Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
File: humRNBcbWGP2LyK316v3QDSVKOw.mft (raw, json)
Hash identifier: xKMsOHZsiRo2d0DBOF+1vzvKMVJDbFbvthxYlg/ziW0=
Subject key identifier: C6:F5:8F:EE:6F:AD:3C:33:E2:E4:93:B6:17:3A:20:2C:25:57:77:3E
Authority key identifier: 86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
Certificate issuer: /CN=86e99134171b5863f62f22b7d7abf740349528ec
Certificate serial: 019FAAF53B022A70C07835DAF5D4346321BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
Manifest number: 0859
Signing time: Tue 28 Jul 2026 23:00:25 +0000
Manifest this update: Tue 28 Jul 2026 23:00:25 +0000
Manifest next update: Wed 29 Jul 2026 23:00:25 +0000
Files and hashes: 1: humRNBcbWGP2LyK316v3QDSVKOw.crl (hash: OZilkolizYqMBXpS2YiUXvm0GoNujoE3ykcQxjJQZjI=)
2: s9kGup8ETCR_TnIpADbpkN9_7es.roa (hash: Tl2xHND59kaKyod+n7S8xlRanBYJiPYsjS6E7wmOt/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:3b:02:2a:70:c0:78:35:da:f5:d4:34:63:21:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e99134171b5863f62f22b7d7abf740349528ec
Validity
Not Before: Jul 28 23:00:25 2026 GMT
Not After : Jul 29 23:00:25 2026 GMT
Subject: CN=c6f58fee6fad3c33e2e493b6173a202c2557773e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bf:9e:4b:ac:58:47:a3:b5:27:76:fa:a8:7d:
73:aa:9c:41:be:49:e3:ce:38:e9:1f:c9:6f:79:53:
3f:a9:a9:f1:01:2c:23:ee:f1:1f:0e:66:48:24:fe:
16:ac:1d:aa:0b:3f:c7:ca:ae:bd:e2:cb:25:42:6c:
23:e8:ea:0c:d3:7b:c0:7d:54:b8:61:d5:13:3c:8d:
43:6c:6c:fe:54:87:8c:1d:ef:4a:c5:16:3e:09:f0:
cd:70:b7:bf:3f:d9:18:ee:0e:c7:43:8e:d0:b9:a8:
04:77:e7:4f:5e:50:4a:5d:56:22:5b:be:29:e8:2c:
a5:32:52:16:13:1b:ee:ca:bc:89:9a:e7:b5:b1:f0:
d5:1e:1f:32:0a:d1:fb:bf:86:e0:c2:67:01:5f:58:
f3:3e:11:3c:e5:a7:2c:03:ef:c3:23:60:64:d2:f6:
88:51:d8:68:9f:95:9d:bf:38:a7:a7:65:c6:97:f5:
72:3d:cd:d7:aa:fe:29:a4:d7:3a:f3:6f:a1:c2:55:
72:2c:ff:2c:0e:e7:62:b5:3d:88:cf:a6:60:bc:55:
62:f1:ec:02:d2:52:07:6d:2b:73:35:9d:e8:8e:63:
cd:7c:91:12:58:6a:6f:fa:15:0f:3b:96:35:51:c3:
64:ed:4e:93:ea:89:0b:32:c8:24:b7:ad:a4:14:f5:
42:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F5:8F:EE:6F:AD:3C:33:E2:E4:93:B6:17:3A:20:2C:25:57:77:3E
X509v3 Authority Key Identifier:
keyid:86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:8e:54:43:28:85:db:17:b9:f1:77:17:29:28:88:44:e5:d9:
cf:b2:c5:08:81:9a:37:60:dd:3f:b8:8d:99:8a:2a:c0:77:60:
2e:70:9a:a5:00:7d:de:f4:40:5f:a8:cc:40:57:91:e4:0b:66:
7b:e3:60:17:91:96:de:b8:49:f8:ce:f3:3c:da:38:21:0b:7c:
b5:7c:00:76:ec:fa:0b:9a:fe:43:31:a4:f1:1b:9c:ee:d2:bb:
68:46:5f:c7:b1:ac:e0:ab:60:28:8b:59:65:a0:a0:fb:8a:a6:
56:80:4b:60:58:bd:7a:4d:e2:af:01:bc:b6:f4:04:60:95:11:
99:19:9f:12:91:59:1b:b2:3e:67:5b:1d:65:29:94:69:11:5e:
6a:e9:80:96:45:8c:a0:2a:f0:ca:e3:7f:2e:5f:e2:12:33:0b:
40:fd:7b:69:5b:00:77:db:a5:7d:61:ce:d9:62:a2:4f:b4:59:
c1:ee:4a:aa:90:86:f8:39:70:6e:45:9b:fa:40:f5:d6:a1:c4:
6d:80:8e:6a:56:fd:59:89:a4:f3:14:61:4a:80:e2:9e:d9:49:
cb:51:c8:5a:10:82:5e:8e:77:f8:06:40:d1:ed:e0:54:9e:3a:
24:e6:8a:24:4e:d4:11:ce:b0:d9:02:8a:00:61:27:03:12:38:
39:64:af:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:36:36 2026 by rpki-client