Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
File: ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft (raw, json)
Hash identifier: x/LAgGUygISQV4oXcLt2D7x+0Vm9SkGvoInFoa3pODY=
Subject key identifier: 5F:65:AE:7F:47:7C:45:48:58:1D:74:E7:E3:01:34:8C:7A:A3:B4:65
Authority key identifier: 86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
Certificate issuer: /CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Certificate serial: 01A0D796EDC32593D6B3333AE71EB35F80F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
Manifest number: 1935
Signing time: Fri 25 Sep 2026 08:03:07 +0000
Manifest this update: Fri 25 Sep 2026 08:03:07 +0000
Manifest next update: Sat 26 Sep 2026 08:03:07 +0000
Files and hashes: 1: 10VeRd-dKyjhB82yK0FZfBzYDrU.roa (hash: Q3l/6xX2yJgapH3cvOFve36CvHD208D4sxfTot+xau4=)
2: ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl (hash: HfiKYumUOaoirN4T6HSSyupWqOPGccBskui3K1NckmE=)
3: l5D9Tvi9Koza2_mxtzxJQq_s-s0.roa (hash: 0MIxUszJignbxKF108EhpKWB6naIZK2n8zx9GIqX7e4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:96:ed:c3:25:93:d6:b3:33:3a:e7:1e:b3:5f:80:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Validity
Not Before: Sep 25 08:03:07 2026 GMT
Not After : Sep 26 08:03:07 2026 GMT
Subject: CN=5f65ae7f477c4548581d74e7e301348c7aa3b465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:df:42:9c:f5:a1:44:36:b4:d0:e2:2c:33:fb:
42:c6:4a:7a:dc:fd:81:f4:b1:58:ae:b4:d9:54:39:
80:40:f0:61:b4:a5:0b:17:6a:cb:01:70:a7:11:18:
8e:68:dd:b3:f1:ba:c9:72:b8:11:15:ad:64:c4:cf:
df:38:48:02:76:49:b5:ec:43:aa:d9:20:4a:70:0a:
f9:47:93:ac:e0:9e:b8:2c:0b:34:cf:da:e4:79:9d:
53:c5:f5:26:1a:27:1d:03:1d:6d:55:87:72:09:f2:
e6:f0:e3:42:7c:d1:5f:cf:0c:ee:f6:57:89:be:3e:
be:31:d2:b3:13:64:82:96:4e:b8:52:90:3e:31:2b:
04:c7:4d:15:ae:bd:93:63:a9:7a:46:39:3b:0f:db:
51:5c:99:60:f3:6e:97:7b:12:ac:e3:f4:c2:99:22:
5c:8a:4a:41:7d:d4:6d:38:cb:38:b4:f6:9c:5f:48:
f3:da:ea:1c:d4:9a:38:7a:b5:3f:96:c6:25:5d:da:
69:6b:7f:a1:14:cc:87:80:f2:92:d3:5a:76:73:79:
f5:88:04:08:cd:11:4e:24:e2:06:e0:ab:c4:e0:55:
90:5a:ac:5f:53:d9:2d:b0:12:90:5e:0c:6e:78:b3:
1d:4e:76:be:20:b6:19:11:05:bb:64:18:54:37:91:
e3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:65:AE:7F:47:7C:45:48:58:1D:74:E7:E3:01:34:8C:7A:A3:B4:65
X509v3 Authority Key Identifier:
keyid:86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:98:bc:7c:49:87:91:30:d8:6d:02:fc:5c:ae:20:17:49:cb:
6a:68:10:14:99:49:a8:42:e8:ed:57:7f:ce:e5:eb:78:d7:e4:
1a:7e:ae:83:55:3c:1d:a7:d2:e0:2d:d9:db:d9:fd:12:7f:ef:
7f:f1:30:de:8a:1b:7b:0f:0a:4f:7e:b6:13:6d:7b:1d:90:25:
a1:36:77:35:f6:23:47:02:a1:84:3f:ac:8f:55:98:30:25:aa:
91:8a:49:03:a7:da:d3:99:d2:d1:f3:df:37:91:1e:94:d7:3a:
90:93:3b:d3:81:9c:37:05:61:c6:67:8c:19:be:d5:83:91:3e:
9d:cd:48:08:ee:94:2b:3c:28:be:c8:ee:2d:7e:06:be:e1:cf:
a4:87:94:7a:ba:46:b0:d9:76:ae:be:f7:17:d6:3a:fe:ff:5e:
ff:a4:d4:30:7c:60:73:17:d8:bf:85:30:80:0a:e6:86:8c:50:
ec:89:60:3c:a9:04:40:99:64:82:a4:a0:4e:98:7c:54:dc:64:
36:f3:61:2d:eb:18:30:f3:1d:dd:25:6b:0a:7e:f5:e0:40:0b:
03:77:32:35:6a:78:b6:dc:66:68:3b:3f:d0:09:fc:0d:b6:e9:
13:76:bb:a9:ec:d1:8b:4b:de:de:fd:98:c9:51:58:1c:97:a1:
fc:c6:11:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:31:52 2026 by rpki-client