Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
File: hu-0nfJHSmBCufIQv-qGGxsohu0.mft (raw, json)
Hash identifier: 7JKxEXw/fBZlm+/9OgB5tGSN2mIU/DdAV+e+p/sufao=
Subject key identifier: C6:C2:09:42:B7:C1:AD:A9:80:33:9A:32:CD:E2:82:E6:59:3E:EB:14
Authority key identifier: 86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED
Certificate issuer: /CN=86efb49df2474a6042b9f210bfea861b1b2886ed
Certificate serial: 019D37C0E733F14B99B6C4E1D7BF49B84C48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
Manifest number: 0F09
Signing time: Sun 29 Mar 2026 04:01:22 +0000
Manifest this update: Sun 29 Mar 2026 04:01:22 +0000
Manifest next update: Mon 30 Mar 2026 04:01:22 +0000
Files and hashes: 1: 8ptK5EyL818ELWz7bccjTkhrDT8.roa (hash: J57Tpp1jGmkjoUMhY5enpHuf4ytrasZEoVVY530U8w0=)
2: OpdDMo8Cp988IQdFH-astgl9hzE.roa (hash: Nf3Kn5VC0A0Dtv20MogIVytEl5Z6pgrh2zjqqaobSxw=)
3: hu-0nfJHSmBCufIQv-qGGxsohu0.crl (hash: TmTH+wHlheC3xCyB2c673HY7GXcjSYD3bjNi3QI6bDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:e7:33:f1:4b:99:b6:c4:e1:d7:bf:49:b8:4c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86efb49df2474a6042b9f210bfea861b1b2886ed
Validity
Not Before: Mar 29 04:01:22 2026 GMT
Not After : Mar 30 04:01:22 2026 GMT
Subject: CN=c6c20942b7c1ada980339a32cde282e6593eeb14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4d:b2:14:00:f9:f7:d6:d7:4b:0b:e0:d9:d7:
59:85:cf:59:cb:96:96:32:ad:3a:8f:b2:38:14:56:
c3:e7:8a:ae:f4:0c:2c:8a:f5:84:ae:0d:f3:a6:7c:
f9:83:b2:4a:6c:5a:c4:52:82:ab:12:df:ab:48:25:
4f:56:48:61:c4:30:49:a4:5d:8d:7d:ca:5c:87:7e:
c3:19:8c:b7:fc:79:95:4c:58:b0:93:7b:85:d6:33:
e3:49:70:f7:43:82:7c:be:53:6c:6c:46:8a:9d:c0:
a6:df:50:03:30:d0:a8:9b:5a:dc:85:1c:86:0a:09:
b1:af:52:a0:98:1d:df:86:37:c9:65:4a:6b:8d:75:
95:22:df:e6:25:8a:d8:fc:34:f0:6f:87:68:50:3c:
c3:82:85:16:34:6f:9f:51:1c:20:72:dd:38:be:ec:
19:bc:87:10:d4:dd:25:a2:5c:b3:49:93:ee:43:ad:
6e:f9:19:e2:47:cc:40:0b:5e:06:d4:0e:46:27:f9:
0f:5a:da:ce:c8:89:b4:a0:56:76:2e:f2:4d:b8:62:
8d:0c:d0:49:c4:9b:db:1b:c7:71:cb:9c:bc:5f:46:
72:17:ca:8f:46:90:9b:af:6b:2b:9e:70:39:c7:3c:
59:25:0e:ed:14:8f:d1:f5:0b:98:57:b3:ff:1a:3a:
83:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C2:09:42:B7:C1:AD:A9:80:33:9A:32:CD:E2:82:E6:59:3E:EB:14
X509v3 Authority Key Identifier:
keyid:86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:93:4d:cd:a6:35:e1:5d:1c:ae:03:2f:17:d3:12:3e:ac:91:
97:12:82:54:7e:16:ee:00:5d:c6:ad:97:88:df:eb:59:38:e0:
dd:11:4a:74:cc:31:8c:f4:7d:5c:cf:0a:9d:ef:56:12:9d:96:
f3:93:34:c2:be:f3:80:3d:b6:0d:33:f8:5c:13:f4:41:10:ba:
c6:4f:ec:02:8d:dc:bc:a2:cc:df:26:ac:b9:7c:ec:c9:91:1d:
51:8e:92:e7:83:bf:59:04:80:b0:a4:35:35:7b:48:38:8a:fd:
fb:37:ca:b2:d4:e0:98:ec:01:7f:d9:3e:ef:a2:52:a7:2e:bb:
6d:f0:03:77:bf:17:79:3c:18:db:22:ff:62:c9:9d:99:96:37:
53:88:58:57:6a:8e:ff:c9:53:77:dd:b1:ea:8f:d0:3a:e0:ab:
99:9a:5e:1d:f8:3b:80:c0:5a:75:6b:5e:fc:cf:94:e6:06:29:
86:1c:2a:05:b2:43:0f:5e:e2:20:37:58:ac:c2:7c:68:28:df:
49:5d:8e:ad:6f:b1:14:2d:48:8a:73:44:14:84:6e:39:00:f8:
66:ab:4b:6c:36:37:92:ec:71:da:e7:df:e5:a5:f6:15:dd:c5:
e5:0c:5a:9d:22:a1:cd:45:81:77:7c:79:73:21:38:36:5d:f9:
36:a7:4b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:34 2026 by rpki-client