
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
File: humRNBcbWGP2LyK316v3QDSVKOw.mft (raw, json)
Hash identifier: BcghOJBbAX6h7/5jkAv55H4D2kgjqhZFliWcgPFjJms=
Subject key identifier: 73:90:5A:8B:B7:E4:AB:6F:D1:A8:D9:D9:14:67:A1:DD:E9:65:F1:9D
Authority key identifier: 86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
Certificate issuer: /CN=86e99134171b5863f62f22b7d7abf740349528ec
Certificate serial: 019CAF10DE8C53E879F147137F8B0401660E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
Manifest number: 06CC
Signing time: Mon 02 Mar 2026 15:00:43 +0000
Manifest this update: Mon 02 Mar 2026 15:00:43 +0000
Manifest next update: Tue 03 Mar 2026 15:00:43 +0000
Files and hashes: 1: 8YW4uCegbiOXKfdM50rIePBZe5k.roa (hash: daS7MSZX4yQZhE3JNsrTDfEdlUzwTcG/vXeE0dV4qcs=)
2: humRNBcbWGP2LyK316v3QDSVKOw.crl (hash: z5sQBmoGcUD2Q5zqVxiTuDm+mZD2aYEvzfo7sVKWvFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:10:de:8c:53:e8:79:f1:47:13:7f:8b:04:01:66:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e99134171b5863f62f22b7d7abf740349528ec
Validity
Not Before: Mar 2 15:00:43 2026 GMT
Not After : Mar 3 15:00:43 2026 GMT
Subject: CN=73905a8bb7e4ab6fd1a8d9d91467a1dde965f19d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2f:c7:af:9a:4f:29:27:50:62:e5:e4:0d:fb:
23:01:48:3e:80:43:4b:29:64:8b:5f:ab:99:d2:58:
31:88:f3:c2:ea:e4:59:01:72:69:5d:6b:e8:6b:6f:
0a:82:9a:f3:79:4e:99:86:f9:cc:0b:fe:b2:0a:ca:
2c:f9:d4:63:a6:bf:49:f9:25:7b:ec:50:a8:ee:38:
00:e5:b0:31:e1:10:22:d0:30:61:d6:83:d7:d8:3f:
b6:d8:ab:09:25:06:98:6e:3b:15:aa:96:fd:b8:34:
79:74:e2:2a:ba:8b:84:91:b8:c2:96:f4:05:6c:57:
8a:d8:fe:bc:3c:4a:36:b4:cc:80:89:67:91:b8:21:
eb:0b:ec:bd:d5:6e:ce:da:03:8a:84:56:7d:e6:d2:
a2:92:69:94:76:b6:12:bd:11:a0:36:9c:71:29:71:
cd:fa:4c:91:50:74:03:94:40:6e:79:e9:37:99:a3:
cc:87:1d:ba:98:24:14:e7:01:98:29:00:48:d1:43:
d3:62:56:39:9c:f2:96:bd:c2:b2:60:39:bc:1e:d7:
c2:13:f2:13:7c:35:98:8a:c2:a0:f0:4a:9e:1a:37:
6e:46:d9:d0:6c:4c:3e:f1:bb:22:ae:8c:29:80:ab:
e3:d3:3c:ec:86:87:09:e0:18:94:dc:dc:3b:30:0f:
c7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:90:5A:8B:B7:E4:AB:6F:D1:A8:D9:D9:14:67:A1:DD:E9:65:F1:9D
X509v3 Authority Key Identifier:
keyid:86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:02:60:56:19:95:02:9c:a2:2a:f8:01:dc:0d:8e:13:5c:20:
d9:e0:a4:c8:13:f9:6c:6c:94:d4:3c:30:68:99:90:12:d2:10:
d8:1b:16:d1:15:9b:af:19:29:ee:d5:9f:13:2f:5b:f9:75:31:
59:9b:f7:97:3a:a8:38:8f:7f:dc:cb:29:f3:c3:78:2a:5c:12:
b1:a5:b2:d3:a4:1b:d6:d5:ca:59:d4:34:55:d4:c7:ba:5a:35:
0a:94:b4:20:82:a0:a1:65:41:14:32:7b:07:0f:61:26:96:21:
d7:98:8f:8e:8b:d1:7f:ac:78:a6:53:a6:15:e9:b6:cd:87:25:
eb:ee:48:15:9c:3d:7e:64:2f:fc:69:b7:42:3e:5d:66:df:71:
93:2c:7e:17:ed:6b:ea:00:e8:d5:93:63:bc:8b:ea:31:d4:48:
7a:47:85:52:a1:a7:69:e2:cd:bb:b0:94:8b:af:e3:00:e0:1c:
5e:f1:1a:a7:ef:d6:f2:ed:46:2e:64:6f:83:6b:3b:8e:95:69:
0b:57:f9:dd:d3:a5:fc:0d:86:fa:b3:08:dc:23:bb:9a:c2:9e:
55:51:0c:16:15:ec:c9:d5:32:c0:ff:fb:56:d6:41:a7:9c:e7:
fc:28:87:1c:da:3d:7d:a5:01:c2:68:ce:5c:51:f9:20:92:38:
99:9a:d4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:54:20 2026 by rpki-client