Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
File: humRNBcbWGP2LyK316v3QDSVKOw.mft (raw, json)
Hash identifier: qXWeZMpyTU47PNk1dd5FMcmNZl/YcWPbPfm5v+fGt8Q=
Subject key identifier: D3:C9:37:CF:F9:EA:B8:D2:08:B6:9F:7C:A3:AE:29:02:08:D4:B1:63
Authority key identifier: 86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
Certificate issuer: /CN=86e99134171b5863f62f22b7d7abf740349528ec
Certificate serial: 019F91DAFF8D6BCD263CDF13F70CEA9E51A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
Manifest number: 084C
Signing time: Fri 24 Jul 2026 02:01:16 +0000
Manifest this update: Fri 24 Jul 2026 02:01:16 +0000
Manifest next update: Sat 25 Jul 2026 02:01:16 +0000
Files and hashes: 1: humRNBcbWGP2LyK316v3QDSVKOw.crl (hash: hkxsRWIdrQ9NDPDMfdDyvW9i/S7DzqQj5f/7bNDX8Qg=)
2: s9kGup8ETCR_TnIpADbpkN9_7es.roa (hash: Tl2xHND59kaKyod+n7S8xlRanBYJiPYsjS6E7wmOt/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:ff:8d:6b:cd:26:3c:df:13:f7:0c:ea:9e:51:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e99134171b5863f62f22b7d7abf740349528ec
Validity
Not Before: Jul 24 02:01:16 2026 GMT
Not After : Jul 25 02:01:16 2026 GMT
Subject: CN=d3c937cff9eab8d208b69f7ca3ae290208d4b163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:64:bb:6c:02:34:f7:c2:98:7a:f4:69:12:31:
98:97:e5:2a:e7:07:b5:b3:d0:94:c2:58:54:53:3b:
f9:16:14:58:78:e4:dd:ca:ad:e8:ca:a6:ec:cf:ff:
cb:89:73:00:99:0c:75:70:c8:8d:92:9b:d8:f7:e7:
52:c3:ae:18:fa:66:8c:37:64:c6:f8:3f:c6:7f:30:
47:bd:7e:04:9b:44:ff:1f:7b:64:05:4c:97:e5:c5:
6c:f8:2e:80:d1:91:52:f9:a8:13:74:a4:32:5c:c5:
21:4d:f4:fa:f2:14:96:0f:64:5e:20:e6:18:01:f4:
38:c3:6b:df:c4:44:41:7d:b2:9b:91:07:3d:77:e9:
06:53:33:02:b8:f0:68:94:51:a2:2b:cb:31:af:8b:
93:f7:69:71:d7:b3:b5:56:d6:1f:b4:24:ad:0e:33:
8f:66:50:b2:fa:07:85:df:57:19:58:9f:e5:37:6f:
fd:5a:3c:e4:cc:3d:51:72:0c:02:c5:09:14:11:69:
ab:6a:71:7a:de:c7:37:6a:54:f9:75:18:d4:c6:03:
61:7f:38:c1:cd:80:37:24:2a:c4:40:2a:4e:b6:4d:
2b:73:45:31:47:a3:f4:dd:f3:23:a3:51:7f:a2:15:
78:8e:3b:51:91:54:83:60:07:72:25:fa:a8:36:27:
99:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C9:37:CF:F9:EA:B8:D2:08:B6:9F:7C:A3:AE:29:02:08:D4:B1:63
X509v3 Authority Key Identifier:
keyid:86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:9c:ce:fa:11:ad:9d:36:52:44:a5:d3:eb:7e:ef:f0:6a:f3:
a6:40:0e:90:00:d4:d2:d1:0f:5f:38:cd:59:ac:79:24:de:43:
1d:03:4a:50:cf:5d:f0:cc:11:fa:c1:ee:6d:5e:e8:34:88:9f:
15:d3:ff:b0:a6:31:c1:52:6f:61:53:7a:bc:c6:76:aa:35:f9:
b0:16:96:45:e4:22:12:28:17:72:40:72:35:87:32:c5:63:2e:
be:38:52:4a:4d:34:cb:49:7f:bf:bc:13:e4:24:9e:88:f7:9c:
3b:f3:26:46:71:99:bc:95:77:33:bf:ff:f6:07:8b:3d:4d:73:
61:e5:15:c9:7b:e8:54:63:89:8b:c2:a9:ce:36:f0:fd:a9:5d:
c4:10:ef:a0:74:a3:13:6f:96:bc:92:1b:eb:c4:89:8c:f2:e9:
ff:c0:fe:7c:cc:ea:de:7c:2e:16:27:10:d6:6f:f3:b2:58:40:
0b:2b:60:a9:14:6c:9b:02:5e:e2:0c:b4:c0:5f:b3:07:a0:40:
42:50:4b:ae:23:22:df:43:23:62:0e:de:d2:30:dc:04:0e:e8:
9a:09:28:7b:e2:ff:d2:07:c3:e1:59:c7:9a:1a:94:5a:d2:f2:
be:1d:13:38:1d:8b:2f:df:83:69:ae:d3:1f:bc:62:95:c8:58:
8f:44:f4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:35:28 2026 by rpki-client