Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
File: humRNBcbWGP2LyK316v3QDSVKOw.mft (raw, json)
Hash identifier: udfKnU01AS7iEdrE9L3OGHoHUr+/aNM+Cllira/T5QA=
Subject key identifier: 22:34:D4:82:A2:FE:36:B8:E9:46:1E:E2:09:D6:A1:2B:68:3D:1B:84
Authority key identifier: 86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
Certificate issuer: /CN=86e99134171b5863f62f22b7d7abf740349528ec
Certificate serial: 019E20FF57F1D6733B18710F61A0F703CED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
Manifest number: 078D
Signing time: Wed 13 May 2026 11:01:05 +0000
Manifest this update: Wed 13 May 2026 11:01:05 +0000
Manifest next update: Thu 14 May 2026 11:01:05 +0000
Files and hashes: 1: humRNBcbWGP2LyK316v3QDSVKOw.crl (hash: oZAOknjcgECUto5T5HEuhKQQg8PqNg8U7OmE8ENeeXA=)
2: s9kGup8ETCR_TnIpADbpkN9_7es.roa (hash: Tl2xHND59kaKyod+n7S8xlRanBYJiPYsjS6E7wmOt/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:57:f1:d6:73:3b:18:71:0f:61:a0:f7:03:ce:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e99134171b5863f62f22b7d7abf740349528ec
Validity
Not Before: May 13 11:01:05 2026 GMT
Not After : May 14 11:01:05 2026 GMT
Subject: CN=2234d482a2fe36b8e9461ee209d6a12b683d1b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cf:d7:bc:a5:a2:d5:3b:00:8a:8b:68:bf:51:
f8:a0:9f:04:34:63:5b:b1:90:14:db:41:44:2a:85:
0d:d2:bb:08:b2:72:1a:92:21:33:2c:52:ff:c9:7c:
3e:69:6b:b4:7a:4f:09:74:ba:1a:30:f1:24:41:a1:
8a:a5:e5:6d:93:53:5c:b2:88:ef:df:22:ce:d1:94:
b5:fd:63:e1:8b:81:18:34:5e:a0:ac:93:6d:f5:4e:
dd:7a:4e:6b:24:eb:bd:16:d6:b4:cf:ff:12:c6:59:
44:b4:b5:75:21:af:b9:dd:6c:18:7c:5a:52:64:2a:
01:b0:3e:31:1f:35:fd:9f:a1:74:83:e6:19:f6:61:
1d:04:dd:02:cf:30:4a:16:b5:42:7d:4d:01:85:ee:
ea:d1:19:72:dc:c5:dd:f5:01:d5:fc:55:fb:cf:06:
37:c0:95:00:47:53:9b:e8:c6:d8:c9:12:95:9c:5d:
b3:49:a5:66:2f:13:12:a6:4e:f8:c4:a5:aa:aa:dc:
5e:47:88:85:44:1a:2b:58:d0:9f:b5:2a:b5:65:76:
88:1e:be:be:f9:53:e4:43:5a:43:40:a1:a5:74:61:
bf:0b:41:c6:9d:6c:c5:ef:ec:b4:d1:71:99:37:ea:
c9:a7:47:d9:8a:d0:86:2a:27:f9:0c:c5:3b:e3:7a:
b8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:34:D4:82:A2:FE:36:B8:E9:46:1E:E2:09:D6:A1:2B:68:3D:1B:84
X509v3 Authority Key Identifier:
keyid:86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f4:fe:b7:d1:3e:c8:78:cf:44:90:7f:60:6a:e9:9e:80:83:
75:d6:ed:7a:c9:01:e7:17:9c:bd:af:36:c3:7e:5d:80:56:a8:
3a:cb:92:d9:0f:38:66:13:e0:18:bf:50:bb:64:33:04:ec:76:
64:51:67:c7:63:83:6b:43:e9:9f:fa:4e:7e:fd:41:61:b8:8c:
0a:f2:84:12:e6:ca:d7:a9:99:9c:e8:f4:61:15:71:09:30:d3:
10:15:b1:59:94:de:6e:9c:7e:27:e1:e3:fa:fc:d7:d9:66:14:
98:48:fd:1c:8b:bc:b4:61:96:82:5e:9d:11:81:29:7a:98:06:
8c:7e:68:8c:c2:c5:2e:89:47:c0:8c:8e:cd:fd:c5:ef:26:c3:
87:29:54:f6:2f:28:d1:2a:d3:6a:69:cc:88:26:4f:dd:2c:d5:
3c:a9:b8:51:b7:e7:76:92:63:c2:8f:54:62:e8:c7:bd:cb:af:
51:38:81:d6:1c:ae:49:64:b8:a5:46:64:da:33:89:01:32:7b:
3e:ce:06:81:08:ab:bb:a5:29:41:44:c7:90:81:30:a7:da:36:
c9:df:fa:6c:f3:fe:54:a7:a0:89:7c:6a:a4:da:03:ad:93:a9:
5b:50:b8:6c:e7:94:12:fe:05:e8:c0:ee:69:bd:c6:b0:5f:cc:
ca:f0:a7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:21:51 2026 by rpki-client