Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/huVIzmZm6TlAQNl_mldr1FxyDkI.mft
File: huVIzmZm6TlAQNl_mldr1FxyDkI.mft (raw, json)
Hash identifier: taBh783aY9KkUvzEMNMlIDXEtoP0YXLheOeuk3suU8Y=
Subject key identifier: 1E:A0:F0:E5:ED:C0:BD:87:7A:07:1C:E0:D4:C1:6B:30:EC:FF:C2:AB
Authority key identifier: 86:E5:48:CE:66:66:E9:39:40:40:D9:7F:9A:57:6B:D4:5C:72:0E:42
Certificate issuer: /CN=86e548ce6666e9394040d97f9a576bd45c720e42
Certificate serial: 019F94A4E5AD7827646F8CFD339B1ED676FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/huVIzmZm6TlAQNl_mldr1FxyDkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/huVIzmZm6TlAQNl_mldr1FxyDkI.mft
Manifest number: 1D
Signing time: Fri 24 Jul 2026 15:01:02 +0000
Manifest this update: Fri 24 Jul 2026 15:01:02 +0000
Manifest next update: Sat 25 Jul 2026 15:01:02 +0000
Files and hashes: 1: huVIzmZm6TlAQNl_mldr1FxyDkI.crl (hash: 6NbIy4TG5bl7eWfmHyaex7cB6/WrS1jfea89WbadyE8=)
2: kWAwDb9QXu3iQi0JAJPcUBpsVOI.roa (hash: UX+7yg4TJhnCGO4kiz6ejPDETIdb9Mgqo1XA5XUPupY=)
3: oaMdDyOuMHLrZLQUfdyGK2klDt0.roa (hash: iBXiM+MZUWH8Mi/ysn+EmmuC3Xw+mlW+sWAsTir7KzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/huVIzmZm6TlAQNl_mldr1FxyDkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/huVIzmZm6TlAQNl_mldr1FxyDkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/huVIzmZm6TlAQNl_mldr1FxyDkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:e5:ad:78:27:64:6f:8c:fd:33:9b:1e:d6:76:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e548ce6666e9394040d97f9a576bd45c720e42
Validity
Not Before: Jul 24 15:01:02 2026 GMT
Not After : Jul 25 15:01:02 2026 GMT
Subject: CN=1ea0f0e5edc0bd877a071ce0d4c16b30ecffc2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:46:da:dd:43:02:d0:e5:12:de:cc:23:17:72:
48:fb:32:da:39:fd:0f:0d:1c:7a:49:96:d6:0e:8e:
00:5b:5a:2d:15:bf:b4:47:e6:7c:ba:a4:40:74:97:
80:1b:60:47:5d:ca:9d:ff:8c:c7:85:e6:f0:92:5a:
24:01:5d:ed:53:76:a5:6e:e5:16:19:23:31:23:bf:
32:70:bc:87:d8:7f:e4:d6:5e:2e:46:94:9c:34:07:
9c:62:6c:60:fd:73:b7:a8:50:1e:7d:85:a8:ca:0b:
65:80:d4:09:d1:75:aa:b9:12:5d:6b:a7:97:54:a0:
e3:eb:9d:63:cf:e8:a5:61:15:f4:b1:d1:60:72:f2:
83:1e:24:1b:93:41:dc:c2:a8:b9:a2:26:1f:ce:a2:
0f:66:d3:cc:01:16:d7:e4:38:7f:19:24:3a:80:17:
c8:29:c2:ac:67:94:14:cf:18:75:cc:54:03:a5:c0:
34:2d:e4:a5:4a:49:d4:f9:a4:83:7d:30:21:06:e4:
2f:5f:06:7f:a0:da:b9:db:b6:eb:31:96:9a:c3:a3:
eb:de:d0:9d:80:81:88:96:2a:b8:a6:c6:f6:1b:f7:
c1:07:e2:ce:3b:cb:aa:89:0b:af:a5:fa:f5:e3:c2:
76:7a:aa:f0:f2:70:8c:a2:b9:dd:77:ba:88:ae:37:
28:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A0:F0:E5:ED:C0:BD:87:7A:07:1C:E0:D4:C1:6B:30:EC:FF:C2:AB
X509v3 Authority Key Identifier:
keyid:86:E5:48:CE:66:66:E9:39:40:40:D9:7F:9A:57:6B:D4:5C:72:0E:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/huVIzmZm6TlAQNl_mldr1FxyDkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/huVIzmZm6TlAQNl_mldr1FxyDkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/huVIzmZm6TlAQNl_mldr1FxyDkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:a8:00:c4:05:ea:89:51:7d:7f:aa:05:cc:54:e7:97:25:cc:
17:0a:54:a5:0d:bc:8e:2d:cb:43:3c:fd:59:c5:af:fc:38:11:
e0:26:45:68:5e:58:ed:ae:95:83:07:17:10:06:de:15:88:2d:
d6:64:35:50:a9:01:4f:d2:bf:ae:5c:97:a2:8a:c5:84:bb:33:
1a:c0:26:d1:39:40:ea:2b:77:b9:3f:ef:95:2f:98:db:09:57:
2e:57:2e:37:08:77:3f:77:79:df:64:56:c8:7f:76:0c:c4:d9:
00:bd:83:2a:f4:c9:c2:cc:33:86:be:68:4e:36:73:57:46:14:
51:64:8d:b6:41:ed:e4:ab:ec:88:3a:0c:6c:d7:cf:0c:21:8e:
36:ec:90:c4:6f:37:2d:6c:b5:43:a3:8e:6c:b1:1c:27:01:54:
af:9c:7f:c5:88:8a:91:2d:ca:47:23:bc:57:2f:3e:5a:0f:21:
64:c1:ad:c0:de:6e:26:49:04:c8:af:15:40:ee:15:0c:4d:e3:
2a:6b:68:42:c5:d4:86:9f:80:1c:cd:20:6f:a0:68:48:86:41:
bf:68:b9:a7:85:ee:e0:40:b3:f7:a6:54:e0:cc:c8:9c:8e:a1:
8b:9b:a7:10:67:2d:03:90:45:3b:f8:84:70:39:db:26:71:49:
6b:9b:35:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:09:12 2026 by rpki-client