Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/huVIzmZm6TlAQNl_mldr1FxyDkI.mft
File: huVIzmZm6TlAQNl_mldr1FxyDkI.mft (raw, json)
Hash identifier: hmoMLKwLLWBVXp5MSLQQcyfK3qEdZN5h+PwSIRmadPU=
Subject key identifier: 35:1B:43:0A:76:53:D1:10:4A:B2:90:29:58:87:32:E1:59:20:1E:20
Authority key identifier: 86:E5:48:CE:66:66:E9:39:40:40:D9:7F:9A:57:6B:D4:5C:72:0E:42
Certificate issuer: /CN=86e548ce6666e9394040d97f9a576bd45c720e42
Certificate serial: 01A139A4675488E96E96DB632183E01A055A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/huVIzmZm6TlAQNl_mldr1FxyDkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/huVIzmZm6TlAQNl_mldr1FxyDkI.mft
Manifest number: F7
Signing time: Wed 14 Oct 2026 09:00:37 +0000
Manifest this update: Wed 14 Oct 2026 09:00:37 +0000
Manifest next update: Thu 15 Oct 2026 09:00:37 +0000
Files and hashes: 1: huVIzmZm6TlAQNl_mldr1FxyDkI.crl (hash: NNnRKGICWVDbylXoHBEpSVOTAmxZhNBhzsA44Yq4sRw=)
2: kWAwDb9QXu3iQi0JAJPcUBpsVOI.roa (hash: UX+7yg4TJhnCGO4kiz6ejPDETIdb9Mgqo1XA5XUPupY=)
3: oaMdDyOuMHLrZLQUfdyGK2klDt0.roa (hash: iBXiM+MZUWH8Mi/ysn+EmmuC3Xw+mlW+sWAsTir7KzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/huVIzmZm6TlAQNl_mldr1FxyDkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/huVIzmZm6TlAQNl_mldr1FxyDkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/huVIzmZm6TlAQNl_mldr1FxyDkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:a4:67:54:88:e9:6e:96:db:63:21:83:e0:1a:05:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e548ce6666e9394040d97f9a576bd45c720e42
Validity
Not Before: Oct 14 09:00:37 2026 GMT
Not After : Oct 15 09:00:37 2026 GMT
Subject: CN=351b430a7653d1104ab29029588732e159201e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:70:02:82:fb:10:fe:eb:7b:25:42:88:e6:
ea:37:f1:21:17:38:75:ab:dd:e2:31:fd:a0:78:f0:
41:13:13:6f:d8:09:0c:c6:85:0e:2c:08:77:41:23:
ca:26:ae:f7:1b:cb:ae:8f:6a:5f:a5:18:4e:6f:2a:
44:2c:a6:77:bc:70:9f:19:dd:12:c6:16:3b:22:77:
68:ac:99:b7:aa:e4:f2:20:88:d3:4b:2e:f0:fd:de:
0c:e5:09:79:56:36:68:e9:cd:dd:2d:e8:01:da:3e:
6f:52:ca:6e:dd:16:d5:4f:08:97:46:5c:9d:af:56:
82:37:2b:fa:d7:8e:aa:5a:09:ef:cf:e7:8e:11:98:
23:27:95:c7:56:26:7d:71:e0:fb:f7:b2:aa:66:a5:
7c:44:6a:aa:81:77:d9:a7:98:7a:f5:9d:8f:6e:17:
a9:68:33:4e:ae:94:3e:9c:65:ba:d3:e9:43:36:0d:
00:33:44:6f:5e:ae:5e:4f:fa:c7:0b:9e:5c:20:2b:
c6:9d:54:85:1f:f9:73:d4:cd:11:6f:22:3a:b6:b2:
78:25:a2:74:58:fd:2a:63:37:bc:0f:70:92:87:02:
5a:60:89:5b:b6:34:0d:68:e3:e2:87:46:e9:7a:e4:
c9:b6:e6:36:c7:e0:94:a2:6d:ed:90:98:2b:f4:79:
fe:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1B:43:0A:76:53:D1:10:4A:B2:90:29:58:87:32:E1:59:20:1E:20
X509v3 Authority Key Identifier:
keyid:86:E5:48:CE:66:66:E9:39:40:40:D9:7F:9A:57:6B:D4:5C:72:0E:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/huVIzmZm6TlAQNl_mldr1FxyDkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/huVIzmZm6TlAQNl_mldr1FxyDkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/huVIzmZm6TlAQNl_mldr1FxyDkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ae:1b:f6:d7:12:03:a8:bd:a6:17:1f:81:f1:7e:ed:ec:02:
3d:7f:af:fd:2f:86:f1:4c:ab:cd:d6:12:a0:86:eb:b5:f7:a5:
99:b0:5b:66:8d:fe:e4:80:31:36:d5:91:a7:10:ea:6f:54:4d:
41:93:c8:1e:05:fb:4d:5b:89:a7:22:74:91:44:6e:c8:75:e3:
c2:bd:02:d3:1d:af:1d:2a:85:6f:52:bc:9d:60:60:f2:94:4a:
67:d8:b4:2c:3b:0b:f5:24:f3:a7:1e:9c:61:83:5f:a6:30:ac:
64:19:e4:95:3d:39:48:24:df:2a:0b:da:cb:b9:dc:80:86:5c:
fa:b2:9e:82:ae:66:04:56:11:51:60:98:24:55:a1:88:67:4c:
72:4c:77:e7:e0:7e:b7:9a:ce:cf:97:3b:86:06:5b:dd:48:12:
fc:90:cd:ea:77:c9:63:dd:93:5d:cb:f9:0d:d2:49:92:f3:2b:
7f:ca:0f:89:a1:76:76:98:67:0d:55:9f:dc:9a:ca:b1:5e:c0:
5a:eb:51:d6:04:e8:7d:c5:a9:0e:4b:34:60:b4:86:80:22:16:
99:0d:60:fe:da:77:3f:9a:0c:56:04:55:2c:05:4b:45:70:8f:
05:1d:1d:40:bb:81:e1:b6:ec:38:0f:54:6f:26:f4:bf:12:5a:
c9:1a:4e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:37:12 2026 by rpki-client