Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/3b6788-39c7-47e7-9789-cd114fc95ee3/1/ht-eAQiRCzo5rZOEqEbjGatSMKs.mft
File: ht-eAQiRCzo5rZOEqEbjGatSMKs.mft (raw, json)
Hash identifier: XULgRoOmJp7rRGrhiNXgujVRWfXs/dPVEGrdiPNCkFE=
Subject key identifier: 31:D4:EC:7E:EE:04:81:1B:8A:11:8B:3F:E1:9D:DD:68:EA:45:D6:2A
Authority key identifier: 86:DF:9E:01:08:91:0B:3A:39:AD:93:84:A8:46:E3:19:AB:52:30:AB
Certificate issuer: /CN=86df9e0108910b3a39ad9384a846e319ab5230ab
Certificate serial: 01A1377FBFB578C48041C32EC8A5F3574893
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ht-eAQiRCzo5rZOEqEbjGatSMKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3b6788-39c7-47e7-9789-cd114fc95ee3/1/ht-eAQiRCzo5rZOEqEbjGatSMKs.mft
Manifest number: 016F
Signing time: Tue 13 Oct 2026 23:01:21 +0000
Manifest this update: Tue 13 Oct 2026 23:01:21 +0000
Manifest next update: Wed 14 Oct 2026 23:01:21 +0000
Files and hashes: 1: ht-eAQiRCzo5rZOEqEbjGatSMKs.crl (hash: yEU3CQVjjEN5tCAlf+ERVR8gU+WXGzCjnVm7sHe6tLg=)
2: xR7lHLxk8Lwsa1PxkTtlSkA2y9o.asa (hash: l6T14CjpEOwE6Md2ZhabwS3SrWDRTzGa9GM3xWAEiBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3b6788-39c7-47e7-9789-cd114fc95ee3/1/ht-eAQiRCzo5rZOEqEbjGatSMKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3b6788-39c7-47e7-9789-cd114fc95ee3/1/ht-eAQiRCzo5rZOEqEbjGatSMKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ht-eAQiRCzo5rZOEqEbjGatSMKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:7f:bf:b5:78:c4:80:41:c3:2e:c8:a5:f3:57:48:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86df9e0108910b3a39ad9384a846e319ab5230ab
Validity
Not Before: Oct 13 23:01:21 2026 GMT
Not After : Oct 14 23:01:21 2026 GMT
Subject: CN=31d4ec7eee04811b8a118b3fe19ddd68ea45d62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b7:07:43:61:58:1c:7d:c9:bb:ba:58:38:02:
b4:6d:89:79:16:f7:ec:7a:67:1d:4f:6b:2e:87:a9:
0c:7c:4e:23:76:19:5e:0d:3d:43:ec:83:ab:65:e2:
9f:16:e4:16:b9:98:ee:56:9e:69:05:9b:f9:e4:e4:
3b:6a:dc:3c:73:fd:bd:1e:d3:a3:2e:46:ff:85:4e:
97:63:4f:c4:f1:03:dd:52:ce:53:5d:55:e5:f0:49:
f3:2c:ab:77:5d:d8:96:9d:29:f8:ee:f9:92:d5:3b:
91:12:8a:82:c7:39:7f:60:51:b7:46:d1:11:d9:b3:
98:82:16:ec:8b:9e:77:36:f4:8e:1f:1e:0a:24:6f:
e8:3e:d8:bd:54:60:bb:92:fd:7d:57:e2:a0:bf:36:
66:1d:05:2d:69:d9:56:91:f6:1b:6e:05:aa:fd:44:
4e:b4:0f:79:bb:eb:92:2c:24:e9:57:0d:11:2d:fb:
2c:f5:f5:10:d5:0b:f1:67:ec:65:99:b6:1c:97:da:
16:08:fd:de:c0:ee:9a:c7:e7:8c:35:b3:f7:fc:ae:
50:ba:a9:d1:24:41:6b:c0:63:d3:50:56:67:0e:e7:
15:c2:14:6d:63:ef:7f:79:21:46:17:0b:c5:09:41:
4e:55:1c:81:d2:b3:a9:e3:bf:35:c0:d8:7d:6b:1f:
30:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D4:EC:7E:EE:04:81:1B:8A:11:8B:3F:E1:9D:DD:68:EA:45:D6:2A
X509v3 Authority Key Identifier:
keyid:86:DF:9E:01:08:91:0B:3A:39:AD:93:84:A8:46:E3:19:AB:52:30:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht-eAQiRCzo5rZOEqEbjGatSMKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3b6788-39c7-47e7-9789-cd114fc95ee3/1/ht-eAQiRCzo5rZOEqEbjGatSMKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3b6788-39c7-47e7-9789-cd114fc95ee3/1/ht-eAQiRCzo5rZOEqEbjGatSMKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f0:0a:24:9a:30:b3:c4:72:4e:c0:e2:82:af:32:68:30:93:
01:f8:e6:56:cb:22:c0:46:41:90:d4:ba:f6:e3:17:bd:78:3c:
72:42:9e:7d:04:3f:01:0d:9d:8b:3e:39:41:7a:33:85:19:34:
37:35:4b:ef:08:14:03:1f:0c:ea:56:77:00:6e:cc:6e:22:1b:
ce:cf:ec:e5:a1:d0:57:a8:b2:a9:3f:f4:fc:7e:c2:74:a5:81:
03:64:5d:98:d3:7b:f4:54:e7:71:80:b2:f3:1f:30:2a:9c:f8:
6b:64:b9:a6:eb:82:47:c7:b0:92:44:6f:c4:db:bf:8e:79:35:
c7:02:3e:62:40:79:b4:b1:76:de:8e:ff:56:65:2c:95:6a:9d:
3e:09:38:db:c0:23:7a:d9:6c:fa:fb:cc:75:d3:41:a2:22:64:
c0:0d:b2:66:f3:0b:e7:c3:24:d0:c6:cd:68:f9:64:17:5a:02:
f7:e7:42:52:82:50:0e:ef:d6:40:88:6c:9d:a6:e5:1b:47:b3:
50:ae:a4:c3:61:93:3a:db:26:0c:90:7c:6c:62:4e:23:b7:f4:
0c:93:2e:02:74:3c:81:9d:0c:1f:8a:79:86:73:d2:96:55:38:
d8:72:c7:5f:59:bb:d9:62:c3:35:d2:72:09:90:68:df:41:af:
29:4b:a2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 02:07:18 2026 by rpki-client