Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
File: htVCMjwOMFHJx7uO0dHorP09uDQ.mft (raw, json)
Hash identifier: 4m3ZHn6pXD6kwnEbIrfdakTHei6D1PL07ZZOIZEyW6U=
Subject key identifier: 1A:B8:EB:2A:80:AC:CB:30:26:53:22:DE:6F:03:91:C0:75:18:6D:95
Authority key identifier: 86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
Certificate issuer: /CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Certificate serial: 019F1AFAC35EDEFBEC38E6265D95734F204F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
Manifest number: 198E
Signing time: Wed 01 Jul 2026 00:01:09 +0000
Manifest this update: Wed 01 Jul 2026 00:01:09 +0000
Manifest next update: Thu 02 Jul 2026 00:01:09 +0000
Files and hashes: 1: 1AbwTnYg0WXUPpYwnnaZL_ow3bI.roa (hash: hVk4TpP4RMB+g39qT2ebySuMm79Hn4thM7YjCCsMTe4=)
2: BDYQwgLBbnXzyxnCPY_pCM4L2nc.roa (hash: Dwn097khl7QE/wrVW+MLdk6jalK979i68YL0QuJEQkY=)
3: htVCMjwOMFHJx7uO0dHorP09uDQ.crl (hash: ABlHrEIBrbE60bbNtP3lpxTI4rUef2MPVvD2f4aVkO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:fa:c3:5e:de:fb:ec:38:e6:26:5d:95:73:4f:20:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Validity
Not Before: Jul 1 00:01:09 2026 GMT
Not After : Jul 2 00:01:09 2026 GMT
Subject: CN=1ab8eb2a80accb30265322de6f0391c075186d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:65:70:1f:02:8a:0b:8b:24:0d:5a:c9:88:5e:
b7:4a:24:25:ff:ec:39:2c:b4:e4:f7:03:73:70:3f:
77:3c:40:91:9c:c7:f1:bc:48:62:07:79:78:7d:29:
4d:a3:89:f9:8a:a0:55:4b:94:f9:c9:06:90:d4:ff:
ce:25:d8:b8:6b:97:27:dc:54:c4:8c:a6:8c:85:df:
48:75:5b:cf:91:25:10:d2:42:48:9f:d3:ed:16:59:
88:2a:20:19:13:60:7a:27:4a:fb:05:cf:8f:58:3a:
9b:c6:66:fe:49:bb:7b:ea:a1:26:1e:03:3c:95:99:
00:88:b4:9d:24:4f:66:6c:4d:69:c8:df:e5:67:ad:
94:30:f0:1b:d7:13:12:0b:f1:6f:5e:1f:21:ca:49:
6a:b7:3f:72:d4:fb:61:06:91:57:cc:f6:8e:bf:a3:
9b:2c:ad:f1:cc:53:83:35:3a:d5:05:43:a5:91:95:
20:a2:67:8f:e9:95:ca:b5:2e:d9:be:05:e9:78:25:
ce:51:a1:ae:cf:73:5e:72:c8:7d:15:8f:73:7b:f2:
2e:35:7c:82:4b:d0:61:5b:81:94:81:0e:4b:5d:27:
48:a9:33:83:12:ae:8e:4b:e5:42:c4:6f:55:cf:1c:
1e:04:a6:6a:82:43:e2:b3:15:90:01:e0:7f:03:c6:
15:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B8:EB:2A:80:AC:CB:30:26:53:22:DE:6F:03:91:C0:75:18:6D:95
X509v3 Authority Key Identifier:
keyid:86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:6c:ea:d9:0e:a3:e9:67:1c:c2:a4:2d:f1:b1:bf:f4:f1:c5:
6a:4f:e7:d4:2d:e5:9c:2c:0a:86:65:9d:2f:83:d0:52:fc:31:
da:c1:eb:97:4f:2c:41:18:35:11:11:53:68:d1:d2:b1:ca:ef:
b8:65:44:2f:10:da:da:d3:c4:88:aa:fe:f7:ca:b7:90:20:4e:
26:27:78:08:03:13:10:77:28:d3:b0:3e:58:ec:47:32:46:9d:
74:7f:65:05:0d:f0:fd:e3:cd:5a:45:03:7e:2a:12:31:4e:bf:
f8:93:2a:47:05:7a:6a:7f:96:04:2a:b7:57:2a:bc:48:e1:8d:
5b:f8:d9:39:91:49:b2:62:e1:2c:97:b9:70:00:e8:75:ff:14:
1b:42:36:db:e6:2f:6c:e7:6c:69:d3:c6:ba:10:32:b1:35:b1:
da:ad:54:83:d9:24:3d:95:5c:25:4d:1a:5d:47:e1:94:39:a5:
87:88:99:cc:a6:ea:59:76:55:e9:43:b5:79:3e:a2:b5:85:11:
d3:fc:90:ce:54:1f:0b:d1:a2:de:d4:68:8b:6b:ea:07:20:d8:
4c:3a:05:36:5d:bf:47:46:51:15:09:eb:52:c8:ca:87:66:45:
34:80:3d:00:dd:c2:47:00:a9:69:55:0d:b4:e5:97:95:b7:88:
3a:d1:ea:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 02:39:53 2026 by rpki-client