Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
File: ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft (raw, json)
Hash identifier: SfnnD2A0NCP8ss7tc4uIkx+NfoRsi9Sc5wQQPUpTXT0=
Subject key identifier: 3F:69:C5:CC:DF:B2:A7:22:74:93:25:F8:5E:F3:80:17:70:95:81:AB
Authority key identifier: 86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
Certificate issuer: /CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Certificate serial: 019E1E6CA822767CDD95AB325EFF071541E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
Manifest number: 17CC
Signing time: Tue 12 May 2026 23:01:37 +0000
Manifest this update: Tue 12 May 2026 23:01:37 +0000
Manifest next update: Wed 13 May 2026 23:01:37 +0000
Files and hashes: 1: 10VeRd-dKyjhB82yK0FZfBzYDrU.roa (hash: Q3l/6xX2yJgapH3cvOFve36CvHD208D4sxfTot+xau4=)
2: ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl (hash: SO7zoX8EphDTs840gxxfgO0RoJZgLaiQ8C66T0q+dns=)
3: l5D9Tvi9Koza2_mxtzxJQq_s-s0.roa (hash: 0MIxUszJignbxKF108EhpKWB6naIZK2n8zx9GIqX7e4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:a8:22:76:7c:dd:95:ab:32:5e:ff:07:15:41:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Validity
Not Before: May 12 23:01:37 2026 GMT
Not After : May 13 23:01:37 2026 GMT
Subject: CN=3f69c5ccdfb2a722749325f85ef38017709581ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:42:88:97:29:89:3c:80:70:fd:81:8c:8b:9b:
96:76:93:9f:b4:35:4c:8a:bd:28:74:40:90:24:12:
c2:61:c0:20:e2:22:40:b4:c3:f5:ef:58:5d:11:a0:
3e:f3:8b:44:6d:26:5a:c8:07:30:63:b0:90:0b:e3:
e8:33:b4:4a:7c:a5:16:bc:88:9c:ea:1b:29:89:a2:
07:f8:da:78:ba:93:08:a1:59:78:c3:09:23:f9:26:
92:75:b6:4a:95:c5:b9:87:d8:fa:33:0e:c3:4f:9a:
a9:ec:4c:2a:1a:6f:ba:47:bf:0e:60:81:80:35:95:
31:f8:d8:6e:78:c3:54:b1:b2:da:c6:06:2c:e8:3b:
4b:ba:92:7a:4c:2f:cb:78:89:fd:f4:3a:b0:6b:1a:
cd:a8:8c:2c:8a:58:71:06:ff:4c:49:c4:3f:41:15:
8c:3f:70:41:98:36:3e:f5:36:b6:53:ee:0d:cc:75:
82:5c:a0:69:75:eb:01:99:f7:0a:f1:12:49:03:c7:
64:27:d7:64:5c:3a:6e:c5:5e:7f:3d:3b:83:4b:d8:
98:d4:c4:d9:d0:9b:24:93:c2:26:4b:f9:36:e4:af:
68:bb:26:1b:e2:a0:c6:45:e6:a1:28:26:cd:30:2c:
d1:79:f2:50:c3:d3:b1:f8:ad:3f:02:c2:87:c7:08:
27:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:69:C5:CC:DF:B2:A7:22:74:93:25:F8:5E:F3:80:17:70:95:81:AB
X509v3 Authority Key Identifier:
keyid:86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:8d:82:c2:ad:5d:b3:e7:c2:2a:20:87:f4:3c:89:3d:3a:9c:
