Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
File: humRNBcbWGP2LyK316v3QDSVKOw.mft (raw, json)
Hash identifier: nLzXZKGlRzIdRuWTpg4RVYj8qoUAbACj2syf6rqaACw=
Subject key identifier: D4:85:D5:BD:EE:7E:5E:9A:B9:B0:4B:20:35:1B:99:28:60:BD:28:62
Authority key identifier: 86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
Certificate issuer: /CN=86e99134171b5863f62f22b7d7abf740349528ec
Certificate serial: 019DA754EEC882875319B764514461D2C3C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
Manifest number: 074E
Signing time: Sun 19 Apr 2026 20:00:54 +0000
Manifest this update: Sun 19 Apr 2026 20:00:54 +0000
Manifest next update: Mon 20 Apr 2026 20:00:54 +0000
Files and hashes: 1: humRNBcbWGP2LyK316v3QDSVKOw.crl (hash: iffxg+6DRKnEDkkzwKtiAZNi6aVT/0vdqPN0++D8jcE=)
2: s9kGup8ETCR_TnIpADbpkN9_7es.roa (hash: Tl2xHND59kaKyod+n7S8xlRanBYJiPYsjS6E7wmOt/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a7:54:ee:c8:82:87:53:19:b7:64:51:44:61:d2:c3:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e99134171b5863f62f22b7d7abf740349528ec
Validity
Not Before: Apr 19 20:00:54 2026 GMT
Not After : Apr 20 20:00:54 2026 GMT
Subject: CN=d485d5bdee7e5e9ab9b04b20351b992860bd2862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:50:e1:05:c8:32:0a:d8:16:18:2d:5d:b1:cc:
49:84:f3:02:f5:dc:75:38:99:2b:8c:f2:28:8e:15:
91:9d:b3:2d:61:e4:ac:b5:4f:0c:1f:07:b6:0f:23:
4e:f1:02:ab:03:94:1c:aa:db:8a:f8:84:48:47:48:
82:b6:c3:5a:94:64:3c:af:6e:bd:26:a4:85:10:9e:
35:31:e3:4d:62:20:4c:59:1e:71:95:1d:bf:6e:55:
e6:00:71:d3:ee:4e:bc:b8:66:7f:6b:c1:d7:01:c3:
47:96:ed:5b:38:7a:1a:56:54:4d:7f:49:0c:f7:05:
3f:72:ed:0d:82:c7:4d:6d:df:1c:4d:99:d9:0a:07:
7a:cb:16:2c:de:e7:a1:ed:fd:b9:5b:87:21:bd:c9:
8e:8e:ce:2c:c7:58:72:de:d5:4c:97:4b:8e:f8:5f:
e0:1c:fc:c8:9c:3f:34:af:ae:92:4e:4a:1c:24:24:
1a:15:f5:bc:79:86:f5:00:bb:cb:df:b9:5f:a6:31:
de:c3:5a:ff:a8:cf:63:df:9f:26:d2:0b:6f:5c:75:
35:c6:b1:46:c4:4b:9f:ce:6c:7b:73:a3:a6:28:35:
50:78:15:91:f8:2e:4f:48:d2:fb:fc:cb:47:ea:67:
47:96:75:9a:c4:84:30:48:e1:64:4c:d7:0a:a7:10:
92:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:85:D5:BD:EE:7E:5E:9A:B9:B0:4B:20:35:1B:99:28:60:BD:28:62
X509v3 Authority Key Identifier:
keyid:86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ab:ad:1f:c9:da:ce:22:d9:6a:c5:73:cd:20:57:ac:d5:09:
14:b5:63:ad:81:ee:2d:61:18:20:97:1e:16:1d:75:9f:d9:8f:
d0:b9:7f:00:04:17:e1:21:c8:68:f8:12:64:d2:69:85:68:90:
ef:6a:2b:1c:d0:4c:b0:e8:1b:b4:0d:ac:5a:58:09:ea:29:6b:
f4:bd:1c:b2:ec:99:9a:98:8a:7a:ce:a2:c5:9f:79:1c:88:63:
f0:8b:cb:06:ae:f3:f7:d5:20:d2:c2:77:aa:79:6a:ae:38:fd:
c9:88:0d:6b:92:4e:b6:28:7a:58:fc:f0:16:85:3d:c5:7e:6b:
29:90:fa:09:77:98:ee:3b:0a:56:11:36:da:2a:b0:3f:95:a7:
78:15:ec:d6:92:bf:a1:57:03:e8:05:05:82:e4:b1:65:a3:2e:
83:05:04:10:33:f0:28:f5:88:78:41:c3:44:12:4f:c6:2c:12:
d6:c2:62:b8:b4:d3:de:a6:ee:cd:5a:77:da:df:5e:a2:a0:04:
d0:3c:b7:8c:58:7d:3e:d2:ee:74:75:9e:cf:c8:72:66:eb:bb:
b9:ac:a7:70:26:6f:ba:44:77:7e:77:0a:d0:c9:4a:69:7e:f3:
13:24:54:66:ba:5d:c3:27:a0:c9:0a:b9:37:e1:8a:a5:8a:e0:
be:a9:46:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 03:26:49 2026 by rpki-client