Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
File: ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft (raw, json)
Hash identifier: kGuCJfowGHaJAQdIXrpg2HNGWfqtvZ6ofNrdofukQco=
Subject key identifier: 43:1F:FB:2B:2A:73:CC:A2:E7:A0:0C:81:56:0E:5E:7B:26:74:64:75
Authority key identifier: 86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
Certificate issuer: /CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Certificate serial: 01A029C67DA03BA2C93E935C5955979B395B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
Manifest number: 18DB
Signing time: Sat 22 Aug 2026 14:01:09 +0000
Manifest this update: Sat 22 Aug 2026 14:01:09 +0000
Manifest next update: Sun 23 Aug 2026 14:01:09 +0000
Files and hashes: 1: 10VeRd-dKyjhB82yK0FZfBzYDrU.roa (hash: Q3l/6xX2yJgapH3cvOFve36CvHD208D4sxfTot+xau4=)
2: ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl (hash: hOgcO3n+SHnOUPK5nbVEq59fF6zv63lQkIXyF/r4W/c=)
3: l5D9Tvi9Koza2_mxtzxJQq_s-s0.roa (hash: 0MIxUszJignbxKF108EhpKWB6naIZK2n8zx9GIqX7e4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:29:c6:7d:a0:3b:a2:c9:3e:93:5c:59:55:97:9b:39:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Validity
Not Before: Aug 22 14:01:09 2026 GMT
Not After : Aug 23 14:01:09 2026 GMT
Subject: CN=431ffb2b2a73cca2e7a00c81560e5e7b26746475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5a:36:cc:a1:ef:80:5f:ec:0a:23:4d:d0:d3:
75:8e:cf:f0:a1:66:bd:46:03:35:5c:b4:dd:4f:7d:
21:71:20:b8:57:0a:36:c3:a1:6b:4c:3e:14:c6:0b:
5e:25:b0:55:1b:b4:43:19:e1:8b:2d:de:a0:6a:d6:
03:f8:e6:c4:dd:37:c6:ad:62:c3:2a:6d:99:14:7e:
e5:bb:39:22:ab:01:45:9a:1d:4c:95:92:0d:cf:bf:
82:1a:20:98:da:f1:b2:42:b5:08:a6:a5:92:e3:2c:
a0:70:3a:d3:ca:8f:bf:bf:16:f9:34:7a:1d:01:93:
77:67:25:91:0b:11:fc:dc:ca:b1:b0:bf:a5:7c:12:
57:57:ad:6b:26:62:7b:05:5a:3d:0f:a3:50:77:10:
fe:e3:f4:c1:81:5d:60:6b:6d:f7:e5:8b:8b:ef:78:
49:18:6e:29:91:ef:f0:8d:ee:98:97:ee:b7:62:05:
cb:b8:90:25:d4:5f:b7:e4:ff:bb:c8:59:31:29:77:
06:2f:75:04:2b:30:cd:93:10:55:de:1a:c6:de:49:
19:48:f5:74:09:a7:f7:ef:0e:71:ce:1d:a8:2b:89:
63:ab:d3:d3:ff:58:3b:f7:c8:60:50:4e:fd:2f:f9:
fa:a5:0f:c0:4b:67:82:58:e4:d8:e7:49:70:ce:08:
30:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1F:FB:2B:2A:73:CC:A2:E7:A0:0C:81:56:0E:5E:7B:26:74:64:75
X509v3 Authority Key Identifier:
keyid:86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ec:6d:03:4f:dd:29:d3:23:74:6f:1b:21:a5:dd:c0:ac:20:
8c:76:ac:54:f5:a0:e5:26:6b:16:02:72:7e:11:dd:1e:f8:55:
f8:03:1e:fc:f6:45:22:74:aa:d7:50:6a:a0:c6:cc:fa:0c:63:
67:5f:1d:a4:60:ad:1b:e1:77:7a:9f:bb:73:b9:5b:3e:67:13:
e4:44:1a:aa:09:3e:19:92:84:bc:31:15:61:be:ee:48:b8:52:
65:79:89:d5:e3:71:74:b1:1b:ab:f5:e8:41:6e:ab:d3:42:2a:
93:a3:ad:a3:7b:e9:07:1a:46:fb:68:10:cc:90:bd:9a:2d:2f:
5b:5e:49:07:23:d5:b5:f0:86:39:7f:cc:71:c7:44:ec:c2:f2:
f4:09:3b:7d:9b:cb:80:f8:dd:16:64:28:72:6e:80:dc:ec:0a:
54:6f:57:bc:4e:60:6f:f1:93:d2:2e:d5:9b:23:3c:43:16:8b:
f5:62:2d:d1:10:2e:e0:87:33:d6:32:c4:69:ac:43:b5:bd:78:
0c:65:78:e3:c0:ef:d1:1c:cc:e4:ce:c5:30:ac:b5:98:f2:90:
f4:a9:b0:b2:e1:74:64:93:c2:e4:fd:0f:19:90:2c:77:f5:7c:
3b:47:d7:a4:4e:e4:bb:79:2f:37:98:b9:9f:67:b9:99:14:d1:
72:e3:d2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 21:08:34 2026 by rpki-client