 7Ong5ksWxUUHrzJGplVQfng6ph0+MByZZx5BAhFJpLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:00:de:0d:3e:0f:1c:2c:86:c9:8c:4e:26:c2:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86ee201c65d655ee9cfe251f951ea91bba154567
Validity
Not Before: Mar 1 21:00:37 2026 GMT
Not After : Mar 2 21:00:37 2026 GMT
Subject: CN=a1fc5b5ed49099de6ab8a306686b2a07ee967878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7c:c1:05:d6:8e:b1:57:01:ea:ca:34:6c:f6:
1c:9d:73:4c:6e:a6:96:88:11:ab:d0:f6:7c:ee:5a:
c8:24:eb:2c:8a:af:92:cb:e4:ed:8e:9c:c1:f5:d2:
e1:43:95:3f:f4:71:13:c6:44:b8:0f:d1:c1:4f:f2:
2a:64:07:1d:8c:bd:22:f7:ae:7c:58:96:3e:0e:ba:
d0:95:fa:4a:2c:39:2f:45:a7:c3:57:5d:dc:c1:91:
d7:db:98:1a:6f:e3:c2:78:1a:3e:a0:97:ae:b5:de:
65:b5:02:00:f7:82:0b:ab:8d:6f:e9:16:3d:94:65:
56:03:a1:84:15:df:58:70:31:32:e9:6e:27:ba:92:
cc:68:b7:b4:3b:fc:4b:86:91:a1:23:ec:3d:a0:25:
48:f7:c3:d5:2f:47:a6:45:9f:9d:fa:15:81:d1:06:
3b:39:8d:a4:99:ca:ec:fa:e0:7d:35:fd:9f:ae:3b:
d0:2f:32:0e:53:6b:6c:06:15:dd:ee:35:4c:00:25:
f8:dc:2d:a9:35:a2:fd:2d:59:37:e8:17:40:91:d7:
a2:fc:b5:d2:03:9b:01:20:7e:cd:d2:1a:7c:d6:35:
59:fa:2d:16:c9:6b:da:88:df:e9:88:f6:54:04:b9:
a3:9a:00:a3:3a:93:12:f5:ef:3e:5d:9f:2f:9d:f1:
7b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:FC:5B:5E:D4:90:99:DE:6A:B8:A3:06:68:6B:2A:07:EE:96:78:78
X509v3 Authority Key Identifier:
keyid:86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:69:63:bd:bc:ad:8f:9e:8f:ed:8f:3d:71:01:17:3b:26:6e:
a5:12:fe:70:bc:94:c9:91:c6:c0:a1:31:51:b8:c7:a5:b3:f9:
39:8e:45:0c:f7:20:4f:0b:a1:43:4c:8f:16:c3:1b:e6:10:9d:
93:fc:b2:18:9c:16:af:fd:10:9f:11:a9:7f:96:6b:29:ae:e1:
75:1a:4e:92:04:ec:47:f7:06:6d:1b:61:fd:e7:f8:3a:b8:bb:
ad:7b:19:25:5e:4c:39:a4:24:99:70:e5:a9:dc:15:27:c7:84:
c6:dc:51:1f:c4:4a:9e:dd:95:25:de:22:3c:90:87:96:64:c4:
b6:99:b9:67:01:fa:b8:0c:52:a3:18:94:2d:db:fc:44:d4:09:
2b:3a:93:82:6f:a0:51:8c:3e:1e:46:38:c5:36:41:f4:5c:91:
94:ff:1f:0e:65:d9:ab:fd:2c:ff:66:04:66:97:b5:25:f0:0b:
bb:c8:a8:a7:75:68:73:1b:d9:ac:6e:69:ce:3c:09:b1:d8:82:
cc:b6:1a:10:95:7f:71:d7:df:99:10:ab:16:9f:17:96:29:2c:
37:57:90:a8:20:f9:ba:22:55:c7:bc:f4:6a:75:93:ff:f0:9c:
77:1e:4d:43:08:16:ef:3e:ec:e0:ea:6f:e2:44:11:5b:c2:ff:
6f:d5:f0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:33:15 2026 by rpki-client