Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
File: htVCMjwOMFHJx7uO0dHorP09uDQ.mft (raw, json)
Hash identifier: GrUqK674SiA2jKrgiLngEvN2Ru2nawkH3j+tzs5w1h4=
Subject key identifier: FB:76:57:24:DF:85:99:63:B9:BF:D7:FF:C9:DE:93:FD:9C:0A:11:AF
Authority key identifier: 86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
Certificate issuer: /CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Certificate serial: 01A131EB5F22C10E8457922924D4E00E0781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
Manifest number: 1AA3
Signing time: Mon 12 Oct 2026 21:01:11 +0000
Manifest this update: Mon 12 Oct 2026 21:01:11 +0000
Manifest next update: Tue 13 Oct 2026 21:01:11 +0000
Files and hashes: 1: 1AbwTnYg0WXUPpYwnnaZL_ow3bI.roa (hash: hVk4TpP4RMB+g39qT2ebySuMm79Hn4thM7YjCCsMTe4=)
2: BDYQwgLBbnXzyxnCPY_pCM4L2nc.roa (hash: Dwn097khl7QE/wrVW+MLdk6jalK979i68YL0QuJEQkY=)
3: htVCMjwOMFHJx7uO0dHorP09uDQ.crl (hash: bnQeWiHr0GmU2d5ElFV29wXsWbjiNACzz5UcaEZTDnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:eb:5f:22:c1:0e:84:57:92:29:24:d4:e0:0e:07:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Validity
Not Before: Oct 12 21:01:11 2026 GMT
Not After : Oct 13 21:01:11 2026 GMT
Subject: CN=fb765724df859963b9bfd7ffc9de93fd9c0a11af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ac:99:50:8c:97:fc:94:26:bf:b9:45:ff:59:
1f:c1:1d:fc:49:07:5c:58:90:da:f1:1c:a9:90:0d:
be:a3:e7:47:ba:62:e7:5f:d7:95:70:04:a6:a4:28:
65:ef:e1:a3:41:a3:2e:98:83:cb:9a:2f:d9:e6:c5:
33:aa:df:ce:6f:7f:07:d4:77:e4:07:42:42:3b:35:
0f:38:93:b5:03:f7:33:dd:d1:1e:30:f4:b3:14:3a:
f6:5e:bd:16:9e:2a:0a:fd:1b:bb:72:cd:65:dd:df:
94:4d:8d:4b:15:dc:78:3f:fb:2f:6a:92:d6:23:b1:
a4:cd:61:40:44:d3:cf:88:76:da:74:28:24:70:4f:
25:23:c1:e9:43:a8:81:c2:93:15:a0:fe:4f:b0:8b:
b7:37:c2:4a:20:53:fc:bc:f9:ec:77:13:22:f1:63:
6c:9a:1a:25:93:a4:98:1e:04:e5:2c:35:3d:a0:90:
45:80:35:b2:35:4d:5b:c3:bc:d1:78:c4:60:38:9f:
75:97:4c:d3:c1:34:d7:a4:12:80:24:98:71:09:aa:
49:fe:f9:dc:3c:33:db:2d:6d:84:11:06:76:b7:20:
7d:23:8d:61:7f:02:f7:a5:23:be:9c:1b:83:6f:dc:
2b:16:ff:c4:35:70:5b:43:24:52:8c:1b:24:f3:8c:
ae:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:76:57:24:DF:85:99:63:B9:BF:D7:FF:C9:DE:93:FD:9C:0A:11:AF
X509v3 Authority Key Identifier:
keyid:86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:0a:6f:50:e7:f2:e2:b4:a6:31:9c:b9:db:79:45:60:90:09:
be:f9:71:d9:30:f2:65:c6:69:a6:85:cf:8c:81:ec:65:09:91:
a5:6c:6a:92:b8:93:3a:44:41:58:22:f2:5b:80:db:79:54:65:
7f:65:73:5c:9c:54:37:36:88:9a:b8:31:19:2a:30:be:8a:3f:
2c:0e:cc:de:5e:51:a5:b6:c2:d8:47:db:a4:e4:7f:8a:75:e2:
15:27:9e:6b:fd:8b:dc:60:16:16:2f:63:43:f8:0c:f1:e8:ad:
27:4f:5e:e7:2a:c2:50:7b:e8:2a:92:87:c7:48:fa:d0:7a:ba:
6f:f7:96:3e:73:5b:12:15:6b:9a:31:a4:56:01:55:46:3d:1e:
fa:95:0f:23:8d:67:08:bf:c7:f6:a7:fd:df:3e:65:e1:aa:39:
9b:f8:74:4f:e8:e2:8d:15:b4:94:fa:9b:91:26:cd:10:39:1f:
00:25:8e:cd:07:10:02:b6:c8:47:16:09:93:02:55:77:12:ed:
ac:df:c1:a4:95:e2:59:3f:98:f7:04:a6:dd:0b:07:3b:b9:fb:
86:1b:63:df:ba:cb:32:b0:49:6e:cb:89:b0:75:41:9d:32:48:
69:e9:fa:20:28:b4:89:0a:7e:97:36:d3:69:e4:e9:fb:1e:67:
5d:64:b8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 00:49:34 2026 by rpki-client