Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
File: humRNBcbWGP2LyK316v3QDSVKOw.mft (raw, json)
Hash identifier: x03Z4jblbuIhTNpATxV1yvrKpa+S0mkOAL8gtRMqWW8=
Subject key identifier: 4E:11:F8:6A:02:34:15:3D:D7:C4:29:01:AA:C2:CE:9F:41:97:AE:6D
Authority key identifier: 86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
Certificate issuer: /CN=86e99134171b5863f62f22b7d7abf740349528ec
Certificate serial: 01A0C8C718816B236B1919257C3BA5E34734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
Manifest number: 08ED
Signing time: Tue 22 Sep 2026 11:01:26 +0000
Manifest this update: Tue 22 Sep 2026 11:01:26 +0000
Manifest next update: Wed 23 Sep 2026 11:01:26 +0000
Files and hashes: 1: humRNBcbWGP2LyK316v3QDSVKOw.crl (hash: l0tvuI5QK2kCdfwq8lpLL5Hj1Y4tWQ+4Z9tUHHcMAxQ=)
2: s9kGup8ETCR_TnIpADbpkN9_7es.roa (hash: Tl2xHND59kaKyod+n7S8xlRanBYJiPYsjS6E7wmOt/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c7:18:81:6b:23:6b:19:19:25:7c:3b:a5:e3:47:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e99134171b5863f62f22b7d7abf740349528ec
Validity
Not Before: Sep 22 11:01:26 2026 GMT
Not After : Sep 23 11:01:26 2026 GMT
Subject: CN=4e11f86a0234153dd7c42901aac2ce9f4197ae6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7f:eb:13:78:b4:f0:46:a9:d5:db:5e:a8:b8:
78:03:81:fa:14:55:af:54:8c:08:70:cf:17:56:76:
b5:2e:a9:37:02:2e:5d:12:17:f1:78:67:a2:cf:69:
f0:e8:2d:da:36:c1:65:05:9a:43:aa:6d:ce:67:20:
04:b1:0c:99:d2:9b:d1:14:79:fb:ab:f1:20:a1:65:
dc:8f:2d:b8:5e:4b:03:32:73:64:7a:9c:a5:72:cc:
51:1f:29:52:28:e0:26:bf:8c:d6:b1:8d:98:33:38:
7f:79:84:2d:62:95:6d:14:0f:71:7b:ba:ed:bd:46:
1e:b9:55:a9:de:86:3d:86:50:2b:b5:3d:4b:3e:7a:
48:e0:d8:f7:03:0d:84:54:2b:1f:64:b1:ee:10:1b:
78:62:2b:76:fe:b2:53:b8:74:47:40:c3:a6:8c:4f:
9a:5a:e7:66:46:21:52:1b:12:f8:16:3b:f0:5c:78:
5a:43:37:1e:76:12:c7:5f:1b:a0:f3:8f:7d:77:4b:
8e:45:da:3e:9c:cb:9a:17:67:07:50:53:6e:c5:f1:
d9:be:64:89:1f:e3:65:02:fa:61:62:ff:57:e1:86:
d4:ec:54:27:0e:d8:a6:a2:67:2a:0f:2a:bf:37:e4:
83:1f:2c:af:1a:f4:bb:65:17:ee:21:e3:87:c8:61:
19:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:11:F8:6A:02:34:15:3D:D7:C4:29:01:AA:C2:CE:9F:41:97:AE:6D
X509v3 Authority Key Identifier:
keyid:86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:35:46:60:39:1a:a7:08:a4:71:ac:1c:14:e1:f0:73:28:37:
a5:5a:fe:07:b6:2d:1a:e1:9b:44:a1:e1:a6:fd:b8:d6:f6:1a:
9a:3e:7b:0c:f4:41:c7:7a:e3:d7:e2:25:8d:d3:12:7d:bd:3e:
14:93:f0:b6:96:0f:57:c5:0b:2d:4d:b3:43:04:88:2b:2b:9d:
41:fb:f5:94:e8:bb:70:24:d7:44:b8:24:b8:94:4f:b2:10:6b:
fd:b9:80:79:ad:de:66:d2:aa:6b:f8:08:f7:e3:60:85:67:4a:
94:52:11:cf:15:02:cc:a9:8c:23:e5:30:c8:86:d6:3a:b8:89:
77:dd:1b:be:6b:79:9d:9b:5e:3c:80:a2:47:cf:c6:bf:7c:36:
23:a3:ce:56:d0:47:c3:fb:34:6f:1d:de:54:fe:31:82:25:67:
c0:dc:77:e3:db:d0:97:4b:50:d4:b6:91:c5:5d:0e:59:19:62:
85:a5:18:0a:2f:da:d4:15:79:02:10:fb:09:21:64:3f:20:fb:
fc:5c:3c:2e:dd:c3:95:75:7f:87:fb:17:1c:b2:67:2c:79:35:
1e:73:64:c7:6e:7e:72:a5:e7:11:31:f1:5f:36:f6:60:74:94:
e6:ba:e6:5d:a9:2d:e1:d6:06:ca:92:74:4e:81:7b:ff:9e:36:
24:e9:1e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:11:26 2026 by rpki-client