Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
File: HT0ETAkeiLgLSyaeu3lrPyRUS18.mft (raw, json)
Hash identifier: mtpWCZoTb8v+2Ruj2L6IiufA72G8cjPuEfRRlgP+9jM=
Subject key identifier: 17:4E:07:C2:0F:60:31:AF:13:FC:91:D1:38:CF:E2:F4:AC:EA:14:5E
Authority key identifier: 1D:3D:04:4C:09:1E:88:B8:0B:4B:26:9E:BB:79:6B:3F:24:54:4B:5F
Certificate issuer: /CN=1d3d044c091e88b80b4b269ebb796b3f24544b5f
Certificate serial: 019D2583ABF6AF126530A03FFC4BA829DB7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
Manifest number: 091B
Signing time: Wed 25 Mar 2026 15:01:19 +0000
Manifest this update: Wed 25 Mar 2026 15:01:19 +0000
Manifest next update: Thu 26 Mar 2026 15:01:19 +0000
Files and hashes: 1: CVRiR4PWA5mkMUyfsZHNmuQrLLc.roa (hash: 5ktDsOfkaJ/bYAV74Q0Rw6jgw2aMIQHNLymwbsIWQIk=)
2: HT0ETAkeiLgLSyaeu3lrPyRUS18.crl (hash: mK5DHJP3M321ESwGIpWiGLEi7sqss3gvEqOWbf5S9tM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:ab:f6:af:12:65:30:a0:3f:fc:4b:a8:29:db:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d3d044c091e88b80b4b269ebb796b3f24544b5f
Validity
Not Before: Mar 25 15:01:19 2026 GMT
Not After : Mar 26 15:01:19 2026 GMT
Subject: CN=174e07c20f6031af13fc91d138cfe2f4acea145e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5a:9b:a1:87:ce:ff:93:93:f8:2a:36:d9:ab:
c1:5c:ac:84:8c:f5:67:61:13:cb:ac:4b:d0:ff:f8:
a6:6b:38:44:b3:c2:9c:c0:cc:bb:4e:f1:82:97:66:
76:96:52:1a:1c:fa:c6:98:dc:27:40:0a:22:fd:08:
de:e2:70:64:34:e2:09:94:bb:3d:40:58:c1:09:42:
7b:68:a9:1b:82:bf:08:a1:a4:e7:21:24:1f:89:a9:
07:65:e0:e4:ff:a8:b4:99:05:8f:20:34:ba:36:f3:
06:4c:29:4d:82:99:ba:50:20:fc:ee:02:93:ab:92:
5b:59:e9:ef:42:77:62:d9:a8:1a:55:bb:53:c3:ff:
55:27:13:55:94:12:78:6e:50:f0:5b:61:a3:dd:7c:
9b:ef:fe:fa:fb:4e:27:1b:cb:2e:e6:90:54:c9:1f:
af:46:b1:cb:c5:c9:5f:5d:0a:fa:a1:72:34:23:d2:
fa:47:8c:60:ea:c5:34:05:eb:0f:c0:bb:14:aa:aa:
70:d2:4f:c2:14:f1:04:24:7a:c9:a3:07:34:6e:a5:
fb:c4:ab:05:e2:fe:45:3e:f5:0f:22:8c:04:96:20:
27:6d:4a:7b:c9:41:02:f3:09:85:ed:53:80:1e:b9:
c7:41:51:6e:7a:00:c1:64:95:d9:2b:86:83:ac:1f:
be:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4E:07:C2:0F:60:31:AF:13:FC:91:D1:38:CF:E2:F4:AC:EA:14:5E
X509v3 Authority Key Identifier:
keyid:1D:3D:04:4C:09:1E:88:B8:0B:4B:26:9E:BB:79:6B:3F:24:54:4B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ac:48:36:c3:2a:40:4d:f7:32:b6:73:e1:b6:87:5c:f7:39:
ce:96:d5:48:11:29:0b:47:5d:67:60:62:5f:b9:ff:b6:08:20:
31:48:d9:53:bb:60:26:14:9f:50:61:0d:bd:77:b0:0a:19:bf:
fd:8d:08:ef:2e:7a:cb:63:2c:18:6f:2b:47:8a:81:6f:bb:23:
8e:1c:1d:3c:55:c9:19:d7:6e:23:ba:3e:47:b3:58:e9:ee:10:
d2:15:03:ca:39:6a:65:47:05:10:9e:03:ef:e1:66:90:05:70:
70:1e:c3:6f:89:69:52:0b:9e:dc:b5:8d:3b:1c:fb:6d:d1:f0:
c3:29:ef:eb:22:14:07:d3:78:0a:b1:8e:d7:09:c7:78:1c:8c:
0c:9d:e9:23:56:ab:d0:5d:32:44:49:d0:2f:55:29:33:75:b3:
67:04:1c:39:d9:1f:b2:05:ce:3d:f0:8e:e4:61:12:fb:ea:67:
40:cf:bb:5c:3d:6d:67:9f:b0:28:e1:21:f6:d2:29:90:bc:d7:
fb:db:1e:7d:fd:87:30:d6:55:73:fc:87:5f:d5:e4:63:70:7d:
56:9b:02:3c:69:17:8a:17:97:26:1e:8b:57:cc:9b:7a:04:f2:
ae:00:0a:10:67:10:ea:78:5b:2b:e3:0f:a1:12:96:82:03:8b:
26:01:5c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:07:10 2026 by rpki-client