Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft
File: hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft (raw, json)
Hash identifier: n9/RnXpwsBqQktBvLE1Ul93Zpx5bT/Ewr1wBydhTQts=
Subject key identifier: B5:2A:37:4C:90:F9:5E:6B:85:79:F9:78:98:18:CE:32:BD:22:C9:0A
Authority key identifier: 86:EE:12:68:FE:0A:AD:F3:17:AB:44:FD:81:6D:10:FE:54:DD:FC:0C
Certificate issuer: /CN=86ee1268fe0aadf317ab44fd816d10fe54ddfc0c
Certificate serial: 019D28BBCBEA1080AEF332D29B4EA79013E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft
Manifest number: 0A9F
Signing time: Thu 26 Mar 2026 06:01:28 +0000
Manifest this update: Thu 26 Mar 2026 06:01:28 +0000
Manifest next update: Fri 27 Mar 2026 06:01:28 +0000
Files and hashes: 1: hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.crl (hash: t8NfULfrKUiBn/fXCB+ABejqws+eMdqIkfQ06g5c3sQ=)
2: qtCMKtFADXmQGhh_eKtzrmWvBa8.roa (hash: kbuv7JTegWevUL9mK4rEjoFikGWED4pulN6YzvI+XDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:cb:ea:10:80:ae:f3:32:d2:9b:4e:a7:90:13:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86ee1268fe0aadf317ab44fd816d10fe54ddfc0c
Validity
Not Before: Mar 26 06:01:28 2026 GMT
Not After : Mar 27 06:01:28 2026 GMT
Subject: CN=b52a374c90f95e6b8579f9789818ce32bd22c90a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:77:84:a4:6d:6a:01:04:29:bd:b1:ab:30:21:
20:a8:3d:97:6c:2f:82:07:e9:57:07:f3:05:c8:60:
cf:91:47:74:59:2f:33:9c:d6:1c:d4:4c:97:bb:00:
d5:9f:42:8c:8b:e1:c5:f4:21:ba:f4:99:a1:c5:4c:
4b:51:99:db:6d:b9:9a:a2:7e:4f:bc:70:78:18:a7:
8f:01:a0:52:33:02:3b:0b:53:ab:11:75:e1:c6:51:
6d:d1:92:f0:9b:d1:a1:f6:b0:68:d9:74:78:af:f1:
9b:0b:d1:a0:70:ee:91:3d:e7:7f:5b:cb:3d:7e:a1:
d7:ee:77:33:15:34:40:02:c9:ac:38:8c:65:7e:ae:
49:a9:45:43:aa:76:b1:d8:9f:43:62:b6:97:68:75:
ae:5f:2a:33:7e:03:e2:cb:8e:1e:e5:69:db:5b:14:
50:7c:de:95:72:ca:e9:c0:b3:db:dc:75:59:6f:3a:
e0:28:2f:a2:27:41:ee:e3:4f:de:c0:b4:b0:3f:39:
a9:5c:a1:81:7b:c0:ab:40:fe:56:82:79:87:dc:f3:
d1:10:c8:72:0f:6e:ab:5e:c7:58:f7:73:00:be:2c:
fa:86:23:eb:5c:38:69:31:52:79:52:df:25:d2:75:
b1:03:7c:64:77:ca:b1:a1:64:aa:4c:4a:e3:fb:04:
f3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:2A:37:4C:90:F9:5E:6B:85:79:F9:78:98:18:CE:32:BD:22:C9:0A
X509v3 Authority Key Identifier:
keyid:86:EE:12:68:FE:0A:AD:F3:17:AB:44:FD:81:6D:10:FE:54:DD:FC:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d8:c4:94:18:be:30:22:83:4e:d7:7f:dd:d6:0d:c4:22:b2:
4b:d1:b5:fa:22:1b:26:cb:88:91:f9:f3:0c:11:c0:42:7f:c2:
05:7d:73:de:c5:aa:97:2a:02:78:5f:69:66:48:08:1c:3c:ce:
25:88:d0:6a:1e:c8:be:2e:70:77:33:e4:ca:ff:ff:a1:9e:ac:
ee:4d:11:0a:b9:8c:3a:06:05:b8:33:72:9a:b9:de:be:43:34:
73:f3:90:77:94:57:92:96:c8:63:71:f9:17:d7:42:f3:c9:7a:
0f:ad:5c:5d:2b:14:7f:5a:04:bf:41:56:c1:9d:b8:54:55:12:
b1:53:4e:d0:eb:42:cf:bb:e3:f9:80:62:56:a5:4a:5a:ad:04:
29:30:d8:17:53:12:55:d7:e3:88:50:bf:93:53:26:02:2f:b8:
23:8f:92:9c:1f:cf:f2:e3:67:0f:0e:88:49:ce:f8:3b:68:b9:
75:3d:da:69:00:d9:b0:d8:76:71:c4:39:95:0f:76:94:c0:4c:
05:a4:79:c2:4f:7a:8e:f9:c6:ae:b9:c1:da:d9:69:9c:e6:06:
da:71:3f:4b:5d:c7:f9:d6:d7:9d:a1:80:85:ea:01:bf:f2:0f:
34:a4:31:2f:4a:a5:b8:59:bf:80:28:30:89:d5:d2:01:0b:c9:
67:93:ef:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:01:00 2026 by rpki-client