Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
File: humRNBcbWGP2LyK316v3QDSVKOw.mft (raw, json)
Hash identifier: IISGMFhU5yak1sEtvL2tNJ0Vi+zCeQ8p2l5XCyt14d4=
Subject key identifier: 8B:72:4A:72:33:15:A0:5F:EA:DA:87:F3:71:1E:26:7A:8B:69:7F:E0
Authority key identifier: 86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
Certificate issuer: /CN=86e99134171b5863f62f22b7d7abf740349528ec
Certificate serial: 019EBF5AE15968353509A838A50BA1F5A63E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
Manifest number: 07DF
Signing time: Sat 13 Jun 2026 05:01:04 +0000
Manifest this update: Sat 13 Jun 2026 05:01:04 +0000
Manifest next update: Sun 14 Jun 2026 05:01:04 +0000
Files and hashes: 1: humRNBcbWGP2LyK316v3QDSVKOw.crl (hash: 7293a9DdYkivckQJgA346xvHSWvFwd+gs1vjvRzj0q4=)
2: s9kGup8ETCR_TnIpADbpkN9_7es.roa (hash: Tl2xHND59kaKyod+n7S8xlRanBYJiPYsjS6E7wmOt/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:e1:59:68:35:35:09:a8:38:a5:0b:a1:f5:a6:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e99134171b5863f62f22b7d7abf740349528ec
Validity
Not Before: Jun 13 05:01:04 2026 GMT
Not After : Jun 14 05:01:04 2026 GMT
Subject: CN=8b724a723315a05feada87f3711e267a8b697fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:f3:5b:85:be:d9:c4:9c:69:4b:2f:58:9a:b5:
08:86:4c:9d:97:fa:4d:0b:3f:0b:70:fc:20:85:03:
0f:b2:9a:12:72:bb:01:15:13:b0:1a:74:25:6a:f7:
39:1a:21:b7:16:37:09:55:1a:5c:d3:72:7e:9f:c3:
6c:fa:ea:79:0d:89:28:e3:b1:c8:b6:07:b4:4a:23:
63:bf:8d:51:17:7b:a6:38:0e:b7:c7:be:e0:8c:44:
43:19:d5:aa:6c:24:a9:54:47:e0:12:1c:b4:c6:82:
a4:84:6c:1a:e8:7e:4c:9a:c6:bb:8d:86:cf:37:78:
fc:63:6d:95:31:5b:54:1f:c6:b6:a6:85:95:74:ba:
f6:46:42:5c:ce:95:d0:e0:e1:c0:d8:f7:6b:89:de:
ad:fc:8f:f5:7b:ae:da:f9:3b:9a:a0:e7:63:b9:bf:
27:a2:25:55:f8:15:d6:03:7a:21:a6:44:96:d5:d9:
26:f4:ca:1d:01:44:ff:95:ca:f7:e8:33:27:00:0a:
b3:49:65:ce:ec:65:d8:3a:14:e9:0b:44:55:39:d1:
a2:5a:bd:4e:d8:77:e0:dc:8c:d0:d3:d9:24:4b:44:
25:f2:6b:1f:fa:f1:3d:13:7d:b4:8e:72:8e:c2:30:
c0:f8:b9:35:3e:e2:b6:f2:c8:27:47:7b:21:e5:47:
49:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:72:4A:72:33:15:A0:5F:EA:DA:87:F3:71:1E:26:7A:8B:69:7F:E0
X509v3 Authority Key Identifier:
keyid:86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:05:db:a8:45:69:55:86:60:52:92:31:a5:42:bd:d7:a7:a2:
51:cc:d1:8e:ca:84:eb:17:a6:2b:76:26:33:63:0e:15:3e:f8:
67:6f:16:f1:c0:1e:ab:81:6c:3a:e1:3b:14:48:5a:48:2a:97:
a2:94:24:b3:54:e6:d2:de:46:65:98:70:55:64:b5:f2:f9:4f:
37:ef:32:39:c3:fe:ee:8f:5f:ef:ed:c6:7e:c3:f9:c0:ad:ad:
e3:47:c2:aa:71:ef:ab:08:ff:2f:f7:ea:65:fa:e6:64:c9:55:
83:3c:46:c2:b8:6d:51:5f:64:3e:fb:3f:e0:97:65:3f:b6:cb:
8f:09:e2:66:69:a4:27:b9:f7:2a:0f:03:72:6f:a1:9c:5e:14:
70:c3:0e:a6:09:d5:1e:3e:70:1a:7a:fc:53:b9:50:1a:b9:40:
50:7a:c1:cb:b3:6e:2f:4a:be:7f:40:38:c1:4f:c0:c4:af:54:
38:c2:02:23:79:db:43:9d:03:cf:9b:43:81:ee:06:d0:c4:c9:
c0:3d:c5:e6:77:46:3c:ab:4c:c6:96:20:52:11:c4:ab:02:02:
ae:b7:ab:5a:4d:07:c3:ec:46:00:1a:e4:5f:34:13:a6:41:41:
01:ca:8b:7e:83:f9:5f:29:ba:11:fe:7f:83:33:b7:72:98:7f:
37:62:28:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:01:45 2026 by rpki-client