Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/hu9QZSG0-b0foX8wh2WfssVG4Ng.mft
File: hu9QZSG0-b0foX8wh2WfssVG4Ng.mft (raw, json)
Hash identifier: +U7pBCbA9dXoXoot3dRuEajpcS336HyeskbVJf07fT4=
Subject key identifier: 1B:92:65:0C:93:E3:E8:A0:24:AB:D4:BD:49:51:99:48:33:C8:D6:32
Authority key identifier: 86:EF:50:65:21:B4:F9:BD:1F:A1:7F:30:87:65:9F:B2:C5:46:E0:D8
Certificate issuer: /CN=86ef506521b4f9bd1fa17f3087659fb2c546e0d8
Certificate serial: 01A0189C95AA3E9FC13D87BB77112BDCFB2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu9QZSG0-b0foX8wh2WfssVG4Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/hu9QZSG0-b0foX8wh2WfssVG4Ng.mft
Manifest number: 29
Signing time: Wed 19 Aug 2026 06:01:50 +0000
Manifest this update: Wed 19 Aug 2026 06:01:50 +0000
Manifest next update: Thu 20 Aug 2026 06:01:50 +0000
Files and hashes: 1: A_g1DllssVjdnXxocZsRi-An7Dw.roa (hash: hk+uPdm0g85tmSHt3uNHtNurIVJM/qxXimh5C7XbKd4=)
2: hu9QZSG0-b0foX8wh2WfssVG4Ng.crl (hash: ZeT44ZmeT6zAvo58krtjhy5Qz16/x+4TcaRMQSJgNfE=)
3: lMbycOyKsNQEYDbbnO8jLbNPRkE.roa (hash: eTJe4v/IqH8HQqSSHHi7pyJmR8yUrAqAwUv/AvrAmLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/hu9QZSG0-b0foX8wh2WfssVG4Ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/hu9QZSG0-b0foX8wh2WfssVG4Ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/hu9QZSG0-b0foX8wh2WfssVG4Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Aug 2026 06:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:18:9c:95:aa:3e:9f:c1:3d:87:bb:77:11:2b:dc:fb:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86ef506521b4f9bd1fa17f3087659fb2c546e0d8
Validity
Not Before: Aug 19 06:01:50 2026 GMT
Not After : Aug 20 06:01:50 2026 GMT
Subject: CN=1b92650c93e3e8a024abd4bd4951994833c8d632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7b:0e:ee:65:82:65:42:f1:f8:e2:17:d8:95:
f9:fa:9b:ad:82:b4:15:8a:6d:4b:2a:0a:6f:0c:91:
ed:9d:df:94:38:ec:91:89:4d:d8:51:be:80:5e:99:
62:82:f3:20:5b:99:0d:54:63:17:20:91:68:04:98:
ab:3b:6e:5b:25:6b:9a:70:51:80:20:46:c2:f3:db:
23:1b:7d:cb:8f:00:ef:96:ab:74:c3:0a:ae:16:32:
fb:aa:07:27:5b:e8:85:48:b3:92:7a:2b:c0:97:2b:
28:ae:21:36:ae:4e:df:66:a1:2b:c0:d0:ff:0e:36:
4f:7a:fd:ac:d2:ed:f3:c0:bf:3c:c5:82:c6:51:12:
fd:4b:05:cb:9f:98:a3:8d:e2:82:41:c6:4b:46:f4:
18:51:98:87:5f:74:1e:7b:c0:28:dd:7e:4e:02:ad:
5e:bf:33:24:33:52:93:82:30:6e:17:67:e7:2f:72:
03:1c:a1:c2:b6:79:32:bd:e8:66:00:52:14:00:72:
7b:92:51:55:90:86:47:83:6a:26:e3:90:40:88:35:
cf:31:d1:14:e9:38:e1:2d:bc:e9:4c:39:34:f4:92:
2e:58:49:16:a6:df:2e:28:24:1a:a2:f6:8f:04:41:
68:8e:65:27:a9:1b:eb:fc:9d:a5:66:ef:4e:2f:40:
0d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:92:65:0C:93:E3:E8:A0:24:AB:D4:BD:49:51:99:48:33:C8:D6:32
X509v3 Authority Key Identifier:
keyid:86:EF:50:65:21:B4:F9:BD:1F:A1:7F:30:87:65:9F:B2:C5:46:E0:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu9QZSG0-b0foX8wh2WfssVG4Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/hu9QZSG0-b0foX8wh2WfssVG4Ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/hu9QZSG0-b0foX8wh2WfssVG4Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:9c:a2:1d:37:d8:d3:76:2c:28:ac:a4:de:b6:91:50:0a:49:
4e:46:23:94:19:96:a9:f0:02:fe:56:cb:80:12:a2:a1:c3:6e:
9b:78:58:ec:e7:b4:be:f5:6e:76:3e:8a:ae:c8:5b:0e:44:b6:
98:f8:1f:f8:11:42:c0:83:a8:22:ba:9d:6a:f7:92:97:72:61:
2c:61:11:8d:2f:0a:35:b3:37:77:e8:32:f5:03:ec:19:5f:81:
fb:4e:39:b0:5f:ee:3e:1a:e8:e8:51:6a:40:bc:71:8f:fe:63:
55:62:40:eb:d3:26:1c:0a:55:d1:02:82:8a:6c:42:fc:ec:a4:
8d:d2:db:d2:63:ba:e0:02:83:bf:d3:cf:2f:71:e6:20:e0:70:
dc:8b:f1:6d:e1:46:07:3a:4a:08:8b:9f:1e:98:f0:14:c2:5f:
9b:2a:e7:e6:87:09:a6:cf:73:fa:61:4c:a6:fa:74:5e:02:fa:
41:95:87:15:e5:6c:ee:8c:dd:62:5d:d8:5b:fa:73:cf:ad:6f:
4f:6b:83:fd:1a:9a:4f:15:72:f9:82:6d:7f:b8:94:ad:4b:fe:
69:dd:44:43:74:52:a0:70:c1:cc:f1:e4:12:dc:5d:60:7e:a0:
03:dd:67:88:60:19:80:c1:9d:73:86:44:a9:6c:37:a2:a0:ed:
81:ae:aa:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:59:44 2026 by rpki-client