Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
File: humRNBcbWGP2LyK316v3QDSVKOw.mft (raw, json)
Hash identifier: vLiplogdZN8o1zM33ZcEccYxdDdVLzMGL8Vlyg9IvI4=
Subject key identifier: 05:52:F7:9E:44:01:01:6F:25:C8:23:F7:CA:E5:79:BC:23:5E:AE:41
Authority key identifier: 86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
Certificate issuer: /CN=86e99134171b5863f62f22b7d7abf740349528ec
Certificate serial: 01A0D0804C335936E5FF0911A50E9D3CDA64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
Manifest number: 08F1
Signing time: Wed 23 Sep 2026 23:01:04 +0000
Manifest this update: Wed 23 Sep 2026 23:01:04 +0000
Manifest next update: Thu 24 Sep 2026 23:01:04 +0000
Files and hashes: 1: humRNBcbWGP2LyK316v3QDSVKOw.crl (hash: SHCa+nXW+KCRbO2ntdozhNzsVplemWa5Tl1jdI3YNtg=)
2: s9kGup8ETCR_TnIpADbpkN9_7es.roa (hash: Tl2xHND59kaKyod+n7S8xlRanBYJiPYsjS6E7wmOt/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:80:4c:33:59:36:e5:ff:09:11:a5:0e:9d:3c:da:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e99134171b5863f62f22b7d7abf740349528ec
Validity
Not Before: Sep 23 23:01:04 2026 GMT
Not After : Sep 24 23:01:04 2026 GMT
Subject: CN=0552f79e4401016f25c823f7cae579bc235eae41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3d:eb:b6:af:80:e5:24:14:06:7e:8e:44:14:
ae:34:f0:a9:ed:77:a3:02:af:97:88:97:3a:0e:0c:
9f:25:a4:65:04:07:46:e4:e5:bb:aa:cc:82:60:2c:
14:ef:24:96:f3:5f:1f:df:5c:35:36:24:01:e0:f5:
54:1f:48:ac:80:b4:8a:c3:31:09:38:fb:86:78:11:
88:fa:0b:24:f0:49:4f:bf:2a:00:5e:94:d8:a5:c1:
2e:f9:b4:63:78:54:64:22:53:2c:a4:c9:6b:86:5d:
dc:8b:fa:f7:98:67:6e:9b:1f:e9:fb:64:d4:69:48:
b3:f7:e8:b3:cf:10:a4:cf:3c:6c:16:64:4e:7e:d2:
31:7a:f7:3d:83:e2:db:95:9a:b4:92:4f:d4:43:a2:
73:22:9d:03:19:b2:92:2b:be:c8:6f:9c:1e:29:63:
b8:0f:23:6b:28:bc:17:57:c2:48:04:6f:b3:f3:d3:
09:c8:9a:8f:3a:1a:f3:f1:80:03:cf:72:b6:63:c7:
fe:c5:68:bb:88:d7:0e:58:6e:ff:8a:2d:fa:a7:e3:
07:3b:65:a8:30:4b:71:a7:bd:da:a0:a4:02:d8:c5:
f0:56:69:99:0c:33:6a:c6:51:69:45:47:13:00:cf:
2d:36:5b:8c:8e:7b:e1:a3:f9:bb:bf:46:45:0f:2a:
93:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:52:F7:9E:44:01:01:6F:25:C8:23:F7:CA:E5:79:BC:23:5E:AE:41
X509v3 Authority Key Identifier:
keyid:86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:5e:5c:a4:28:fe:4e:4f:a4:5d:9c:a6:b5:67:74:4b:65:62:
ac:27:b7:86:89:70:ed:e6:5e:b2:5b:0f:56:1a:2a:01:65:50:
5b:e3:46:ff:56:e1:17:ae:12:3d:52:9d:7a:ee:7c:f2:5b:65:
da:31:a1:80:28:f9:c4:cc:59:6c:08:c8:15:7c:ab:e4:21:b8:
bb:e2:5c:2e:bf:11:b3:a0:5e:81:8e:e4:7e:5b:8b:d9:b0:d8:
a0:b6:af:dc:1e:b5:69:5d:7b:5f:23:56:f3:5c:5d:dc:2a:75:
1a:42:7e:7d:b5:61:4f:08:88:4f:9b:e2:a4:07:f1:3a:06:d7:
f9:b8:8e:e5:59:5d:ac:b1:ed:8f:ec:14:76:32:bc:40:4c:98:
3a:9c:10:1f:aa:be:77:e8:dd:3c:59:48:bf:14:73:fe:62:d0:
8c:d0:8f:39:9a:96:e5:12:52:3b:7d:11:d3:63:f8:2c:9b:ca:
af:f2:14:0b:05:af:ef:47:46:c7:f9:87:db:59:36:59:e6:a4:
cd:1e:1a:96:ba:61:1e:a6:ff:a8:80:bd:59:8d:4c:d9:f2:b1:
8f:45:30:fc:d4:e8:76:28:3a:0e:3b:46:94:b5:d9:20:34:c3:
87:8a:24:ce:5c:db:0e:b4:09:60:dd:c2:ff:2e:f0:b9:27:83:
70:45:8d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:42:44 2026 by rpki-client