Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
File: humRNBcbWGP2LyK316v3QDSVKOw.mft (raw, json)
Hash identifier: lgQWfxXrW2eswKTrMIxHKHnsVKnmtSaKOGAVh8JUNEI=
Subject key identifier: ED:D7:97:DF:07:A2:62:09:58:A9:9A:0F:92:01:35:3F:59:0B:2F:DF
Authority key identifier: 86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
Certificate issuer: /CN=86e99134171b5863f62f22b7d7abf740349528ec
Certificate serial: 019CB8B8D292B007327090150ABCC0DCDFAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
Manifest number: 06D1
Signing time: Wed 04 Mar 2026 12:00:46 +0000
Manifest this update: Wed 04 Mar 2026 12:00:46 +0000
Manifest next update: Thu 05 Mar 2026 12:00:46 +0000
Files and hashes: 1: 8YW4uCegbiOXKfdM50rIePBZe5k.roa (hash: daS7MSZX4yQZhE3JNsrTDfEdlUzwTcG/vXeE0dV4qcs=)
2: humRNBcbWGP2LyK316v3QDSVKOw.crl (hash: Fl1EDnYFEaCTCcvDngMeybkcwofHMbChVmPsU/vibgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b8:b8:d2:92:b0:07:32:70:90:15:0a:bc:c0:dc:df:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e99134171b5863f62f22b7d7abf740349528ec
Validity
Not Before: Mar 4 12:00:46 2026 GMT
Not After : Mar 5 12:00:46 2026 GMT
Subject: CN=edd797df07a2620958a99a0f9201353f590b2fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:a4:6e:c4:ce:1d:24:bf:58:b0:3a:4a:69:
5e:98:53:08:69:9e:86:35:19:a0:59:44:9e:c4:7d:
47:01:7d:1f:07:ef:90:54:eb:03:f8:34:f2:cc:30:
f4:8f:cb:c4:48:55:c4:cb:e0:98:4e:9c:9c:f4:b1:
20:62:e9:3e:a9:ca:ec:00:5e:b4:fb:de:58:89:88:
ef:37:a5:81:7b:53:53:08:87:4b:19:5d:ec:71:a7:
bd:10:02:ff:0b:9a:57:b2:75:5b:9f:8d:f4:ec:17:
6c:29:4b:af:c0:eb:ca:bd:df:f7:3c:17:4f:87:7a:
71:37:69:aa:1c:e0:c1:68:12:ad:a5:8d:4e:c4:6f:
89:76:6e:ce:c4:53:13:26:46:e1:8b:42:44:4f:f7:
9a:d7:bc:8b:b0:84:a6:96:13:a7:69:f0:37:ed:cb:
67:84:e5:81:58:cd:ea:6a:c0:7c:6c:ca:38:de:64:
52:c2:d3:15:8c:5d:a4:11:29:e7:bb:ad:af:6a:6b:
33:33:6b:39:04:35:de:f2:f9:42:f7:31:d3:a7:ad:
2b:f1:74:11:05:6c:df:2e:b6:cd:dc:f3:40:01:4e:
23:64:a4:43:42:2d:77:6b:16:f2:5e:2a:d6:45:74:
3d:45:3b:da:49:94:c9:20:22:ec:bf:4f:14:13:c7:
db:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D7:97:DF:07:A2:62:09:58:A9:9A:0F:92:01:35:3F:59:0B:2F:DF
X509v3 Authority Key Identifier:
keyid:86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:89:aa:44:75:2a:b7:38:3d:cc:15:7b:c0:86:1a:5a:01:8b:
10:b1:08:05:ef:56:5c:d6:09:29:8d:98:c1:a4:92:6b:66:b2:
54:f0:75:c8:3c:16:96:b7:e2:77:81:d8:47:71:33:99:1a:8c:
3b:de:c9:2b:43:0e:cd:41:77:7a:6a:da:8a:16:6e:b4:e4:14:
33:b7:f2:09:73:04:f4:dd:c0:8d:d7:ee:cf:1a:8f:98:fd:fd:
54:85:d9:4c:e9:09:75:32:b9:06:ee:df:9e:ad:55:23:61:58:
f7:ce:32:38:75:4c:be:04:b5:cd:e1:af:22:71:38:cd:e3:62:
2d:72:9e:e6:81:16:8b:c8:2b:63:2e:b1:0b:d2:41:c2:1c:cf:
46:3b:46:65:6e:3b:ba:fc:51:4d:fa:c9:12:69:d0:fa:bc:04:
78:01:a1:73:7d:ed:36:ff:4c:34:f4:5f:d4:cc:e4:94:ab:c4:
99:cf:46:2c:7e:9f:2f:85:87:69:9f:4a:15:d3:bd:3b:fc:6a:
91:29:6e:3b:99:78:de:4b:f1:09:86:67:bd:08:d0:2a:da:9a:
13:dc:46:86:d3:2d:7a:96:a4:73:4a:76:81:fd:5a:7c:6f:55:
2b:a4:d1:4c:91:34:8b:cc:7f:db:86:a4:dd:71:c0:21:15:c9:
7b:8a:08:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 21:24:32 2026 by rpki-client