Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
File: ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft (raw, json)
Hash identifier: 5nBfXgJG6SHrlni8jMn9n6TxdH/srdP2f13wcPG2Y1Y=
Subject key identifier: 45:01:32:08:8B:67:BA:AE:2D:10:85:DB:55:F9:E5:C2:9E:D4:E9:BF
Authority key identifier: 86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
Certificate issuer: /CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Certificate serial: 019D273B2E5DC2B3C83CA50BF65E8C6D8293
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
Manifest number: 174C
Signing time: Wed 25 Mar 2026 23:01:23 +0000
Manifest this update: Wed 25 Mar 2026 23:01:23 +0000
Manifest next update: Thu 26 Mar 2026 23:01:23 +0000
Files and hashes: 1: 10VeRd-dKyjhB82yK0FZfBzYDrU.roa (hash: Q3l/6xX2yJgapH3cvOFve36CvHD208D4sxfTot+xau4=)
2: ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl (hash: spMvUAN1rtwOzerwyda8h4wxhc/gmWoOCmuY5SOiUSo=)
3: l5D9Tvi9Koza2_mxtzxJQq_s-s0.roa (hash: 0MIxUszJignbxKF108EhpKWB6naIZK2n8zx9GIqX7e4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:2e:5d:c2:b3:c8:3c:a5:0b:f6:5e:8c:6d:82:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Validity
Not Before: Mar 25 23:01:23 2026 GMT
Not After : Mar 26 23:01:23 2026 GMT
Subject: CN=450132088b67baae2d1085db55f9e5c29ed4e9bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8f:28:3e:1d:a7:dd:b3:9c:62:7e:1d:30:f5:
c4:db:bf:ce:de:3d:ba:aa:9b:73:4e:ac:1b:2c:ab:
3f:98:02:05:fa:fc:2a:f5:b2:a6:49:12:d9:e4:c8:
23:f1:20:59:66:22:71:25:b5:5c:1f:25:02:08:ad:
8a:29:91:13:28:e2:e5:96:e7:c8:94:d4:0b:bd:98:
54:16:27:88:65:11:81:21:9e:92:18:f9:65:41:f6:
24:de:76:79:5c:0c:d9:57:fe:05:42:eb:63:61:95:
84:8d:f4:7e:9f:38:0f:fc:ad:25:e3:63:63:ea:62:
4d:8f:f3:a1:0b:30:c7:18:39:0a:55:4a:32:15:7e:
4e:30:1b:67:7a:f8:3f:3d:6b:43:9c:be:4e:25:a1:
ba:3f:b6:a2:c2:c2:df:15:3b:2b:82:f4:e3:73:38:
a6:43:1a:c2:49:31:c5:bd:7e:f7:3f:d8:76:4b:16:
2a:77:9d:d9:f5:06:f0:26:be:f1:11:f1:25:1e:de:
c4:1b:9c:25:bb:dd:cf:70:d4:9e:6c:24:e4:29:71:
e6:4c:f8:0e:12:77:14:59:95:3b:88:51:2f:a0:d0:
0d:47:72:49:05:4e:34:cb:7c:b5:2c:fc:fe:da:aa:
33:7a:d3:ea:49:ec:43:c5:3a:e7:f8:68:7c:21:ea:
4e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:01:32:08:8B:67:BA:AE:2D:10:85:DB:55:F9:E5:C2:9E:D4:E9:BF
X509v3 Authority Key Identifier:
keyid:86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:31:b1:99:72:06:11:1e:bd:d7:69:9d:93:4b:15:9e:73:3f:
43:f9:e7:70:d3:88:48:e6:80:6e:9d:8a:39:e5:27:8b:90:93:
88:8c:62:00:a8:bf:31:7a:7f:e9:8d:cf:80:3d:56:8d:96:6c:
6e:f3:e7:e4:38:f6:27:23:79:a2:fe:82:d6:4e:e7:55:f7:1b:
e1:dc:8b:4e:1e:15:c6:2a:8e:c3:31:70:0e:d3:03:23:17:bf:
f8:f6:73:09:a4:9c:7d:b3:f9:3f:c9:b8:41:7a:f4:2e:58:a7:
ef:05:6a:64:62:24:13:90:5d:7f:f8:cf:08:2f:69:44:5e:fd:
3f:63:ce:02:7c:c0:7e:f4:2b:d9:15:51:1f:84:a9:bf:df:38:
ff:a0:28:9f:76:49:75:8c:9d:bf:63:6c:e8:ee:f5:5a:54:04:
e0:33:ca:b5:3e:2f:c4:a4:7b:11:96:b0:a2:8f:80:3b:13:d1:
9d:5a:a8:fc:18:d2:48:1a:f3:15:d1:ab:05:bb:ce:66:a3:3b:
2a:2b:81:ee:ac:79:b4:23:1d:0d:96:bd:24:be:21:77:31:2d:
fb:6d:0f:65:cd:09:a5:6a:02:a5:d4:1f:f8:26:e8:e5:6d:9b:
db:3d:39:66:d4:2f:91:20:85:3f:65:4f:0f:94:68:09:93:e7:
72:9c:d5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:47:13 2026 by rpki-client