05:05:d1:1a:80:01:b3:e2:3d:2b:ef:5f:3c:39:f7:b0:57:7c:
be:32:06:bc:48:bb:41:1d:c0:1e:19:49:8b:cf:b8:9c:d6:d7:
76:e4:91:7c:0d:7f:1c:1b:d0:40:71:2c:88:24:23:2c:81:d7:
3f:22:8f:00:3c:6e:1a:e9:af:ff:f5:c7:4d:e6:b2:61:f2:7f:
3a:19:83:59:3e:90:2e:51:3d:d4:52:f2:bc:97:9f:7d:a5:3f:
5d:33:3e:ca:80:79:e2:cf:a8:44:fc:57:3f:97:af:92:82:92:
b4:cf:fd:02:51:7c:48:29:d9:ab:45:9e:e4:be:8c:00:aa:4d:
7c:68:ed:49:4a:c5:4d:13:e8:cf:72:16:8c:39:e9:5e:fa:b1:
3e:14:45:29:e8:6d:05:23:0a:a3:78:27:8d:13:21:78:7b:d9:
aa:e3:e6:41:b5:f3:1b:52:19:b6:f3:6c:10:66:5f:e9:22:7b:
5c:28:b5:35:8f:9b:3f:ee:76:8f:ba:6a:1d:bd:ff:3c:52:65:
50:32:8a:5b:d5:f7:25:f9:c5:c9:81:7d:fc:cb:7b:72:81:f8:
8c:1f:13:98:0e:94:0d:f4:e2:81:99:6c:2c:ee:a5:0c:5c:6d:
44:16:e4:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebKgidnzdlasyXv8HFUHgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZGYxMjU5YjNhYTFkZTM0ZDEzZDFkODYzMTc4ODY0ZDlk
MTg1Y2IwHhcNMjYwNTEyMjMwMTM3WhcNMjYwNTEzMjMwMTM3WjAzMTEwLwYDVQQD
EygzZjY5YzVjY2RmYjJhNzIyNzQ5MzI1Zjg1ZWYzODAxNzcwOTU4MWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kKIlymJPIBw/YGMi5uWdpOftDVM
ir0odECQJBLCYcAg4iJAtMP171hdEaA+84tEbSZayAcwY7CQC+PoM7RKfKUWvIic
6hspiaIH+Np4upMIoVl4wwkj+SaSdbZKlcW5h9j6Mw7DT5qp7EwqGm+6R78OYIGA
NZUx+NhueMNUsbLaxgYs6DtLupJ6TC/LeIn99DqwaxrNqIwsilhxBv9MScQ/QRWM
P3BBmDY+9Ta2U+4NzHWCXKBpdesBmfcK8RJJA8dkJ9dkXDpuxV5/PTuDS9iY1MTZ
0Jskk8ImS/k25K9ouyYb4qDGReahKCbNMCzRefJQw9Ox+K0/AsKHxwgn8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9pxczfsqcidJMl+F7zgBdwlYGrMB8GA1UdIwQY
MBaAFIbfElmzqh3jTRPR2GMXiGTZ0YXLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHQ4U1diT3FIZU5ORTlIWVl4ZUlaTm5SaGNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kMDFhOTEtYTNhYi00ZTA4LTk1NjQt
YTUxYWEyM2E4ZmRkLzEvaHQ4U1diT3FIZU5ORTlIWVl4ZUlaTm5SaGNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9kMDFhOTEtYTNhYi00ZTA4LTk1NjQtYTUxYWEyM2E4ZmRk
LzEvaHQ4U1diT3FIZU5ORTlIWVl4ZUlaTm5SaGNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxI2Cwq1d
s+fCKiCH9DyJPTqcBQXRGoABs+I9K+9fPDn3sFd8vjIGvEi7QR3AHhlJi8+4nNbX
duSRfA1/HBvQQHEsiCQjLIHXPyKPADxuGumv//XHTeayYfJ/OhmDWT6QLlE91FLy
vJeffaU/XTM+yoB54s+oRPxXP5evkoKStM/9AlF8SCnZq0We5L6MAKpNfGjtSUrF
TRPoz3IWjDnpXvqxPhRFKehtBSMKo3gnjRMheHvZquPmQbXzG1IZtvNsEGZf6SJ7
XCi1NY+bP+52j7pqHb3/PFJlUDKKW9X3JfnFyYF9/Mt7coH4jB8TmA6UDfTigZls
LO6lDFxtRBbkkA==
-----END CERTIFICATE-----
Generated at Wed May 13 10:14:13 2026 by rpki-client