Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
File: HT0ETAkeiLgLSyaeu3lrPyRUS18.mft (raw, json)
Hash identifier: sH24VR+E4VTSgiaCrKNXoBRJ3jxVgcoFoUldwWmzHiQ=
Subject key identifier: 2F:F7:F2:A8:B0:5A:80:B3:53:85:7B:7D:BE:74:20:EF:3B:8D:F7:AE
Authority key identifier: 1D:3D:04:4C:09:1E:88:B8:0B:4B:26:9E:BB:79:6B:3F:24:54:4B:5F
Certificate issuer: /CN=1d3d044c091e88b80b4b269ebb796b3f24544b5f
Certificate serial: 019D38D3A7A2AC769EB7893114FF69B51D78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
Manifest number: 0925
Signing time: Sun 29 Mar 2026 09:01:28 +0000
Manifest this update: Sun 29 Mar 2026 09:01:28 +0000
Manifest next update: Mon 30 Mar 2026 09:01:28 +0000
Files and hashes: 1: CVRiR4PWA5mkMUyfsZHNmuQrLLc.roa (hash: 5ktDsOfkaJ/bYAV74Q0Rw6jgw2aMIQHNLymwbsIWQIk=)
2: HT0ETAkeiLgLSyaeu3lrPyRUS18.crl (hash: VI91xMhw06wAH0tfwdOgABVAqxGIth7K+ypSRu9KxNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:a7:a2:ac:76:9e:b7:89:31:14:ff:69:b5:1d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d3d044c091e88b80b4b269ebb796b3f24544b5f
Validity
Not Before: Mar 29 09:01:28 2026 GMT
Not After : Mar 30 09:01:28 2026 GMT
Subject: CN=2ff7f2a8b05a80b353857b7dbe7420ef3b8df7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:30:ae:4a:a7:f6:37:e0:59:d7:de:2e:c0:20:
f4:70:4d:2b:8b:85:5a:e3:f8:6b:0c:11:e5:89:63:
be:58:9d:ed:14:e2:81:25:7f:b7:09:11:5a:ce:54:
b4:fa:ed:34:39:63:9d:ed:b5:b8:67:54:b1:61:a0:
63:7b:17:74:40:ca:d9:bc:63:27:f0:2b:13:2f:22:
1a:54:38:80:d8:16:e6:e5:b3:ef:9d:a9:d8:57:70:
f7:21:20:98:d8:b8:da:2d:a2:02:47:3c:be:29:1e:
54:5c:d1:6f:3f:b8:d3:88:37:25:56:45:d4:c8:dc:
d0:14:64:b3:7e:22:65:69:1e:a4:f2:f1:ad:49:10:
fa:e6:41:f8:f4:f1:ea:6f:ba:c5:ec:38:9d:15:1a:
b2:f4:38:2f:88:4d:3e:1e:53:2e:df:38:d0:dc:5b:
24:16:bf:e8:4c:59:a2:b7:c2:bb:d0:3c:ec:f3:be:
ed:6b:b2:ae:ea:60:24:7b:f7:76:e1:57:02:90:8e:
5b:49:dd:7f:37:c6:a2:0f:b8:b3:8d:d3:6c:bc:bb:
d6:0f:41:4c:92:57:56:e4:a6:bb:d7:bd:1f:ce:70:
b7:6f:20:48:dd:58:0c:48:7b:29:1a:9d:c7:f6:3a:
a7:3e:03:d5:01:e9:84:2f:8c:24:38:13:02:aa:7c:
8c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F7:F2:A8:B0:5A:80:B3:53:85:7B:7D:BE:74:20:EF:3B:8D:F7:AE
X509v3 Authority Key Identifier:
keyid:1D:3D:04:4C:09:1E:88:B8:0B:4B:26:9E:BB:79:6B:3F:24:54:4B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:25:43:3a:94:08:4f:7f:b2:f4:4a:16:9e:b8:1d:17:71:df:
b9:df:cf:ed:23:dc:a9:fa:f5:b1:ea:53:a3:91:e7:63:11:40:
63:d9:af:a6:92:3c:77:a5:99:03:54:cc:b6:3b:8d:dc:9e:ff:
93:94:e7:42:ef:12:29:51:f9:cb:a0:25:d7:2b:65:3d:ec:11:
23:aa:39:3d:c7:1e:21:f4:a8:9d:a1:6b:b9:0e:48:a8:fe:5e:
15:1c:b5:e1:68:1e:e6:7b:2a:d0:bf:5c:b6:84:a2:53:d0:ef:
49:0f:cc:16:fe:97:e2:b2:33:3f:db:91:e8:48:a4:c7:73:ac:
be:20:f4:f2:24:9b:a3:8f:85:33:31:24:f1:b4:a1:67:73:2d:
fa:56:08:56:09:ca:27:9b:e0:00:cc:9b:b4:21:d2:8d:68:9f:
75:83:5a:b8:ac:91:cf:93:c0:8f:ad:2f:c8:0e:6f:0c:88:83:
42:31:30:5f:91:1f:55:91:50:81:f6:f6:7b:90:9a:ed:8a:99:
e0:62:e6:13:41:7c:85:3f:e6:20:32:83:f9:b1:33:b4:ea:6d:
80:00:50:c5:3a:2a:ff:a3:ae:4b:16:e0:00:af:81:b7:fc:99:
8f:2a:62:82:86:23:a4:2e:da:21:ba:ce:42:97:fc:8a:31:6e:
93:cb:9c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:24:31 2026 by rpki-client