Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
File: hu4gHGXWVe6c_iUflR6pG7oVRWc.mft (raw, json)
Hash identifier: YvBNaEZkxeARZo8fS26W+whGJkEotfnh63jGQ4/IEfM=
Subject key identifier: 4C:8B:9B:F2:5A:8B:F8:43:1B:7E:0F:08:7E:98:73:83:30:B6:12:20
Authority key identifier: 86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
Certificate issuer: /CN=86ee201c65d655ee9cfe251f951ea91bba154567
Certificate serial: 019D382DEB280096A53E2F767CB1F6A94A1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
Manifest number: 189D
Signing time: Sun 29 Mar 2026 06:00:26 +0000
Manifest this update: Sun 29 Mar 2026 06:00:26 +0000
Manifest next update: Mon 30 Mar 2026 06:00:26 +0000
Files and hashes: 1: heKnF0nPw3navL7mvVdrP7ZenfE.roa (hash: SN8nxNReThCLTC+u68FN/Bqg6og3YUjtGA8xvnnpO7A=)
2: hu4gHGXWVe6c_iUflR6pG7oVRWc.crl (hash: X4V0G77X8FAh2rRi0i7LVxuv5ri1eX9k3xQ7BS/Pl6g=)
3: o_t0N0oazoSoRUIX38zmHacjpmI.roa (hash: 5Xwms+xTtZNdTeon1Aug9x31utWCflJ+A+WQraSsVuU=)
4: yyMfD3yfi-5ZFDYYqCi8ooAB_tc.roa (hash: 7Ong5ksWxUUHrzJGplVQfng6ph0+MByZZx5BAhFJpLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:eb:28:00:96:a5:3e:2f:76:7c:b1:f6:a9:4a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86ee201c65d655ee9cfe251f951ea91bba154567
Validity
Not Before: Mar 29 06:00:26 2026 GMT
Not After : Mar 30 06:00:26 2026 GMT
Subject: CN=4c8b9bf25a8bf8431b7e0f087e98738330b61220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:da:42:3c:38:8c:de:10:b9:4d:c6:41:d8:ce:
8c:14:1d:64:38:39:59:56:47:ed:15:86:41:43:ea:
b7:b4:72:ee:54:94:4e:f7:89:5f:48:56:61:3d:11:
c1:0b:09:80:3d:ee:70:ff:25:24:b5:ce:f2:f7:de:
b0:4c:f8:11:ce:59:c5:a5:6c:d7:b6:c2:48:7b:d4:
21:43:f3:48:8a:07:42:4a:76:ff:08:16:96:ee:07:
77:1c:76:b8:c8:34:fd:b6:62:7b:5e:32:3b:d2:28:
a7:ba:fc:0e:d3:5b:c4:e5:40:09:2f:01:10:21:ea:
21:32:54:60:c3:b0:24:a3:31:33:47:8e:7f:2c:c0:
a4:1b:a4:d0:66:f1:81:18:83:c9:15:07:84:44:06:
5b:ba:d6:85:93:aa:88:90:d4:ea:4a:b9:f3:82:9a:
44:64:20:11:42:2a:ff:30:40:dc:b2:47:bb:59:01:
05:af:a6:7a:32:2e:65:b4:a9:ba:25:33:5a:7b:7c:
4d:37:94:7d:1b:27:81:9a:26:80:4e:ba:21:dc:d1:
80:52:9a:46:d7:7c:d3:5c:79:b4:62:34:5b:e6:40:
9d:eb:f0:39:22:d0:a1:ba:ed:3a:ce:a5:41:c3:dc:
fd:d2:6d:64:16:23:cb:ec:f1:2d:e6:bf:e7:05:e1:
19:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:8B:9B:F2:5A:8B:F8:43:1B:7E:0F:08:7E:98:73:83:30:B6:12:20
X509v3 Authority Key Identifier:
keyid:86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:a4:53:0c:ad:5d:26:5f:cd:de:a4:b6:bc:c4:1e:d7:13:20:
ac:37:11:5d:56:1d:83:d9:7a:47:7e:d9:fc:c2:03:58:96:20:
4f:07:7e:c1:aa:25:e1:17:5b:8c:01:63:9c:83:38:11:24:97:
05:cd:f0:2d:1a:ea:73:3e:2b:2a:54:ba:89:e2:d0:05:96:b3:
f1:7e:41:72:9e:28:7a:f2:32:53:16:84:56:68:2e:a9:8a:5d:
75:75:e7:ac:f0:ea:16:64:cf:74:a0:12:49:33:86:79:1c:4c:
50:cf:37:c0:e3:c8:08:a3:ef:5a:4a:f9:da:eb:1b:19:e0:bd:
03:b8:ea:7d:15:63:3b:e7:4c:27:ca:b6:5f:fe:fe:7e:de:6b:
c6:1a:3c:2c:1e:41:0f:dd:aa:ca:e0:de:d5:db:0a:20:40:e4:
7d:13:e5:c0:26:34:67:95:0e:c8:31:a5:b9:5e:8e:0b:58:4a:
f3:10:70:3d:02:1b:99:3c:f0:b8:ba:4d:20:8c:45:ab:d3:34:
17:fe:b3:92:df:7f:2f:01:f6:97:27:e6:90:db:d1:4f:fa:5b:
31:46:8c:10:15:78:56:7c:08:1a:28:62:9d:69:1d:c7:ca:77:
0c:18:31:87:6c:f5:6d:ba:49:07:99:35:08:26:c1:8f:30:56:
50:79:3e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:23 2026 by rpki-client