Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
File: humRNBcbWGP2LyK316v3QDSVKOw.mft (raw, json)
Hash identifier: ASgAETfZ66aFpD1WmBjS/Z0AGOshRtAJsZc9rL0yKmM=
Subject key identifier: 13:8A:91:68:72:33:D8:59:6B:9B:F6:FF:54:68:E8:5F:3E:42:7C:C1
Authority key identifier: 86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
Certificate issuer: /CN=86e99134171b5863f62f22b7d7abf740349528ec
Certificate serial: 019D26CCB3BFC548BE72A004B5A3ECC7A5CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
Manifest number: 070A
Signing time: Wed 25 Mar 2026 21:00:42 +0000
Manifest this update: Wed 25 Mar 2026 21:00:42 +0000
Manifest next update: Thu 26 Mar 2026 21:00:42 +0000
Files and hashes: 1: 8YW4uCegbiOXKfdM50rIePBZe5k.roa (hash: daS7MSZX4yQZhE3JNsrTDfEdlUzwTcG/vXeE0dV4qcs=)
2: humRNBcbWGP2LyK316v3QDSVKOw.crl (hash: 77qrao4h7kGUJsMN09AcDl5KL6gcua7EyNc9XKidyto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:b3:bf:c5:48:be:72:a0:04:b5:a3:ec:c7:a5:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e99134171b5863f62f22b7d7abf740349528ec
Validity
Not Before: Mar 25 21:00:42 2026 GMT
Not After : Mar 26 21:00:42 2026 GMT
Subject: CN=138a91687233d8596b9bf6ff5468e85f3e427cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b3:a8:d1:02:cc:f7:c6:86:bb:c8:83:f6:c5:
d9:93:3f:a8:5c:72:cf:3c:3f:29:67:30:ce:b0:00:
ba:b7:08:bd:11:95:00:9e:45:cd:55:eb:af:8a:7d:
5d:a7:92:16:7a:28:a2:51:cb:fb:03:bb:fa:1c:e5:
15:16:2f:21:82:69:8a:86:cf:d2:dc:24:f0:7d:2b:
71:11:ca:7b:af:b7:01:03:7c:b4:d6:a6:0c:d6:3e:
15:64:69:a9:87:62:2b:23:8c:e7:9f:4d:b5:ab:ab:
59:34:3d:8e:3a:8f:64:ac:9e:05:51:23:a4:b9:40:
9b:19:a2:23:73:d2:59:7e:c1:2e:e6:a7:cb:62:e0:
db:c3:64:f2:35:45:6a:79:55:a4:b2:83:dd:43:ac:
b6:fd:58:ce:1e:30:ee:85:dc:0d:a7:1d:bb:9f:07:
66:4a:4e:72:cd:f2:12:a4:a8:65:6f:26:ac:52:bc:
04:f1:47:9e:3d:9b:59:f5:7d:ad:79:f2:10:51:93:
28:0a:2b:3a:ce:61:db:2b:cb:c6:45:82:01:c2:cb:
fd:44:57:7d:a4:71:a3:33:ee:05:c7:00:4f:66:e9:
cd:b1:67:f0:e8:1b:ae:3b:17:ec:8e:e6:1a:88:e2:
c9:19:bd:ba:af:eb:b2:f2:f8:8d:56:18:f9:a1:b9:
7c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:8A:91:68:72:33:D8:59:6B:9B:F6:FF:54:68:E8:5F:3E:42:7C:C1
X509v3 Authority Key Identifier:
keyid:86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:0a:09:ee:0e:7c:45:ab:29:97:22:f5:ca:2e:c7:a5:a0:da:
23:d1:bf:ac:c6:4f:4a:50:91:87:70:06:82:8f:3b:91:70:91:
c5:e6:b3:d7:5a:94:16:e3:82:1e:69:0e:01:cd:2a:ef:43:3d:
18:7d:4d:b4:2a:9b:de:4e:22:1d:53:a5:78:9e:a9:e6:fd:bf:
af:91:1b:6d:69:1e:63:97:14:08:41:00:81:af:b8:48:a9:9f:
6b:8a:cd:ed:fe:fd:fc:58:df:06:88:b6:2a:be:3b:7f:19:76:
b9:33:b9:34:05:89:dd:8e:f7:73:93:d0:78:ad:56:0f:64:98:
5d:1f:d8:ba:c3:83:89:3e:ef:c8:be:74:84:3b:d4:b9:a7:61:
d0:4b:c9:94:d0:ad:66:eb:c5:6a:68:65:4c:90:6d:0f:7f:93:
02:7e:5d:2d:88:44:7f:ec:7b:db:cd:9e:df:7d:35:81:9a:58:
78:93:f8:eb:f0:15:7a:f9:48:6d:19:f5:dd:27:ff:e5:c8:b5:
63:0a:23:97:d9:92:97:74:fa:59:d9:43:66:71:12:67:9b:38:
06:38:84:b9:56:79:80:fb:7b:7a:1f:9a:8f:22:5c:ad:fa:80:
86:24:cd:c9:58:e3:f2:dc:dd:c2:83:95:37:3a:1f:3a:38:ea:
fb:51:a3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:37:19 2026 by rpki-client