Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
File: ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft (raw, json)
Hash identifier: rgWN1o4ZEMzMDcdKTBE+Rn8Clh4uZTIRBWNubVQ7UPY=
Subject key identifier: A2:BA:41:6C:41:96:37:3E:F8:61:64:76:9F:02:E3:FE:84:3B:83:C8
Authority key identifier: 86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
Certificate issuer: /CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Certificate serial: 01A1E028081D153EDDC905F88A7558F9BDA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
Manifest number: 19BE
Signing time: Sun 15 Nov 2026 17:01:22 +0000
Manifest this update: Sun 15 Nov 2026 17:01:22 +0000
Manifest next update: Mon 16 Nov 2026 17:01:22 +0000
Files and hashes: 1: 10VeRd-dKyjhB82yK0FZfBzYDrU.roa (hash: Q3l/6xX2yJgapH3cvOFve36CvHD208D4sxfTot+xau4=)
2: ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl (hash: qSgqZ36eK1iGwZ7155VYx5XNA5UkDfeez2mgVXbwXjY=)
3: l5D9Tvi9Koza2_mxtzxJQq_s-s0.roa (hash: 0MIxUszJignbxKF108EhpKWB6naIZK2n8zx9GIqX7e4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:28:08:1d:15:3e:dd:c9:05:f8:8a:75:58:f9:bd:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Validity
Not Before: Nov 15 17:01:22 2026 GMT
Not After : Nov 16 17:01:22 2026 GMT
Subject: CN=a2ba416c4196373ef86164769f02e3fe843b83c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:68:20:26:28:a6:5b:12:9d:47:30:a3:db:17:
6c:74:4c:8d:82:49:f7:9c:35:f8:71:9c:2a:35:cf:
15:82:58:9c:52:b7:7b:dd:11:98:ae:59:f9:c9:4f:
d9:f6:29:04:32:c5:0e:de:a0:e5:07:74:5b:a1:18:
62:f5:eb:11:83:ef:9b:ed:54:c5:0c:bf:7e:b6:3b:
d4:88:b2:17:5b:d3:46:a4:b1:31:52:71:76:c9:75:
38:74:75:c6:58:af:5b:db:54:66:3e:0f:39:85:37:
91:12:9d:5b:1a:6b:75:ac:29:9e:63:e7:f0:27:af:
26:fb:8a:ae:d7:c8:16:03:c5:d1:e7:7e:06:25:81:
6a:ff:55:e7:c4:8a:4d:0b:e1:04:d5:cb:b2:c9:ab:
55:9e:30:94:a5:3c:07:d1:97:64:49:5a:f3:b2:73:
fb:f8:3d:64:ac:c5:2c:f0:26:b6:e4:5b:86:21:34:
0b:c4:f3:96:fc:f7:28:c1:71:e4:3a:8e:a7:54:af:
84:4e:cb:c2:ef:20:4c:68:e6:8e:6d:51:20:04:f7:
a7:0b:95:5c:18:71:6a:ce:22:f4:52:52:57:d0:93:
24:c0:06:5f:37:9a:49:52:6a:4c:a5:90:bb:17:99:
34:4e:26:c8:e1:7b:89:01:1b:e9:6c:ea:cc:c0:22:
27:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BA:41:6C:41:96:37:3E:F8:61:64:76:9F:02:E3:FE:84:3B:83:C8
X509v3 Authority Key Identifier:
keyid:86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:2a:c1:de:5b:90:43:3f:93:ba:af:ee:5e:3e:aa:a3:b3:ce:
fe:f1:33:bd:c7:f1:ea:f6:da:27:fc:e7:19:eb:93:c3:d1:f2:
9c:d4:86:84:f8:d8:64:20:e2:fd:27:27:c3:a5:ea:91:d5:0c:
cb:ae:74:1c:73:aa:3f:6f:58:cf:05:c0:48:d9:a7:f7:13:64:
42:04:60:6d:59:90:10:ac:b9:7c:ab:0e:2e:96:d7:fc:e9:69:
1e:a8:6e:f8:71:1f:19:ed:05:a4:8c:d3:3a:d9:54:3f:9c:7d:
98:41:70:70:42:64:ba:c5:be:7a:0c:6a:e3:f7:d8:46:5e:bf:
4d:8f:f1:1c:81:ce:b3:03:95:91:54:f4:79:cc:ac:22:75:3b:
cd:20:35:89:f6:11:3e:c0:6e:5d:82:d1:2d:7d:2c:69:3d:04:
8f:5b:a3:af:9b:3e:70:71:35:e5:f4:f8:12:f7:31:3a:22:ef:
f8:28:ab:b6:be:d9:ff:a4:a8:78:ed:3c:3c:ca:c2:3c:fe:3c:
48:59:a4:7f:ce:e6:fe:84:7e:8a:b3:9b:83:2a:30:b0:db:aa:
2d:37:74:1c:8c:5a:21:e8:59:f2:9e:98:74:08:75:63:1e:67:
fb:a7:2b:cc:3c:98:07:4f:37:21:4f:de:30:f9:a7:dd:ce:bf:
b0:39:eb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:22:52 2026 by rpki-client