
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.mft
File: htljhE-CBdE2lDRTHJmGAMFXgaE.mft (raw, json)
Hash identifier: P+eZYB09EC7Pjp8+6wOn4dQVqcRYjeVfXoFGcwYJn1o=
Subject key identifier: 60:FA:85:28:D4:3A:70:AE:CF:79:06:1A:37:12:20:D0:BB:7D:64:CB
Authority key identifier: 86:D9:63:84:4F:82:05:D1:36:94:34:53:1C:99:86:00:C1:57:81:A1
Certificate issuer: /CN=86d963844f8205d1369434531c998600c15781a1
Certificate serial: 019E1DC77B93FE7A52EB0B60D437B3BAE9BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htljhE-CBdE2lDRTHJmGAMFXgaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.mft
Manifest number: 022F
Signing time: Tue 12 May 2026 20:01:13 +0000
Manifest this update: Tue 12 May 2026 20:01:13 +0000
Manifest next update: Wed 13 May 2026 20:01:13 +0000
Files and hashes: 1: AL6_iNyYf5_-8MNJEgieEgNDMIY.roa (hash: 0+d8aJSNzAigR1rPUuhEaaIGr2KsvOX77RXS9BnQQ0E=)
2: Ri6eR0hyModJmhU4qRXYfOTF-Qg.roa (hash: vp43LSqg4UfumRnhKAC/q4lMv6KhCs9VlzcPfCyPdH4=)
3: SNSZyMcxHfPqzsZovpnv0TS4kEk.roa (hash: 6uX+ryYbLRIBx9RtsjWqz+fa+ZH7FgeP5Ku25N+gV9g=)
4: htljhE-CBdE2lDRTHJmGAMFXgaE.crl (hash: 7hFA3sJegdHAhl+LZskjyt+vZLK4xlSLZYjzNR5XPkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/htljhE-CBdE2lDRTHJmGAMFXgaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:7b:93:fe:7a:52:eb:0b:60:d4:37:b3:ba:e9:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d963844f8205d1369434531c998600c15781a1
Validity
Not Before: May 12 20:01:13 2026 GMT
Not After : May 13 20:01:13 2026 GMT
Subject: CN=60fa8528d43a70aecf79061a371220d0bb7d64cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a0:92:e2:1a:7c:a5:03:91:d7:75:a4:27:c6:
a4:a9:f5:80:f8:d4:68:45:28:76:47:94:ff:19:f8:
c8:d1:90:be:bc:87:ae:fb:62:28:cc:3f:28:9d:ea:
29:3e:1f:ca:f2:3c:e2:d1:f3:f8:7c:81:03:d8:8c:
ad:46:b7:36:06:ca:ce:8a:eb:af:4c:59:23:5a:fe:
bf:86:8b:aa:5a:b3:5c:d5:b8:54:d7:f8:39:a7:e2:
a3:a8:3c:fc:e0:ea:b7:31:47:48:30:6a:2e:33:77:
cf:37:6a:74:4f:db:46:90:21:ef:fc:bc:2b:b7:f3:
6c:c9:d3:e3:60:54:25:8d:8e:8d:0b:2e:7a:2d:a2:
2d:19:3c:ff:1c:b3:07:ee:c8:21:66:5e:09:d4:2a:
d6:92:18:0b:e9:0a:53:84:0d:0f:8a:96:f8:a7:0f:
33:01:27:f5:bc:56:3f:65:7a:72:1d:e3:32:99:1c:
18:4c:90:02:37:54:e3:62:ad:bf:3f:f0:56:92:44:
b2:ba:03:73:db:fc:d3:a8:46:9f:b3:58:d8:80:63:
a8:d7:2f:10:c1:24:63:e1:82:46:92:2f:f9:58:30:
2d:c0:78:d8:b7:5c:6b:bd:c4:52:88:15:1f:bd:38:
a4:3b:a8:c9:98:53:96:08:8e:e2:76:af:b5:00:e5:
86:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FA:85:28:D4:3A:70:AE:CF:79:06:1A:37:12:20:D0:BB:7D:64:CB
X509v3 Authority Key Identifier:
keyid:86:D9:63:84:4F:82:05:D1:36:94:34:53:1C:99:86:00:C1:57:81:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htljhE-CBdE2lDRTHJmGAMFXgaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:99:86:31:ba:15:25:d2:72:0e:19:aa:01:17:68:d8:04:72:
44:12:0b:99:42:a2:7a:bb:94:3a:b2:f2:9e:71:52:e3:dd:af:
27:bb:d5:b3:18:b1:3b:e0:6f:b5:bc:c6:e0:7d:92:81:c2:5b:
a8:3c:1f:8d:48:46:40:e4:22:a4:78:6d:4f:03:64:ad:41:52:
5a:56:f3:f8:f5:e0:c5:dc:4a:fa:0f:c6:47:6b:0e:06:8e:af:
43:99:38:56:3e:0d:58:e7:d7:fa:a5:d2:9f:22:24:e0:ce:07:
62:69:69:d4:f5:12:0c:d4:bd:6c:82:21:a9:5f:66:c0:64:ea:
76:33:5c:01:38:3c:7f:63:6b:5a:87:64:63:8e:74:85:89:bd:
91:de:65:55:02:e5:87:92:8c:11:13:07:ce:a9:a8:b5:d4:23:
9a:73:a0:65:a1:2b:d1:d0:1d:e3:3d:06:2e:d2:78:54:ba:19:
c1:12:b5:0f:e8:a5:34:44:c6:1f:b0:2b:42:f0:d1:94:d4:e4:
e9:67:08:9b:a8:e9:a0:e8:37:f7:02:cc:a1:15:9a:8f:7e:b5:
05:3c:17:f9:79:62:5d:f2:4c:51:85:48:af:cf:63:97:20:58:
eb:92:82:00:6c:2d:31:28:5d:a5:63:ea:96:fe:45:c5:8c:57:
08:59:24:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:07:32 2026 by rpki-client