Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
File: ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft (raw, json)
Hash identifier: qwGbWJvn8hEZPLH3uddeNSLMtnCAboXMgLOciw1OYFM=
Subject key identifier: E0:47:D3:A0:29:11:FA:61:33:06:DB:B0:6B:67:C3:FE:54:62:5B:2D
Authority key identifier: 86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
Certificate issuer: /CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Certificate serial: 019D389C4E977001BE298A2EBDA13C618B8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
Manifest number: 1755
Signing time: Sun 29 Mar 2026 08:01:00 +0000
Manifest this update: Sun 29 Mar 2026 08:01:00 +0000
Manifest next update: Mon 30 Mar 2026 08:01:00 +0000
Files and hashes: 1: 10VeRd-dKyjhB82yK0FZfBzYDrU.roa (hash: Q3l/6xX2yJgapH3cvOFve36CvHD208D4sxfTot+xau4=)
2: ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl (hash: krm9Uu+oQDRar+cZAYTuvdQnlIzMPhc3iKuj6LfLKQw=)
3: l5D9Tvi9Koza2_mxtzxJQq_s-s0.roa (hash: 0MIxUszJignbxKF108EhpKWB6naIZK2n8zx9GIqX7e4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:4e:97:70:01:be:29:8a:2e:bd:a1:3c:61:8b:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Validity
Not Before: Mar 29 08:01:00 2026 GMT
Not After : Mar 30 08:01:00 2026 GMT
Subject: CN=e047d3a02911fa613306dbb06b67c3fe54625b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cd:ca:d5:cd:58:a8:1f:8f:35:98:db:e2:3c:
96:3f:a4:c9:15:75:c8:6b:de:9a:39:30:fe:03:2e:
d1:5a:0f:61:98:50:27:3d:5e:67:f5:08:e7:de:82:
25:a1:73:b7:e5:b3:27:87:76:28:ea:ac:a5:ee:64:
17:2c:ea:c6:81:6f:05:e8:83:9f:46:a0:e9:e7:73:
de:0c:51:ec:a1:66:51:6d:71:55:a8:70:ae:2f:db:
05:13:21:22:ba:22:1d:2d:b8:04:b5:46:be:bc:d0:
2d:e4:18:20:72:da:0d:06:ca:71:c2:c8:e6:e1:b4:
cc:81:c5:ef:2b:b2:31:c5:4e:0d:28:54:76:9c:ed:
f9:99:40:be:52:a2:49:a2:9c:6d:c8:dc:e0:fb:a7:
96:ea:4a:79:3e:7e:cf:d2:a4:7d:30:6b:e7:19:68:
97:3f:25:35:b5:6e:67:64:52:ab:5e:95:bf:54:36:
49:8c:a0:29:2c:d5:ec:8d:1d:17:85:72:8f:75:4f:
46:f4:05:83:9b:08:4d:81:23:9d:21:a1:86:20:54:
6c:aa:4c:30:2e:c4:2b:43:28:ec:b8:b5:99:6f:86:
b8:fc:24:eb:5b:47:65:98:92:bb:e5:41:db:90:e4:
21:19:89:06:87:e1:c3:ca:d2:b0:b7:4d:db:08:81:
06:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:47:D3:A0:29:11:FA:61:33:06:DB:B0:6B:67:C3:FE:54:62:5B:2D
X509v3 Authority Key Identifier:
keyid:86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:52:34:e5:bc:c3:66:08:4f:ce:f4:a3:5c:65:2b:3e:62:32:
72:40:4a:3d:7d:f9:52:97:d7:18:2c:f7:33:56:21:67:93:87:
67:31:52:e4:14:45:95:5e:15:3f:32:4e:ff:98:de:ad:b2:91:
72:b7:f6:82:56:27:16:4c:bd:d4:a9:5b:94:a1:61:fe:c2:e1:
9b:7d:69:df:82:b6:51:bc:e6:4f:16:3d:7c:b3:4b:96:d1:a4:
2d:d7:dd:cb:3a:b7:84:70:98:c2:7b:77:c5:ed:16:47:a7:06:
91:90:f4:e6:0e:a5:6a:14:a7:94:11:06:e2:80:f8:e4:41:8c:
3a:b8:82:ec:21:ca:9e:b8:ff:ae:1b:d5:77:45:6f:59:64:da:
43:9d:30:a7:db:88:a8:91:7c:86:9e:c3:58:17:9b:ca:3d:4b:
b7:4c:3c:cb:cf:db:8b:ab:a9:63:94:b3:97:81:ad:51:c4:2e:
53:db:72:7c:2d:8f:5e:fc:a7:e8:88:96:ef:2a:a8:d7:14:da:
44:05:38:16:ca:0f:bb:92:5f:2a:0a:ad:ac:fe:4d:77:64:b3:
36:6e:45:f8:53:b7:a4:f2:7f:21:36:13:6c:68:e5:6b:bb:b9:
56:f1:4d:c5:0e:60:e4:8b:50:c5:80:69:5d:33:ab:92:8e:31:
15:47:25:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:51 2026 by rpki-client