Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/huVIzmZm6TlAQNl_mldr1FxyDkI.mft
File: huVIzmZm6TlAQNl_mldr1FxyDkI.mft (raw, json)
Hash identifier: nnOvxj4+7pzb2rvDit+LGF8VYyWtrE58bn+1Z6b9CVw=
Subject key identifier: B3:9A:ED:F0:D0:D2:40:12:F1:A2:E4:20:11:28:14:F1:D2:1A:AA:0B
Authority key identifier: 86:E5:48:CE:66:66:E9:39:40:40:D9:7F:9A:57:6B:D4:5C:72:0E:42
Certificate issuer: /CN=86e548ce6666e9394040d97f9a576bd45c720e42
Certificate serial: 01A12C200DDCAF6CC1E67F920315ABF71287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/huVIzmZm6TlAQNl_mldr1FxyDkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/huVIzmZm6TlAQNl_mldr1FxyDkI.mft
Manifest number: F0
Signing time: Sun 11 Oct 2026 18:01:00 +0000
Manifest this update: Sun 11 Oct 2026 18:01:00 +0000
Manifest next update: Mon 12 Oct 2026 18:01:00 +0000
Files and hashes: 1: huVIzmZm6TlAQNl_mldr1FxyDkI.crl (hash: ARyxjL0WGHnzzSzK14vLsnkh7AzvOp8XNVthqPgdBdQ=)
2: kWAwDb9QXu3iQi0JAJPcUBpsVOI.roa (hash: UX+7yg4TJhnCGO4kiz6ejPDETIdb9Mgqo1XA5XUPupY=)
3: oaMdDyOuMHLrZLQUfdyGK2klDt0.roa (hash: iBXiM+MZUWH8Mi/ysn+EmmuC3Xw+mlW+sWAsTir7KzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/huVIzmZm6TlAQNl_mldr1FxyDkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/huVIzmZm6TlAQNl_mldr1FxyDkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/huVIzmZm6TlAQNl_mldr1FxyDkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:20:0d:dc:af:6c:c1:e6:7f:92:03:15:ab:f7:12:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e548ce6666e9394040d97f9a576bd45c720e42
Validity
Not Before: Oct 11 18:01:00 2026 GMT
Not After : Oct 12 18:01:00 2026 GMT
Subject: CN=b39aedf0d0d24012f1a2e420112814f1d21aaa0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:96:8c:73:9b:82:58:d7:78:71:97:46:66:7d:
27:0e:a9:12:f7:66:61:b0:d4:2d:6c:d0:7a:2b:2e:
40:96:a4:f4:83:fb:02:50:67:e2:2b:b1:76:57:ad:
cc:1d:e5:e2:9e:6b:e7:3c:2a:c7:ae:00:4c:c5:ed:
13:92:32:93:1f:49:73:4a:51:0c:f5:42:47:d8:41:
29:71:df:d5:e6:38:81:9f:17:a2:9c:4e:81:14:37:
15:78:d6:e9:8a:1e:bd:d0:93:71:58:d1:1d:3b:41:
38:fc:5d:00:f5:7d:ef:b6:dc:fd:6b:c7:88:0f:4d:
d3:ad:97:5a:10:84:3b:b6:ee:ff:94:c8:7a:03:0a:
61:c1:bb:fa:80:d7:c3:0c:1e:af:7d:0d:68:60:2e:
db:e4:3c:5c:2d:42:5a:ac:88:cd:ac:85:ae:cd:91:
a2:09:35:66:77:98:19:36:6d:24:ff:e1:16:c7:15:
f7:a0:47:87:05:6d:bd:3d:db:74:26:0c:04:12:92:
37:1b:41:39:0e:9a:a9:1a:bf:9a:36:96:f3:f8:f3:
b3:4f:98:c6:ca:23:64:1f:ec:2e:5f:45:cf:0b:4a:
f0:98:cd:bb:bb:d3:f2:7e:40:3e:03:7e:73:5b:fa:
58:06:cb:3f:df:69:36:84:75:cc:02:07:9e:35:31:
1f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:9A:ED:F0:D0:D2:40:12:F1:A2:E4:20:11:28:14:F1:D2:1A:AA:0B
X509v3 Authority Key Identifier:
keyid:86:E5:48:CE:66:66:E9:39:40:40:D9:7F:9A:57:6B:D4:5C:72:0E:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/huVIzmZm6TlAQNl_mldr1FxyDkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/huVIzmZm6TlAQNl_mldr1FxyDkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/huVIzmZm6TlAQNl_mldr1FxyDkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:fe:2a:8b:52:64:e0:04:71:98:36:79:e2:1e:64:61:98:9a:
88:ad:75:d9:a4:5e:9c:61:f5:93:e7:4d:e7:c1:d7:76:1a:11:
dd:23:8d:55:f4:9d:fd:88:2f:c8:4d:10:0f:14:cf:fc:39:ff:
7c:e8:ad:4d:7f:35:bb:c3:8b:19:05:02:50:d8:08:bc:cb:44:
12:be:17:92:03:8a:68:97:90:b1:91:ae:87:06:90:04:aa:50:
a7:8e:d9:43:1d:67:bc:a8:9c:0f:70:92:87:c7:9a:7b:5e:71:
2f:c5:53:7e:88:07:fa:a5:93:54:8a:0e:d4:68:ce:ee:24:6f:
a3:f8:a8:a8:c5:e4:8e:ef:95:30:95:f4:60:5e:ee:da:be:a8:
de:99:94:45:0f:c4:3a:77:65:ce:a5:24:53:e9:b6:ca:d2:1f:
86:cd:00:8d:07:5e:2c:f3:f0:2e:ff:aa:2d:71:8e:9c:2e:29:
00:c7:7c:33:0c:6f:ad:95:49:cc:c7:6d:fa:20:5e:dc:9e:7c:
22:87:75:0a:ad:c2:f5:80:62:57:85:62:1a:1e:39:ff:69:65:
05:99:9f:0e:74:90:a7:90:cc:c1:46:80:dd:75:a4:ba:6b:c0:
68:4b:df:d5:8d:e4:b4:01:0b:75:f7:53:12:eb:d9:84:3d:ac:
8f:44:b4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:47:52 2026 by rpki-client