Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
File: ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft (raw, json)
Hash identifier: qza80CaW7kuzUUrdPXZ4wCbB38beO6wvCpZ9dXQxhRQ=
Subject key identifier: 58:65:FD:10:54:FB:99:19:D4:72:CA:48:E1:88:D8:DD:D9:9A:B4:A8
Authority key identifier: 86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
Certificate issuer: /CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Certificate serial: 019F4208455EA30D3FF4D78BA9264E35750F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
Manifest number: 1863
Signing time: Wed 08 Jul 2026 14:01:06 +0000
Manifest this update: Wed 08 Jul 2026 14:01:06 +0000
Manifest next update: Thu 09 Jul 2026 14:01:06 +0000
Files and hashes: 1: 10VeRd-dKyjhB82yK0FZfBzYDrU.roa (hash: Q3l/6xX2yJgapH3cvOFve36CvHD208D4sxfTot+xau4=)
2: ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl (hash: PhJN6NVFxe7U96qmt6bf+3QtznSfGYDcvZ+CbpBCOUQ=)
3: l5D9Tvi9Koza2_mxtzxJQq_s-s0.roa (hash: 0MIxUszJignbxKF108EhpKWB6naIZK2n8zx9GIqX7e4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:08:45:5e:a3:0d:3f:f4:d7:8b:a9:26:4e:35:75:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Validity
Not Before: Jul 8 14:01:06 2026 GMT
Not After : Jul 9 14:01:06 2026 GMT
Subject: CN=5865fd1054fb9919d472ca48e188d8ddd99ab4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:50:46:be:65:f5:34:2c:4f:c2:89:b9:3b:f3:
52:95:5e:1e:2e:03:78:cd:e4:e0:e1:ae:c2:0c:35:
7f:ba:ad:07:ad:a8:1d:3c:38:4c:c3:b2:b6:e5:ed:
4f:b4:99:b6:89:cb:ec:2c:81:00:4b:a0:2a:c0:b2:
79:5d:98:3f:26:cf:07:9a:c5:34:07:b8:27:2a:21:
4f:69:88:83:8e:41:fd:b3:0b:2a:31:c3:17:36:27:
ff:98:13:0d:a9:e8:0f:e8:e2:13:d3:cf:a2:de:71:
3d:9e:29:36:39:ed:f2:5e:1d:1f:5c:19:6d:24:bc:
19:55:50:18:a4:c6:63:38:10:10:8b:16:d9:d3:40:
8f:90:e2:dd:a9:04:d7:38:36:a8:19:5d:54:3c:5f:
82:f0:c6:25:bc:39:00:f2:42:0a:41:95:fe:13:b2:
e0:48:09:97:12:85:e7:69:59:a2:bd:14:63:56:fc:
eb:ea:fd:1a:0c:89:78:ec:41:f0:68:45:54:ca:bf:
4e:35:45:06:2e:ea:a1:bf:15:8a:41:e4:4f:12:0f:
88:d9:58:d8:a5:23:d8:71:ae:4a:e9:e6:10:07:c8:
84:a3:6a:b3:62:a7:ab:3b:9c:63:53:72:07:f8:a2:
74:dc:b1:66:13:ba:e6:87:52:3b:69:60:5c:fb:6e:
c3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:65:FD:10:54:FB:99:19:D4:72:CA:48:E1:88:D8:DD:D9:9A:B4:A8
X509v3 Authority Key Identifier:
keyid:86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:f4:1c:36:ca:6b:81:90:92:84:59:ac:d6:d0:36:c9:e9:ab:
51:cd:06:05:7e:55:81:3e:1b:8e:28:09:6e:00:08:bc:19:23:
13:87:47:58:f0:df:69:e2:a4:20:79:55:76:72:0d:c8:e1:a7:
c4:9a:d7:76:5e:8c:03:a2:b6:4f:23:f3:4a:fe:c3:08:bc:b7:
3e:64:1f:e2:c0:78:df:55:10:da:0d:45:f3:d7:c0:57:1e:ce:
1b:5b:22:23:c9:f9:74:5f:02:e5:11:df:72:72:0c:ba:6e:5b:
58:36:2b:4d:3e:84:82:e6:d9:f6:34:32:54:6f:9d:aa:90:08:
17:b9:8d:5b:13:d9:11:69:a4:61:a1:10:1b:2c:10:73:18:b1:
86:5d:22:50:9c:65:05:fa:56:23:5f:4b:91:40:07:2a:c6:33:
3c:6d:83:65:82:0b:7a:37:88:0a:46:46:e6:f0:09:2d:7b:4f:
ec:11:ea:9c:3c:1c:08:98:6f:23:9a:ba:18:74:37:1c:22:b1:
fd:63:75:4d:1a:11:f0:7f:d3:27:f6:36:fb:2f:f9:75:46:97:
44:71:87:8f:be:28:aa:1e:af:ff:0a:78:ca:5d:f0:28:3c:dd:
e9:11:4e:41:19:e8:91:bd:10:d8:3c:bd:6a:3a:b9:59:85:1f:
09:ff:f9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:29:37 2026 by rpki-client