Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
File: humRNBcbWGP2LyK316v3QDSVKOw.mft (raw, json)
Hash identifier: VTtycOCxCulz0yBX+j8mgR6UxyWAiiSru6zraIM9PJ4=
Subject key identifier: 9E:08:72:39:9A:33:D3:82:0D:3B:C0:C5:50:0B:15:09:6E:0E:0C:41
Authority key identifier: 86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
Certificate issuer: /CN=86e99134171b5863f62f22b7d7abf740349528ec
Certificate serial: 01A18B2E634A5FD0F4561946E2898ECB3999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
Manifest number: 0956
Signing time: Fri 30 Oct 2026 05:00:35 +0000
Manifest this update: Fri 30 Oct 2026 05:00:35 +0000
Manifest next update: Sat 31 Oct 2026 05:00:35 +0000
Files and hashes: 1: QI41Q1BgQgAKjDKKvOOgBlUnTsU.roa (hash: veVI5hYrjAlTuuwvf4GtNwr0lHCBhI/CK1pVow6H0rw=)
2: humRNBcbWGP2LyK316v3QDSVKOw.crl (hash: fKtONxW/wEmx831wElZXLzQFxlII2q3yFN98Z2ruHhg=)
3: pQ422AfsEebhu6zTidoiDWCS7Bo.roa (hash: Z0+ifqPQgjn9ZQGLHVdiHM5voE0DN2CYEKwwAMok9zE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8b:2e:63:4a:5f:d0:f4:56:19:46:e2:89:8e:cb:39:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e99134171b5863f62f22b7d7abf740349528ec
Validity
Not Before: Oct 30 05:00:35 2026 GMT
Not After : Oct 31 05:00:35 2026 GMT
Subject: CN=9e0872399a33d3820d3bc0c5500b15096e0e0c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:eb:85:f6:f7:08:9e:65:2e:85:36:03:3f:58:
80:bb:75:2a:9b:ff:71:e0:49:82:56:2b:87:0b:14:
ee:4a:64:e5:69:02:bb:a4:83:1e:19:c6:35:e5:16:
9e:bf:be:49:60:64:e9:c8:dc:63:b4:2a:89:34:05:
5a:64:7f:d1:a7:83:3b:94:36:a8:6c:28:65:92:1c:
39:95:b6:aa:e6:89:76:93:6e:ce:6a:9d:3a:b9:dc:
10:8c:ad:de:2f:8f:ed:96:ca:12:bb:66:c3:6a:ec:
cf:8d:b0:37:48:42:16:13:d4:6c:d4:d0:53:2a:1d:
b7:f4:6f:01:4a:e4:5c:0a:e8:44:2d:0c:a2:33:8a:
cf:c8:03:77:5c:03:31:f0:80:5d:4a:72:c5:a7:61:
14:5b:24:1c:35:21:b7:a0:74:15:ee:3d:c3:29:bc:
08:36:63:d3:26:35:36:ce:ee:91:f2:e8:bb:0d:07:
f7:24:3f:0c:a6:7f:11:82:6f:49:c9:1a:d5:ad:a8:
3f:62:c0:4e:71:83:8c:66:c9:2f:ee:fd:c2:04:01:
dc:51:9f:32:dc:4f:d0:2b:ac:92:fc:f3:91:ff:93:
e4:9a:ff:27:b2:b2:8b:8a:b1:9e:ee:86:aa:6d:c1:
2e:c0:fe:06:63:65:a8:03:6e:b5:34:6f:86:96:be:
cf:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:08:72:39:9A:33:D3:82:0D:3B:C0:C5:50:0B:15:09:6E:0E:0C:41
X509v3 Authority Key Identifier:
keyid:86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:5e:56:9c:f5:ff:df:08:ea:7a:c6:07:c0:3c:e8:c7:38:96:
4a:c6:f7:6e:bc:90:63:ec:4d:d6:96:3f:65:74:6f:d2:27:e0:
d0:49:7b:13:46:20:1a:dd:21:57:b9:a4:ff:87:d9:ae:b8:5b:
30:ae:86:a3:89:86:ea:4b:67:55:02:5d:66:6a:44:b8:82:47:
76:5c:9c:f6:45:04:7c:3e:02:54:14:84:ea:29:df:09:05:ac:
0b:97:63:a7:45:6a:65:1a:39:2a:11:2f:52:15:57:36:00:30:
76:5e:1b:e9:e0:b1:b2:74:13:85:88:38:13:c2:70:f5:2a:55:
f5:6e:0f:85:53:7a:fe:65:12:1f:e9:8f:b3:de:ba:a0:e0:15:
70:74:ae:13:5c:3c:7c:8e:ec:37:8e:2f:e1:12:18:5a:bf:7b:
3d:28:de:d9:88:de:7b:96:84:63:96:ca:f5:f6:f5:a4:d5:80:
5e:58:f6:a1:0b:65:09:ce:74:5c:ca:40:65:c3:ef:1c:c3:68:
50:27:e8:a9:de:d8:0b:f3:58:15:3d:89:66:25:3d:07:60:9a:
e2:cc:2b:8c:91:ec:dd:cc:a9:78:97:ba:27:73:ee:4f:e0:7b:
fc:89:d7:d1:9b:d2:53:9e:6d:ce:e6:30:2f:08:21:eb:0a:70:
40:8f:d1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 15:19:46 2026 by rpki-client