Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft
File: HtPY4p4GO50nQKs95sciVeyNBVc.mft (raw, json)
Hash identifier: 6Jg74YLEeL/3/0LGdJ0KCMqE9vJSDNPTDEqLyKB4Sg4=
Subject key identifier: 0E:63:37:4D:38:78:84:2D:47:5D:6D:55:CF:68:2E:BE:7C:95:75:19
Authority key identifier: 1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57
Certificate issuer: /CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557
Certificate serial: 01A175F020E74A37466CA5941DCB9F7F2CA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft
Manifest number: 16C6
Signing time: Mon 26 Oct 2026 02:00:33 +0000
Manifest this update: Mon 26 Oct 2026 02:00:33 +0000
Manifest next update: Tue 27 Oct 2026 02:00:33 +0000
Files and hashes: 1: HtPY4p4GO50nQKs95sciVeyNBVc.crl (hash: QA3wzWQJEKg4321Hctx9I833V6PuzeuSMFZ+TA/rlZ0=)
2: Pa-REvh5sObWkBoz7bJgJfUNNtY.roa (hash: VTVwzFjol2i2vqCqnvi41UK4vnNgLEigWpUo/HfYOUM=)
3: TJCGzUQHxg4bwyTZRd9MjPgDFco.roa (hash: mDKYo4+PY4/xDJecNKQRG7i12NJwnq+4UMvwsAIjYeA=)
4: WNDY6KQEmCekzKTUecXhAaUDfno.roa (hash: TN9B+pjXoQM+lbUIR+xcxQrRVxbGqMqK54UEBJexWow=)
5: etcUvrpfPKP_RFS8q4I2oRGtIpU.roa (hash: QazyHRaqwRmfbynAWmgSgFTPgoxpLo3PBLZtnvBUmtQ=)
6: lPDLnISpigN3SzpMYG1tzHNnK8s.roa (hash: U1kHoWJO9dVtwmh0yAzoSxY6qDp9oHzYWmb62bs4HPk=)
7: nkQCIfsafpP0faPXq-JmBzueDNw.roa (hash: gNpsal8wGYLek5tpMaKnRWcNEwaZ2Wj22gLMCgc/QlY=)
8: pYGVbv4voC-r48uG-RyVLygkJXo.roa (hash: Xfgs3GY90UOV9OHOemeveUcmPpqz9KE7PoOqb01izow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:f0:20:e7:4a:37:46:6c:a5:94:1d:cb:9f:7f:2c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557
Validity
Not Before: Oct 26 02:00:33 2026 GMT
Not After : Oct 27 02:00:33 2026 GMT
Subject: CN=0e63374d3878842d475d6d55cf682ebe7c957519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:10:6f:b7:21:5c:90:f4:ec:5a:a8:11:6f:21:
cb:d7:d8:70:ce:8a:b6:0e:2b:66:3d:7e:95:03:2d:
cb:07:fe:5a:6d:5d:7d:d1:77:44:79:5c:c6:7b:56:
b3:03:28:e7:ef:3d:26:ed:68:8b:e0:32:c6:60:33:
48:ac:ae:8e:a9:78:10:43:8d:8c:07:c9:30:91:f3:
1a:f7:4e:83:a8:5e:d0:81:3f:ec:14:84:c0:f6:66:
54:69:be:f8:f7:e5:86:36:88:13:10:34:d3:69:dc:
4a:d8:68:6d:b5:f5:bb:cd:8c:76:cd:c1:b0:7c:6c:
e5:2e:c4:32:d2:c7:10:b5:ef:b1:f4:c7:4e:0b:8a:
b8:99:b2:88:d0:be:80:cf:0e:97:06:e3:ab:8e:a4:
08:06:23:7d:0d:c0:e7:3c:b7:66:1e:3e:87:17:9a:
b8:26:fa:68:b6:18:61:03:cf:e5:94:81:ea:f2:8f:
64:54:6b:c7:a9:29:64:04:14:f6:24:97:df:98:c9:
3f:9b:0c:d3:f2:86:9e:78:d7:6c:40:e9:97:06:37:
f4:35:51:df:96:d7:66:d1:de:60:e2:1b:80:c6:80:
b5:f7:5c:4d:d6:4a:32:f3:37:11:46:fa:34:b0:3e:
cf:f1:63:7b:b6:fc:04:5d:a8:f0:a8:28:8a:cc:b6:
1c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:63:37:4D:38:78:84:2D:47:5D:6D:55:CF:68:2E:BE:7C:95:75:19
X509v3 Authority Key Identifier:
keyid:1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:5c:19:b8:60:62:47:c4:ff:c6:7f:0e:28:99:8b:a4:26:2a:
bd:a4:2f:f4:27:69:70:f2:06:75:23:d2:05:72:a0:45:ab:e1:
4f:32:de:e0:ce:28:20:5f:73:41:9d:02:a2:24:e0:ba:d4:cc:
58:41:50:27:9c:17:73:0c:41:ea:86:1d:fb:5d:10:34:5d:f7:
26:4d:24:59:74:7c:f6:aa:b9:3a:6c:81:80:ad:2d:ef:2f:f9:
4f:5b:b0:99:99:55:c1:ff:dc:0e:68:dc:f3:d7:f2:65:0e:0e:
1c:d7:5b:15:b5:e9:6e:39:ae:60:b5:06:f5:30:04:ad:a6:48:
08:db:ec:28:1c:23:6d:23:68:52:e5:5d:fa:64:06:b8:20:34:
e7:c0:bc:80:79:42:98:90:4e:9e:b4:74:86:4b:8d:ac:06:ee:
30:5c:ac:28:bb:bd:cd:9d:e8:c8:ee:af:28:08:06:be:d0:0d:
9a:03:6e:90:13:44:70:89:97:e3:a6:24:e9:83:9a:64:8e:73:
58:64:33:6a:b9:f5:e4:47:84:54:ed:4b:99:91:a5:0f:16:dd:
14:04:3a:a5:e4:4e:10:11:ea:11:dd:b1:4e:3b:a7:36:a6:4d:
f5:f8:cd:a3:87:5a:b9:58:8d:20:a3:54:da:3e:af:3c:91:c9:
2d:3a:90:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 12:47:28 2026 by rpki-client