Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/3b6788-39c7-47e7-9789-cd114fc95ee3/1/ht-eAQiRCzo5rZOEqEbjGatSMKs.mft
File: ht-eAQiRCzo5rZOEqEbjGatSMKs.mft (raw, json)
Hash identifier: d8JyUk8AzDY+hrv7PUGRptxz4rCCS3Wi6xXqPWSam48=
Subject key identifier: 6D:F1:E2:A3:D7:79:25:C7:96:D2:D4:C6:E8:B2:C1:CB:95:BE:21:98
Authority key identifier: 86:DF:9E:01:08:91:0B:3A:39:AD:93:84:A8:46:E3:19:AB:52:30:AB
Certificate issuer: /CN=86df9e0108910b3a39ad9384a846e319ab5230ab
Certificate serial: 01A0E8535A0FE467C3BCB5D17F724D4328EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ht-eAQiRCzo5rZOEqEbjGatSMKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3b6788-39c7-47e7-9789-cd114fc95ee3/1/ht-eAQiRCzo5rZOEqEbjGatSMKs.mft
Manifest number: 0146
Signing time: Mon 28 Sep 2026 14:02:51 +0000
Manifest this update: Mon 28 Sep 2026 14:02:51 +0000
Manifest next update: Tue 29 Sep 2026 14:02:51 +0000
Files and hashes: 1: ht-eAQiRCzo5rZOEqEbjGatSMKs.crl (hash: hZUX45woH37IcNKpengc7BL9O28rZLDkeGB7DGX8x+Y=)
2: xR7lHLxk8Lwsa1PxkTtlSkA2y9o.asa (hash: l6T14CjpEOwE6Md2ZhabwS3SrWDRTzGa9GM3xWAEiBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3b6788-39c7-47e7-9789-cd114fc95ee3/1/ht-eAQiRCzo5rZOEqEbjGatSMKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3b6788-39c7-47e7-9789-cd114fc95ee3/1/ht-eAQiRCzo5rZOEqEbjGatSMKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ht-eAQiRCzo5rZOEqEbjGatSMKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:53:5a:0f:e4:67:c3:bc:b5:d1:7f:72:4d:43:28:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86df9e0108910b3a39ad9384a846e319ab5230ab
Validity
Not Before: Sep 28 14:02:51 2026 GMT
Not After : Sep 29 14:02:51 2026 GMT
Subject: CN=6df1e2a3d77925c796d2d4c6e8b2c1cb95be2198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:04:ff:4d:86:a2:20:59:53:24:64:74:12:aa:
b6:d6:ef:d5:a8:39:4c:69:e2:63:8d:44:44:51:88:
42:b0:05:a4:a1:8f:9f:ae:af:a0:3f:6b:0c:b7:7a:
35:26:f5:3a:05:4e:7b:01:23:c7:8b:84:65:b8:77:
12:33:46:f2:1f:d9:4a:b9:83:43:f7:ac:1b:2c:18:
ca:20:0f:88:51:97:62:46:4f:63:ea:a6:23:1c:8e:
9d:19:20:15:a0:37:5d:8a:e1:4e:82:17:c3:f5:81:
46:f6:3c:62:30:68:ee:9e:91:57:0a:39:cf:36:a7:
05:9e:c8:c7:71:66:13:fb:19:b5:f0:d6:6c:4b:fe:
29:c9:71:36:53:28:37:ff:80:1c:d8:44:bb:b3:66:
03:b7:b2:23:fd:f4:01:a0:e5:e4:53:1b:33:ed:90:
b5:b8:96:49:ee:d3:ae:c7:27:af:99:21:16:74:cc:
32:59:23:53:0d:89:00:3e:75:0f:8a:c0:c4:f6:4c:
e7:1a:15:ed:db:22:41:ac:02:d6:bd:f1:f5:e5:0a:
72:11:54:a7:86:39:f3:ef:de:5d:d9:a1:34:30:98:
49:a9:5e:ca:73:a4:50:c2:7e:3f:24:61:ae:61:d4:
2a:64:25:b0:23:92:6b:5f:81:8e:cd:78:6c:93:51:
85:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F1:E2:A3:D7:79:25:C7:96:D2:D4:C6:E8:B2:C1:CB:95:BE:21:98
X509v3 Authority Key Identifier:
keyid:86:DF:9E:01:08:91:0B:3A:39:AD:93:84:A8:46:E3:19:AB:52:30:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht-eAQiRCzo5rZOEqEbjGatSMKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3b6788-39c7-47e7-9789-cd114fc95ee3/1/ht-eAQiRCzo5rZOEqEbjGatSMKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3b6788-39c7-47e7-9789-cd114fc95ee3/1/ht-eAQiRCzo5rZOEqEbjGatSMKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e3:1c:c0:9b:d2:57:7e:07:d5:0d:67:29:d9:6b:73:61:8f:
7b:6e:0e:33:a8:0d:e2:46:45:28:23:ce:30:7c:49:39:cc:28:
bb:00:c8:fc:fa:4f:a2:7b:aa:f3:5e:ce:f1:1a:79:d6:37:ee:
0d:8a:c4:55:0c:a9:30:77:c1:8e:3f:30:9a:0b:3e:c0:7e:78:
c3:8b:41:0c:b6:ea:71:6c:c2:3a:31:2e:d9:1b:35:33:34:0a:
e6:f8:54:09:dc:a3:67:5c:3c:4f:72:14:ef:a7:14:25:2f:b8:
08:18:ab:07:f5:10:b3:5a:1a:fe:fb:a3:71:85:08:36:89:4c:
f2:c7:be:0e:19:6c:bc:35:4c:09:64:5c:7e:a8:bb:a7:21:72:
e0:c8:ba:93:ca:e1:0d:95:ef:ac:e3:f5:08:63:8c:06:eb:7d:
c3:6c:97:b6:79:ee:8d:df:f6:a1:09:68:2f:01:e1:5b:3b:60:
15:92:4d:57:2b:cd:77:f8:35:d2:fd:0c:ba:a4:68:5a:33:c9:
b5:ce:45:46:57:6d:37:1c:78:7a:93:e4:3f:8a:3b:3a:7c:53:
28:dc:65:71:73:0a:03:01:34:11:b1:74:c4:c7:26:d3:4a:2e:
1e:d1:df:7a:54:ff:6f:2e:02:7c:8c:9e:68:25:56:0c:7e:34:
11:87:e8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:31:33 2026 by rpki-client