Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
File: htVCMjwOMFHJx7uO0dHorP09uDQ.mft (raw, json)
Hash identifier: 9WV63OgjaNBtWh0r5jjv1VJWKKT9y+t4kn1DAIcllpA=
Subject key identifier: CB:73:A3:D3:E7:CE:E6:5B:09:EB:E9:7D:9A:B8:11:1F:C4:BF:AA:A9
Authority key identifier: 86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
Certificate issuer: /CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Certificate serial: 019D37530FBC7C167CA1F6C4B266C72CEE37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 02:01:23 +0000
Manifest this update: Sun 29 Mar 2026 02:01:23 +0000
Manifest next update: Mon 30 Mar 2026 02:01:23 +0000
Files and hashes: 1: 1AbwTnYg0WXUPpYwnnaZL_ow3bI.roa (hash: hVk4TpP4RMB+g39qT2ebySuMm79Hn4thM7YjCCsMTe4=)
2: Wn4stG9r3sPGrKZA-bHeBQoqYZE.roa (hash: q+6bbzrK5RoX6mP8fjjAray92+/gWY61XEVj188QjD8=)
3: htVCMjwOMFHJx7uO0dHorP09uDQ.crl (hash: KwOB5Y3caHAutoZk4l5B6ELgPit/LgdvFzXQqoFJj/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:0f:bc:7c:16:7c:a1:f6:c4:b2:66:c7:2c:ee:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Validity
Not Before: Mar 29 02:01:23 2026 GMT
Not After : Mar 30 02:01:23 2026 GMT
Subject: CN=cb73a3d3e7cee65b09ebe97d9ab8111fc4bfaaa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:52:52:cb:93:de:e2:7b:5a:a8:9a:21:ba:30:
21:8c:44:0b:db:5c:df:31:b7:03:37:f4:cc:96:61:
35:66:06:d3:8d:e5:53:ab:f2:fa:02:cf:47:36:44:
b6:41:c6:88:34:ab:34:9d:5f:b5:f5:dd:61:6a:59:
bb:6d:99:5f:31:0a:75:2e:86:93:04:8f:e3:8e:5b:
e0:3c:03:eb:56:f8:38:59:80:eb:c9:8a:95:a5:6e:
2f:db:d3:0f:0b:be:8f:b5:6f:b6:26:c2:66:39:a6:
fe:87:10:13:70:97:93:63:ea:26:ca:1a:a2:49:aa:
2f:61:f6:89:a3:b7:77:27:b3:4c:ff:28:8a:77:a7:
75:e5:cd:2b:b4:30:bb:3f:2a:7f:1d:8c:54:9b:b7:
4f:dd:08:0b:db:04:44:3f:c6:19:9b:60:6c:c0:cf:
33:76:30:08:6c:75:60:61:5a:d8:b1:b8:6e:a1:ca:
ab:86:60:36:32:0d:1c:ce:77:d1:1b:8c:c1:1a:41:
3f:32:90:c7:a6:06:ef:e5:a9:ec:cd:88:32:91:93:
b3:9b:92:64:ee:f7:17:90:e9:55:0d:13:62:aa:6c:
4f:08:8c:93:4a:34:0f:b9:8a:46:ca:c5:e5:8b:c6:
4e:e3:0c:90:5a:94:36:ae:91:d2:5c:be:e2:66:cd:
91:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:73:A3:D3:E7:CE:E6:5B:09:EB:E9:7D:9A:B8:11:1F:C4:BF:AA:A9
X509v3 Authority Key Identifier:
keyid:86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:4a:86:8c:2f:09:8d:f7:76:42:08:ab:4b:cd:2e:c1:54:95:
cd:fa:4d:83:30:53:fc:ca:b1:54:4a:4e:a7:b4:94:e3:d5:dc:
