Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
File: hu-0nfJHSmBCufIQv-qGGxsohu0.mft (raw, json)
Hash identifier: 6/xNLlM+2I+r7bSqqtYlyd1WFadXZSy9I5TPq96wm08=
Subject key identifier: 55:69:A0:DE:FA:23:69:36:05:AA:0B:34:F5:B0:3B:96:58:D3:28:2B
Authority key identifier: 86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED
Certificate issuer: /CN=86efb49df2474a6042b9f210bfea861b1b2886ed
Certificate serial: 019EB9FD174EEF235D8EB9891E206F30E584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
Manifest number: 0FD1
Signing time: Fri 12 Jun 2026 04:00:31 +0000
Manifest this update: Fri 12 Jun 2026 04:00:31 +0000
Manifest next update: Sat 13 Jun 2026 04:00:31 +0000
Files and hashes: 1: 8ptK5EyL818ELWz7bccjTkhrDT8.roa (hash: J57Tpp1jGmkjoUMhY5enpHuf4ytrasZEoVVY530U8w0=)
2: OpdDMo8Cp988IQdFH-astgl9hzE.roa (hash: Nf3Kn5VC0A0Dtv20MogIVytEl5Z6pgrh2zjqqaobSxw=)
3: hu-0nfJHSmBCufIQv-qGGxsohu0.crl (hash: ng/StDW5oLyI/u6vfJkwNFftOnXR0T3h9q+yrGMYHBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:fd:17:4e:ef:23:5d:8e:b9:89:1e:20:6f:30:e5:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86efb49df2474a6042b9f210bfea861b1b2886ed
Validity
Not Before: Jun 12 04:00:31 2026 GMT
Not After : Jun 13 04:00:31 2026 GMT
Subject: CN=5569a0defa23693605aa0b34f5b03b9658d3282b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c2:55:4d:7c:d6:3d:10:a7:2e:58:09:d7:9d:
d1:b2:70:3c:43:b3:51:64:00:8f:6a:ba:dd:e2:26:
80:36:f0:dc:ce:89:f3:66:86:74:ae:b7:a1:94:76:
83:81:41:d5:52:98:77:29:26:0f:1b:fe:3f:7e:7a:
ff:a8:03:5d:84:0a:dd:8b:ed:df:8a:22:ce:eb:12:
b2:4d:df:4f:d9:82:64:9f:2f:c9:e2:36:a0:3d:ab:
0a:ce:6c:40:f7:aa:30:33:fe:96:eb:49:ef:ff:b4:
c0:2a:ca:8b:97:4e:cb:87:ba:83:1a:31:7c:5c:f7:
49:71:fc:38:4b:92:fa:9a:b0:71:36:86:f8:c3:01:
a3:3d:43:81:cc:e4:cd:9f:7c:fd:14:27:48:e3:4a:
e2:7b:5b:88:53:62:4f:45:56:92:1b:16:91:e0:44:
ef:f2:0b:19:20:46:e0:11:89:0d:cb:55:ba:ab:42:
2a:97:16:a2:d1:2b:19:2f:0d:00:5d:47:41:86:4a:
9c:de:73:24:86:d9:f4:7b:07:8e:0b:f4:1f:75:51:
8d:1e:f1:17:f3:66:b1:c5:4c:f8:37:5b:ff:4f:79:
7f:ce:aa:36:91:90:9a:f4:e8:36:54:55:24:63:ca:
ea:cb:48:f5:07:82:d6:5e:29:6c:fd:a0:01:a0:20:
40:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:69:A0:DE:FA:23:69:36:05:AA:0B:34:F5:B0:3B:96:58:D3:28:2B
X509v3 Authority Key Identifier:
keyid:86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:5e:b7:a2:06:24:ff:bb:ea:55:b3:52:38:cb:3f:73:5d:b8:
58:83:7b:bf:e0:78:f3:08:e5:32:e4:61:97:d5:47:87:f1:58:
b4:4d:c8:43:c4:86:1a:02:c9:9c:3a:c1:5a:19:d8:ba:79:69:
2a:6a:55:fc:0f:34:e2:98:07:a9:26:c0:2f:4d:ee:72:6b:6f:
a1:21:02:e4:08:74:66:4b:bc:09:46:96:49:b8:b8:18:99:b7:
b7:13:65:91:2d:f3:96:a3:bd:3d:f2:66:da:53:90:58:6c:52:
cb:6f:92:2b:2c:c8:6e:6d:fa:c2:42:42:82:28:fb:3d:36:e0:
a7:61:e0:7d:c5:8a:a4:f4:78:90:b0:5c:30:47:f7:b6:73:7b:
3e:9e:70:eb:12:54:d2:30:47:84:98:fe:7e:3d:83:cf:15:0d:
55:6d:79:01:7e:4b:72:6a:7e:97:7b:5a:13:d1:10:09:69:3d:
20:78:7c:12:5c:bd:00:e7:33:35:c3:d0:af:d3:bf:a9:0b:75:
05:af:b1:68:3a:21:55:e6:c1:17:43:0b:08:06:60:95:59:85:
9c:19:d9:3b:07:bb:29:30:27:e8:2a:71:8c:77:c1:32:7b:ae:
40:93:c8:f6:16:57:48:aa:bd:12:0c:fd:9c:ae:e4:d6:55:90:
7c:32:77:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:29:21 2026 by rpki-client