Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/huVIzmZm6TlAQNl_mldr1FxyDkI.mft
File: huVIzmZm6TlAQNl_mldr1FxyDkI.mft (raw, json)
Hash identifier: CpMkWEiEe9vUG8MTVwoCS+Pqqkng2+qP+7C5Sl/RMKE=
Subject key identifier: 4F:76:AC:87:73:C9:3F:13:52:2F:6B:E0:94:23:F3:0E:70:DD:47:54
Authority key identifier: 86:E5:48:CE:66:66:E9:39:40:40:D9:7F:9A:57:6B:D4:5C:72:0E:42
Certificate issuer: /CN=86e548ce6666e9394040d97f9a576bd45c720e42
Certificate serial: 01A01FB0DF885F6EAA098041AD26309657A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/huVIzmZm6TlAQNl_mldr1FxyDkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/huVIzmZm6TlAQNl_mldr1FxyDkI.mft
Manifest number: 65
Signing time: Thu 20 Aug 2026 15:01:20 +0000
Manifest this update: Thu 20 Aug 2026 15:01:20 +0000
Manifest next update: Fri 21 Aug 2026 15:01:20 +0000
Files and hashes: 1: huVIzmZm6TlAQNl_mldr1FxyDkI.crl (hash: 5YdD9HJEFvmW+Eo/NzSf9M5hD4Es+0XIjzQQfFJYDAw=)
2: kWAwDb9QXu3iQi0JAJPcUBpsVOI.roa (hash: UX+7yg4TJhnCGO4kiz6ejPDETIdb9Mgqo1XA5XUPupY=)
3: oaMdDyOuMHLrZLQUfdyGK2klDt0.roa (hash: iBXiM+MZUWH8Mi/ysn+EmmuC3Xw+mlW+sWAsTir7KzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/huVIzmZm6TlAQNl_mldr1FxyDkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/huVIzmZm6TlAQNl_mldr1FxyDkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/huVIzmZm6TlAQNl_mldr1FxyDkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 15:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:b0:df:88:5f:6e:aa:09:80:41:ad:26:30:96:57:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e548ce6666e9394040d97f9a576bd45c720e42
Validity
Not Before: Aug 20 15:01:20 2026 GMT
Not After : Aug 21 15:01:20 2026 GMT
Subject: CN=4f76ac8773c93f13522f6be09423f30e70dd4754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:69:ee:ae:01:51:ed:92:8c:82:f4:15:34:c2:
05:c2:24:d5:08:f3:13:29:ce:88:1d:2f:ce:b3:5c:
66:70:c3:bd:b4:2f:4c:d0:02:ce:5c:52:c6:0e:cb:
e9:b5:08:0c:35:a0:0a:94:ef:de:06:bf:5f:d8:c0:
8c:b2:b8:6e:ca:26:07:5d:2d:65:03:ec:5a:53:36:
4c:6e:1f:a1:e8:49:f3:90:1a:61:61:42:e2:13:9a:
17:a9:65:df:f5:ea:08:33:1c:32:f6:7f:51:37:f5:
40:3a:2c:3e:2e:e2:55:7c:49:31:5e:0a:51:34:81:
ba:33:5b:04:3e:9e:c5:1f:47:c7:ea:46:4b:f7:49:
da:3c:cd:d5:d6:d3:e5:75:f2:d9:22:2b:c9:95:fb:
da:ef:26:12:66:22:01:a3:de:ab:ea:c9:40:56:1b:
96:f5:25:17:db:56:79:85:2d:81:f8:de:64:3d:52:
6e:45:9f:76:5e:83:fc:77:9d:80:df:55:57:e3:1d:
8b:84:26:f6:91:6a:8a:7f:16:57:81:94:09:e5:94:
90:db:ee:91:b1:a2:4e:3a:7c:84:00:17:59:38:d3:
2f:3b:2f:54:c3:1f:72:c4:c1:3e:42:45:b2:31:75:
53:a9:bf:04:1b:21:ca:9b:7d:c0:ff:45:f9:5b:10:
69:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:76:AC:87:73:C9:3F:13:52:2F:6B:E0:94:23:F3:0E:70:DD:47:54
X509v3 Authority Key Identifier:
