Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
File: hu4gHGXWVe6c_iUflR6pG7oVRWc.mft (raw, json)
Hash identifier: 8nBpzVAuSextOXXGokZIedYsYS4+uG99zOByux8pLus=
Subject key identifier: 21:8B:12:92:D7:8F:DC:A9:D3:11:88:16:4C:F1:86:BF:EA:56:C7:28
Authority key identifier: 86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
Certificate issuer: /CN=86ee201c65d655ee9cfe251f951ea91bba154567
Certificate serial: 01A09020F114FFC640E9DD9A830EAA2AD2C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
Manifest number: 1A5F
Signing time: Fri 11 Sep 2026 11:01:12 +0000
Manifest this update: Fri 11 Sep 2026 11:01:12 +0000
Manifest next update: Sat 12 Sep 2026 11:01:12 +0000
Files and hashes: 1: LcSdh4tedCpmAS17t3yRnbgmEdk.roa (hash: hiklecs4t1l45JXffh9PyN2aehgshHQGA7Lc04Y7log=)
2: heKnF0nPw3navL7mvVdrP7ZenfE.roa (hash: SN8nxNReThCLTC+u68FN/Bqg6og3YUjtGA8xvnnpO7A=)
3: hu4gHGXWVe6c_iUflR6pG7oVRWc.crl (hash: PTXHWICFv0oc6/hrPJBvhnz/JS7MYE5ffJDhlEDrHpo=)
4: raFuC_u8FXIkL3qzbF_M7uzS1bY.roa (hash: rn7vhUa/CpBOHdDH6ILdMBUoshBfT4bHqwrkhi/LUAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:20:f1:14:ff:c6:40:e9:dd:9a:83:0e:aa:2a:d2:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86ee201c65d655ee9cfe251f951ea91bba154567
Validity
Not Before: Sep 11 11:01:12 2026 GMT
Not After : Sep 12 11:01:12 2026 GMT
Subject: CN=218b1292d78fdca9d31188164cf186bfea56c728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ca:e4:59:8e:b5:c7:f1:2f:29:6e:f0:6c:e1:
5e:3a:0d:65:ca:91:34:10:24:f9:7d:27:2d:18:a1:
22:a9:6b:a4:cf:e5:f8:6c:c7:c2:25:9c:cb:45:20:
09:db:4d:98:a0:cf:4a:ad:16:31:a6:70:70:77:bd:
ef:b4:67:06:91:73:e3:27:9d:86:15:bd:5b:10:04:
da:53:af:4f:3e:ff:9f:43:f6:c5:77:fa:78:00:b4:
80:36:1e:92:2a:7f:3e:23:39:21:b5:97:83:bf:dc:
cd:de:7b:5c:c7:cc:a7:c1:fc:0e:7f:3f:e7:da:9f:
b2:7e:c5:ec:87:f1:66:84:18:fd:d4:f3:c4:05:73:
4b:43:a7:e4:fe:06:18:c4:f6:d8:ed:88:da:24:9d:
8c:fd:39:09:9d:57:4e:2c:67:0a:d8:11:7d:2d:bc:
73:f2:1c:f0:fa:59:b4:00:5e:34:5b:79:13:c4:6d:
27:95:1a:62:c0:38:ac:39:57:47:69:94:d0:1e:5f:
c5:d4:ac:79:88:b9:2c:e5:fe:29:de:d8:b7:84:9b:
95:41:7d:b7:bd:9f:7c:5a:27:01:3e:2f:09:a3:4d:
99:e0:30:ca:a5:63:a5:ed:34:a4:c8:f5:36:7e:22:
86:f2:9e:f9:99:ef:3c:b9:dc:28:83:5d:b1:8f:1f:
4c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8B:12:92:D7:8F:DC:A9:D3:11:88:16:4C:F1:86:BF:EA:56:C7:28
X509v3 Authority Key Identifier:
keyid:86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:96:f9:c0:99:da:f2:07:f9:fc:63:ac:8d:95:b4:6a:a3:93:
e3:16:42:14:6b:38:ba:2b:28:01:3f:5c:eb:26:ae:a2:4c:78:
94:46:88:9c:e7:39:65:f2:e7:f2:27:6b:8b:2a:62:16:e0:80:
55:d1:09:90:c7:2f:a0:0f:f8:56:03:44:7e:0c:a4:54:90:dc:
2e:f8:6d:57:38:3b:26:a0:1c:d0:44:c9:8a:ce:b5:c8:28:4b:
c1:fb:6b:41:ba:1c:46:31:49:36:b3:a3:39:a9:26:d8:64:b2:
78:82:23:90:a5:ef:e7:d4:5d:2e:b1:77:69:c7:30:c6:4b:39:
df:6f:b4:f1:ec:c0:c2:69:3d:52:22:34:29:4d:6e:d0:d6:ae:
a2:b5:bb:f7:46:a8:1f:1f:56:0b:d9:b1:f2:8b:3a:97:d5:8e:
4a:09:ca:e1:07:0a:a2:cf:99:af:3b:50:91:95:45:4e:c4:4b:
da:9c:f6:9c:1c:ed:3e:a9:b8:5a:97:69:cb:29:1d:08:aa:3e:
45:ac:29:6d:b6:9d:b6:af:43:62:ff:ab:20:02:80:14:ee:f0:
54:03:3e:54:ca:1e:4c:d0:df:71:5a:9b:e5:2e:bc:2d:9e:13:
dc:d1:45:b4:64:08:7f:78:f1:0b:10:9f:91:17:62:bd:87:8f:
1c:57:bf:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:56:38 2026 by rpki-client