Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
File: htVCMjwOMFHJx7uO0dHorP09uDQ.mft (raw, json)
Hash identifier: S9lar/JU/fNN2GbEwAkH2EWIY1Gsau/HSWABYQYBo8E=
Subject key identifier: C3:0B:94:F8:D6:35:D8:9F:A0:01:8F:51:3F:47:2C:56:1E:1B:1A:E5
Authority key identifier: 86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
Certificate issuer: /CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Certificate serial: 019E314EA754B49FE9455AA743ECCA0C6F22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
Manifest number: 1915
Signing time: Sat 16 May 2026 15:01:38 +0000
Manifest this update: Sat 16 May 2026 15:01:38 +0000
Manifest next update: Sun 17 May 2026 15:01:38 +0000
Files and hashes: 1: 1AbwTnYg0WXUPpYwnnaZL_ow3bI.roa (hash: hVk4TpP4RMB+g39qT2ebySuMm79Hn4thM7YjCCsMTe4=)
2: BDYQwgLBbnXzyxnCPY_pCM4L2nc.roa (hash: Dwn097khl7QE/wrVW+MLdk6jalK979i68YL0QuJEQkY=)
3: htVCMjwOMFHJx7uO0dHorP09uDQ.crl (hash: JBk1cbFoX6i2923pKhwcA+OIz33AJ+sVaVzxGNUGDfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:a7:54:b4:9f:e9:45:5a:a7:43:ec:ca:0c:6f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Validity
Not Before: May 16 15:01:38 2026 GMT
Not After : May 17 15:01:38 2026 GMT
Subject: CN=c30b94f8d635d89fa0018f513f472c561e1b1ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:63:b5:aa:1c:d3:da:89:a9:cd:d5:11:a7:70:
b8:83:1c:5e:7a:59:11:08:d1:6c:94:b5:74:54:6d:
85:29:00:bf:3b:03:30:28:0c:c1:c9:bd:1b:19:ba:
30:a9:3d:10:ef:e2:ff:77:1e:70:c1:ca:9c:b4:c2:
4d:b8:ee:38:b7:15:c1:7a:da:67:85:55:ba:de:a3:
f5:37:70:db:f1:12:7b:02:d0:4b:73:df:c4:95:14:
bd:18:bd:2b:39:b9:09:bf:2d:30:8f:74:f6:d0:bb:
34:60:90:f3:3d:52:c0:9a:6b:a8:4f:d8:89:d4:d4:
69:78:06:8a:6e:09:9c:7d:c8:a3:bd:de:42:2d:24:
6e:8a:32:26:80:9b:06:50:8d:d0:02:c3:1a:3b:e0:
2b:1a:67:d5:4d:99:43:d9:79:0e:b8:64:23:46:26:
c8:1e:21:6b:4c:ed:12:3f:7a:96:d7:6f:99:52:4c:
79:54:71:e5:78:6d:4c:bf:5c:f9:01:6f:43:da:91:
17:24:3c:08:e4:b4:7d:ca:21:68:67:ee:c6:6b:3a:
c6:28:1a:64:bd:27:78:db:93:ad:c7:d6:8a:49:50:
6b:83:3c:b5:a8:a7:17:74:08:10:81:d3:0a:e7:c5:
2f:d3:90:bd:df:7d:35:ef:61:4c:ed:ce:e9:ec:6e:
92:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0B:94:F8:D6:35:D8:9F:A0:01:8F:51:3F:47:2C:56:1E:1B:1A:E5
X509v3 Authority Key Identifier:
keyid:86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f8:14:89:c7:1e:78:86:61:c4:26:f4:cc:59:81:a2:41:4f:
0e:f1:a8:ef:ab:e4:28:ae:fa:46:0a:d0:17:4e:47:82:75:cb:
6d:75:a0:96:07:b3:4f:74:8c:db:14:a7:80:65:a3:55:92:26:
ae:15:b9:3f:1f:29:b1:45:4b:67:bb:a4:08:8b:b6:cf:d7:93:
e4:0a:32:fe:06:82:84:9b:22:72:94:cc:36:dd:bb:85:f6:b7:
76:aa:12:18:0a:51:bd:14:9d:ea:8a:b5:6b:b8:cb:0e:92:6b:
d9:c5:ed:a7:c3:18:94:f8:03:11:d9:68:94:5a:f9:5f:d8:90:
95:8f:32:5f:38:57:f7:50:7d:de:be:91:12:75:cb:85:a5:1d:
a8:53:f1:e1:5f:0d:cf:74:86:c7:b7:c2:a5:74:08:55:f7:df:
ac:08:92:43:1a:43:c0:2c:81:ee:06:03:8c:ad:e1:4f:23:f3:
d5:a2:11:98:85:3c:2c:65:44:cc:0c:c6:30:0c:85:6f:40:3f:
5b:c5:46:a5:8b:48:bc:88:2c:a0:87:12:92:70:b2:e8:65:39:
cc:27:f3:e9:58:69:2f:1a:85:78:60:f9:4b:49:a9:10:cf:fa:
eb:3c:12:07:99:02:6f:d0:da:fb:08:17:fb:5e:8c:13:4e:f7:
90:72:ab:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:30:51 2026 by rpki-client