keyid:86:E5:48:CE:66:66:E9:39:40:40:D9:7F:9A:57:6B:D4:5C:72:0E:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/huVIzmZm6TlAQNl_mldr1FxyDkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/huVIzmZm6TlAQNl_mldr1FxyDkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/huVIzmZm6TlAQNl_mldr1FxyDkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ba:e7:d3:9b:1f:fe:6e:d0:83:11:27:70:fe:4e:84:37:3e:
b2:01:3b:ef:89:0d:6c:27:17:89:a9:b3:83:8b:3c:3c:8f:b1:
2a:b1:ab:b1:2e:0f:15:04:61:58:ae:91:fa:c5:ac:d8:bc:2a:
df:30:2c:5a:10:cc:15:0f:ce:71:a1:e3:93:5a:67:bd:b1:9e:
4e:b9:0d:86:e5:1c:ff:eb:96:6f:3e:1d:f2:3d:58:a5:87:4f:
73:81:34:af:ba:8d:95:b4:14:ed:bc:66:59:b4:fd:44:14:33:
08:f0:87:d0:1a:26:14:22:d4:cc:7a:a5:03:b0:f7:8f:70:ff:
98:35:0b:31:f9:7b:4e:d4:c0:03:4f:8d:d4:e9:2e:c2:29:0e:
df:1e:fd:60:78:ce:e0:1a:0c:a8:ad:42:34:e6:f4:fd:74:43:
3b:8b:2f:83:80:fd:e4:00:08:34:68:2b:42:98:7d:2b:a2:b4:
4d:b2:42:d8:31:e6:23:26:6a:3d:55:e5:0d:df:e0:76:59:df:
ff:0f:42:96:bb:1b:c9:7d:7b:70:52:09:dd:6b:3e:dc:c7:88:
09:00:27:59:96:88:05:4a:a8:b9:aa:21:eb:09:de:ff:47:7a:
db:4d:b3:1d:41:1a:0b:8f:e5:7a:6f:a6:eb:6a:5b:c6:0c:bc:
8d:01:36:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAfsN+IX26qCYBBrSYwllejMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZTU0OGNlNjY2NmU5Mzk0MDQwZDk3ZjlhNTc2YmQ0NWM3
MjBlNDIwHhcNMjYwODIwMTUwMTIwWhcNMjYwODIxMTUwMTIwWjAzMTEwLwYDVQQD
Eyg0Zjc2YWM4NzczYzkzZjEzNTIyZjZiZTA5NDIzZjMwZTcwZGQ0NzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWnurgFR7ZKMgvQVNMIFwiTVCPMT
Kc6IHS/Os1xmcMO9tC9M0ALOXFLGDsvptQgMNaAKlO/eBr9f2MCMsrhuyiYHXS1l
A+xaUzZMbh+h6EnzkBphYULiE5oXqWXf9eoIMxwy9n9RN/VAOiw+LuJVfEkxXgpR
NIG6M1sEPp7FH0fH6kZL90naPM3V1tPldfLZIivJlfva7yYSZiIBo96r6slAVhuW
9SUX21Z5hS2B+N5kPVJuRZ92XoP8d52A31VX4x2LhCb2kWqKfxZXgZQJ5ZSQ2+6R
saJOOnyEABdZONMvOy9Uwx9yxME+QkWyMXVTqb8EGyHKm33A/0X5WxBpNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE92rIdzyT8TUi9r4JQj8w5w3UdUMB8GA1UdIwQY
MBaAFIblSM5mZuk5QEDZf5pXa9Rccg5CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHVWSXptWm02VGxBUU5sX21sZHIxRnh5RGtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi82MWRlYmUtZjU2YS00MzNiLTk1MGMt
YzMxNTI1Y2E1MTk2LzEvaHVWSXptWm02VGxBUU5sX21sZHIxRnh5RGtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi82MWRlYmUtZjU2YS00MzNiLTk1MGMtYzMxNTI1Y2E1MTk2
LzEvaHVWSXptWm02VGxBUU5sX21sZHIxRnh5RGtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASrrn05sf
/m7QgxEncP5OhDc+sgE774kNbCcXiamzg4s8PI+xKrGrsS4PFQRhWK6R+sWs2Lwq
3zAsWhDMFQ/OcaHjk1pnvbGeTrkNhuUc/+uWbz4d8j1YpYdPc4E0r7qNlbQU7bxm
WbT9RBQzCPCH0BomFCLUzHqlA7D3j3D/mDULMfl7TtTAA0+N1OkuwikO3x79YHjO
4BoMqK1CNOb0/XRDO4svg4D95AAINGgrQph9K6K0TbJC2DHmIyZqPVXlDd/gdlnf
/w9ClrsbyX17cFIJ3Ws+3MeICQAnWZaIBUqouaoh6wne/0d6202zHUEaC4/lem+m
62pbxgy8jQE2Kw==
-----END CERTIFICATE-----
Generated at Thu Aug 20 23:31:45 2026 by rpki-client