90:37:3e:50:7c:c4:d9:a0:eb:ce:9f:27:65:45:49:72:a1:e5:
35:03:0c:46:fb:7c:20:e4:25:0b:b2:49:c3:d5:8a:fd:0f:b9:
16:79:96:c4:9e:1f:71:ee:a6:ff:d8:e6:58:17:81:d9:e0:30:
51:05:d4:ce:a6:07:83:0f:9c:5d:b1:16:f7:04:1e:8b:1c:aa:
d5:bc:46:ef:8f:5f:85:06:a0:11:93:a0:38:00:dc:ad:ac:ae:
19:7c:41:02:2e:c5:9b:a6:1d:8e:28:a9:8f:89:7c:8b:41:20:
c7:41:cf:69:2c:24:61:f0:28:36:82:70:c5:7b:18:71:3f:d0:
0c:71:d3:2b:00:3a:4d:b3:8b:f7:b4:ee:4c:f9:50:d3:e9:32:
b5:1b:71:47:56:09:06:31:fb:48:7f:25:7e:c4:be:6e:07:3f:
72:2b:4e:bd:5e:40:56:bf:90:f6:da:19:8c:6b:35:03:80:e7:
3f:16:02:69:15:88:c9:98:84:1e:ec:c0:fa:05:e2:12:84:76:
61:ba:43:a8:bb:9c:cd:6a:39:c6:9a:20:8b:c8:b5:0b:1d:a4:
f0:bd:b7:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03Uw+8fBZ8ofbEsmbHLO43MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDU0MjMyM2MwZTMwNTFjOWM3YmI4ZWQxZDFlOGFjZmQz
ZGI4MzQwHhcNMjYwMzI5MDIwMTIzWhcNMjYwMzMwMDIwMTIzWjAzMTEwLwYDVQQD
EyhjYjczYTNkM2U3Y2VlNjViMDllYmU5N2Q5YWI4MTExZmM0YmZhYWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlJSy5Pe4ntaqJohujAhjEQL21zf
MbcDN/TMlmE1ZgbTjeVTq/L6As9HNkS2QcaINKs0nV+19d1halm7bZlfMQp1LoaT
BI/jjlvgPAPrVvg4WYDryYqVpW4v29MPC76PtW+2JsJmOab+hxATcJeTY+omyhqi
SaovYfaJo7d3J7NM/yiKd6d15c0rtDC7Pyp/HYxUm7dP3QgL2wREP8YZm2BswM8z
djAIbHVgYVrYsbhuocqrhmA2Mg0cznfRG4zBGkE/MpDHpgbv5anszYgykZOzm5Jk
7vcXkOlVDRNiqmxPCIyTSjQPuYpGysXli8ZO4wyQWpQ2rpHSXL7iZs2RZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMtzo9PnzuZbCevpfZq4ER/Ev6qpMB8GA1UdIwQY
MBaAFIbVQjI8DjBRyce7jtHR6Kz9Pbg0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRWQ01qd09NRkhKeDd1TzBkSG9yUDA5dURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hN2M3YzEtZmM0Mi00M2EzLTlhZDgt
NzBkYWQ1MWU3M2ZiLzEvaHRWQ01qd09NRkhKeDd1TzBkSG9yUDA5dURRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9hN2M3YzEtZmM0Mi00M2EzLTlhZDgtNzBkYWQ1MWU3M2Zi
LzEvaHRWQ01qd09NRkhKeDd1TzBkSG9yUDA5dURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAakqGjC8J
jfd2QgirS80uwVSVzfpNgzBT/MqxVEpOp7SU49XckDc+UHzE2aDrzp8nZUVJcqHl
NQMMRvt8IOQlC7JJw9WK/Q+5FnmWxJ4fce6m/9jmWBeB2eAwUQXUzqYHgw+cXbEW
9wQeixyq1bxG749fhQagEZOgOADcrayuGXxBAi7Fm6Ydjiipj4l8i0Egx0HPaSwk
YfAoNoJwxXsYcT/QDHHTKwA6TbOL97TuTPlQ0+kytRtxR1YJBjH7SH8lfsS+bgc/
citOvV5AVr+Q9toZjGs1A4DnPxYCaRWIyZiEHuzA+gXiEoR2YbpDqLuczWo5xpog
i8i1Cx2k8L23Ww==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:41 2026 by rpki-client