Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
File: humRNBcbWGP2LyK316v3QDSVKOw.mft (raw, json)
Hash identifier: DZ5jerxeywSbkK/ynjyX5v/IcOYiENkT5vDvdZLt99U=
Subject key identifier: 9D:44:AE:EC:64:E4:48:0B:CC:97:CA:23:30:70:73:E9:36:B5:05:8E
Authority key identifier: 86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
Certificate issuer: /CN=86e99134171b5863f62f22b7d7abf740349528ec
Certificate serial: 019DA3786EACA31BB3D145340973A023EED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
Manifest number: 074C
Signing time: Sun 19 Apr 2026 02:01:11 +0000
Manifest this update: Sun 19 Apr 2026 02:01:11 +0000
Manifest next update: Mon 20 Apr 2026 02:01:11 +0000
Files and hashes: 1: humRNBcbWGP2LyK316v3QDSVKOw.crl (hash: y6sNQJAAXVINP4Nw2eomtO1DBvOQBpeUTD/VICIR0pQ=)
2: s9kGup8ETCR_TnIpADbpkN9_7es.roa (hash: Tl2xHND59kaKyod+n7S8xlRanBYJiPYsjS6E7wmOt/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:6e:ac:a3:1b:b3:d1:45:34:09:73:a0:23:ee:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e99134171b5863f62f22b7d7abf740349528ec
Validity
Not Before: Apr 19 02:01:11 2026 GMT
Not After : Apr 20 02:01:11 2026 GMT
Subject: CN=9d44aeec64e4480bcc97ca23307073e936b5058e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bc:40:4e:b4:51:ff:a0:39:56:34:ce:d5:83:
fc:55:1b:95:20:b8:10:7f:82:6d:27:d0:21:4b:4a:
2b:00:3a:5f:fd:11:7c:2b:7f:31:06:6b:4d:32:cc:
43:3a:0a:43:14:69:3b:81:49:52:dc:cc:61:24:c4:
8c:14:f0:74:49:64:d5:6b:97:c8:49:28:68:f7:ef:
7d:eb:f4:5b:af:b2:06:ca:c0:31:ca:1e:d6:ac:be:
91:59:1a:1e:71:9b:63:f5:81:6f:9b:b7:5e:4e:2c:
cb:06:5b:a5:02:e3:2a:82:22:2c:7b:52:6f:24:c2:
50:35:7d:54:24:19:54:9d:1a:90:f3:eb:e1:a9:1c:
d4:d5:b5:fa:5b:a7:2f:7c:23:e6:b3:42:ab:82:52:
71:c9:c7:a1:c4:cc:db:f9:6a:7e:40:bd:95:91:a8:
4c:3d:a4:b3:e3:13:48:80:6a:df:17:78:1a:6f:52:
b9:a5:76:f7:13:73:8d:d0:57:f4:36:98:5b:a3:97:
08:c0:3c:a2:a5:80:43:44:ca:21:9c:b6:34:0a:44:
ff:fd:9c:a1:25:a5:34:e3:5a:51:8b:6e:18:24:73:
ef:61:19:a1:19:cf:86:8e:14:03:84:79:d5:af:ef:
84:06:3f:c0:ea:64:dd:21:28:53:7e:de:57:ad:1b:
8b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:44:AE:EC:64:E4:48:0B:CC:97:CA:23:30:70:73:E9:36:B5:05:8E
X509v3 Authority Key Identifier:
keyid:86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ab:6e:52:51:2f:f1:b7:cc:01:e8:9e:42:38:eb:a2:2b:99:
0a:db:8a:8b:a4:63:49:f9:b3:17:85:a8:5f:75:de:32:ca:73:
c6:3d:40:3d:29:2a:08:22:4e:d6:32:e1:36:6f:d9:42:77:4d:
0b:64:89:9e:e5:f6:e2:82:28:ac:e5:af:f1:4a:35:5a:12:38:
92:e9:42:ed:d7:d1:b5:23:52:c5:cc:6b:82:01:fb:aa:a5:ba:
d0:14:1f:ce:bd:85:39:91:94:ae:3c:94:ec:3d:01:ec:2f:ea:
3f:b7:14:5b:ee:34:41:12:b4:04:52:46:fe:36:08:ad:e3:e9:
26:1a:d1:5d:32:1c:3e:f6:56:22:8d:8e:b9:19:4c:a8:c4:16:
22:4b:1f:35:e4:1a:e1:f3:1e:b3:da:cc:11:a8:1d:f4:ee:72:
b0:7f:b2:ea:13:2f:63:3f:1a:25:93:67:ac:2e:ff:ee:86:14:
4a:f2:03:37:46:ec:f6:23:e4:97:e4:c8:70:49:85:69:f7:49:
ca:63:4c:df:ed:77:6c:55:43:d0:fc:97:21:d1:4b:7c:df:8f:
b2:97:9c:70:90:fc:61:ce:bf:a3:46:ad:e7:34:5a:8c:ae:06:
98:1d:cd:a7:46:65:70:ec:5b:77:15:9f:13:78:2c:40:60:f2:
a2:a8:7c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:10:42 2026 by rpki-client