Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/541bf1-5f14-4a1a-829b-f152b0023ec6/1/huiaCsl4FooymjAWTZy47EOQEfE.mft
File: huiaCsl4FooymjAWTZy47EOQEfE.mft (raw, json)
Hash identifier: 2Xz9Whv3cdwhMtHZ81RcLvE5boohDTN2cTWIwgncD6M=
Subject key identifier: CF:8F:16:6A:F5:1D:37:B3:C7:1A:B8:E3:33:AC:67:01:FF:A2:A6:7F
Authority key identifier: 86:E8:9A:0A:C9:78:16:8A:32:9A:30:16:4D:9C:B8:EC:43:90:11:F1
Certificate issuer: /CN=86e89a0ac978168a329a30164d9cb8ec439011f1
Certificate serial: 019D389C2363448F43297A90B170C0252089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/huiaCsl4FooymjAWTZy47EOQEfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/541bf1-5f14-4a1a-829b-f152b0023ec6/1/huiaCsl4FooymjAWTZy47EOQEfE.mft
Manifest number: 4A
Signing time: Sun 29 Mar 2026 08:00:49 +0000
Manifest this update: Sun 29 Mar 2026 08:00:49 +0000
Manifest next update: Mon 30 Mar 2026 08:00:49 +0000
Files and hashes: 1: FWhvq007vWIT52Y2P_iCcJf9WxE.roa (hash: pn1LH0exhvuDvjKK7j66janSFiUYE0a7QFtsCdDKTog=)
2: huiaCsl4FooymjAWTZy47EOQEfE.crl (hash: ITgs4/vek6wj6l4fazl8slQHXgiQV13Vz1fSMqRgJO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/541bf1-5f14-4a1a-829b-f152b0023ec6/1/huiaCsl4FooymjAWTZy47EOQEfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/541bf1-5f14-4a1a-829b-f152b0023ec6/1/huiaCsl4FooymjAWTZy47EOQEfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/huiaCsl4FooymjAWTZy47EOQEfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:23:63:44:8f:43:29:7a:90:b1:70:c0:25:20:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e89a0ac978168a329a30164d9cb8ec439011f1
Validity
Not Before: Mar 29 08:00:49 2026 GMT
Not After : Mar 30 08:00:49 2026 GMT
Subject: CN=cf8f166af51d37b3c71ab8e333ac6701ffa2a67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ca:cd:e9:00:ee:49:07:e3:58:d7:bb:a3:eb:
12:84:53:30:05:ed:8a:23:ab:8d:c9:67:96:fe:35:
17:46:5e:e8:8b:c3:e4:1f:c9:ae:11:7c:dd:38:29:
49:af:9c:35:af:8c:ff:14:db:f2:a0:57:33:fd:30:
95:91:87:fc:62:9a:da:02:94:f7:d5:f5:80:42:ae:
82:8e:c2:b2:3f:02:66:ae:cf:1e:b9:75:66:85:cd:
eb:2c:bd:e8:a0:39:14:44:98:98:7a:40:50:aa:38:
bf:87:df:22:76:ea:7f:1e:64:c9:93:ce:92:30:c3:
3b:ea:c9:96:c3:d5:b3:8a:97:ee:ff:df:39:f2:b7:
02:78:95:f5:7b:10:15:c0:21:1f:44:7c:bd:29:97:
94:f3:f3:6c:53:bf:8f:9d:9e:cc:6d:a1:02:4d:63:
c8:f9:63:e1:25:7c:b2:f9:0e:e9:20:d0:8a:0a:d2:
94:de:99:f2:34:85:06:6a:e0:02:94:0f:60:c6:df:
8e:60:74:3d:3e:df:0a:13:5d:41:63:aa:b0:db:22:
7a:ac:8a:c1:cd:ad:a8:48:6a:a1:5c:06:b4:15:7b:
3e:53:61:4b:db:99:de:9c:90:43:ce:ee:d5:c9:43:
5a:16:3c:2b:11:c0:a6:b8:84:44:67:88:4b:61:57:
ad:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8F:16:6A:F5:1D:37:B3:C7:1A:B8:E3:33:AC:67:01:FF:A2:A6:7F
X509v3 Authority Key Identifier:
keyid:86:E8:9A:0A:C9:78:16:8A:32:9A:30:16:4D:9C:B8:EC:43:90:11:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/huiaCsl4FooymjAWTZy47EOQEfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/541bf1-5f14-4a1a-829b-f152b0023ec6/1/huiaCsl4FooymjAWTZy47EOQEfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/541bf1-5f14-4a1a-829b-f152b0023ec6/1/huiaCsl4FooymjAWTZy47EOQEfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:63:67:b9:2e:74:b3:d9:e3:ab:f2:7b:73:60:e4:14:dd:4e:
d1:ea:3c:b1:3e:a7:51:27:65:73:4f:7d:5b:0e:44:94:7c:b4:
e2:19:3b:cc:3b:80:86:85:b6:a3:89:48:0a:3a:d5:91:e2:f0:
25:a5:df:a3:b9:5c:2c:a1:a8:fa:70:93:18:b3:96:c5:27:1e:
85:6c:f6:b6:db:a1:b3:4b:88:0b:ca:21:51:31:10:1f:fd:ba:
ab:1b:4e:10:10:2e:17:3c:a6:6d:da:58:e4:2e:66:d2:7e:a6:
b5:93:ac:49:cd:3d:f9:f9:76:35:ae:64:6c:43:41:26:93:71:
63:74:d8:49:08:2a:79:06:5d:14:ed:b7:4b:f2:d4:b9:fc:7b:
84:cf:b3:89:f4:cb:4d:62:bf:9d:84:6e:8e:ca:b9:c6:c6:14:
82:be:b8:71:59:25:50:3f:5f:a6:20:ea:38:81:ee:e5:c6:40:
c1:d2:17:9a:94:a5:4a:7c:85:09:35:21:a5:51:62:a5:8e:b8:
7c:79:e8:fd:8f:5f:e7:11:8d:ee:ff:f7:75:00:b6:8b:95:53:
db:b4:67:1b:94:15:ef:81:1c:33:51:68:d3:c0:2b:8a:ad:d5:
0c:91:d8:7b:3a:cc:2f:f9:ad:75:68:8d:ef:4e:d5:c7:8c:93:
d4:48:f3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:28:07 2026 by rpki-client