Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
File: htVCMjwOMFHJx7uO0dHorP09uDQ.mft (raw, json)
Hash identifier: kD9ow93Y/ZxzNQkyy9vAn95meEoa840Q/8PQ9QNCuAY=
Subject key identifier: 63:ED:90:74:03:5B:A1:BF:5F:AB:4D:0F:4B:C6:B3:17:B4:FE:51:54
Authority key identifier: 86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
Certificate issuer: /CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Certificate serial: 01A0EE5448D45FAF84C223E9DA491C34DEA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
Manifest number: 1A80
Signing time: Tue 29 Sep 2026 18:01:36 +0000
Manifest this update: Tue 29 Sep 2026 18:01:36 +0000
Manifest next update: Wed 30 Sep 2026 18:01:36 +0000
Files and hashes: 1: 1AbwTnYg0WXUPpYwnnaZL_ow3bI.roa (hash: hVk4TpP4RMB+g39qT2ebySuMm79Hn4thM7YjCCsMTe4=)
2: BDYQwgLBbnXzyxnCPY_pCM4L2nc.roa (hash: Dwn097khl7QE/wrVW+MLdk6jalK979i68YL0QuJEQkY=)
3: htVCMjwOMFHJx7uO0dHorP09uDQ.crl (hash: xocq4vA00vL9Pgpxfr/W5ygumEuIMK9VPUQ2Q1HBwcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:54:48:d4:5f:af:84:c2:23:e9:da:49:1c:34:de:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Validity
Not Before: Sep 29 18:01:36 2026 GMT
Not After : Sep 30 18:01:36 2026 GMT
Subject: CN=63ed9074035ba1bf5fab4d0f4bc6b317b4fe5154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f7:75:a4:c3:26:01:ca:95:60:42:6d:b7:9d:
0f:c1:63:83:06:1e:56:c9:ed:42:11:6e:df:70:e8:
b4:d7:b5:4e:29:1c:71:cd:99:c8:3e:fd:96:67:be:
21:1e:8b:a4:0f:44:49:6d:a7:3d:96:1e:9d:76:b7:
32:03:8d:c9:17:47:84:66:35:4e:4c:0c:4e:69:e1:
4b:ec:76:34:a4:d4:97:fd:9a:be:40:ab:6e:f5:dd:
b4:10:0f:d9:9b:f9:cc:90:db:c0:48:bb:39:d3:2a:
c0:0b:46:62:b7:85:10:98:8e:ee:aa:f3:ec:54:84:
bd:ad:ee:ed:a8:60:9a:ea:33:52:9b:e0:04:97:a8:
09:8f:b9:8e:85:20:96:0c:21:ee:02:4e:67:d7:fa:
eb:4b:dc:69:6f:fc:5c:8e:26:31:9f:a8:5c:84:73:
33:b9:39:3e:fe:a8:35:77:bd:3d:cc:12:d5:1a:dd:
ab:9a:9e:d7:84:05:76:03:20:b7:e5:e3:f0:d0:c7:
4b:ad:80:2b:6c:f1:5b:8f:01:b8:08:b4:38:5b:ea:
0a:22:9a:57:26:ed:1e:aa:4c:be:33:1a:55:30:7a:
65:35:32:76:0a:25:6d:34:32:fb:dd:d3:bd:fb:d4:
40:1c:2f:9d:b7:a7:a7:b0:42:f4:06:40:74:c3:bf:
e9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:ED:90:74:03:5B:A1:BF:5F:AB:4D:0F:4B:C6:B3:17:B4:FE:51:54
X509v3 Authority Key Identifier:
keyid:86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:bc:c5:f3:df:f6:0e:04:46:0b:dd:6d:ab:a1:53:c0:25:53:
61:1f:9a:67:ea:ce:95:2b:a9:93:d0:42:76:f6:5e:e9:e6:32:
24:d0:4a:2d:62:32:0e:49:d5:7a:64:86:d3:49:99:76:ea:f9:
cf:fa:2b:13:6f:4a:03:b5:1e:dd:ed:c9:53:4d:05:81:80:3a:
5c:bd:b9:bc:91:c8:b2:d2:a3:62:b8:41:48:38:a1:41:e0:71:
a0:39:41:91:08:54:ca:47:8c:7e:da:b6:1b:cc:24:ed:b8:f7:
6a:d6:b9:5b:b8:18:c5:d9:89:15:f6:e9:e5:2d:1f:f9:9e:bb:
24:c6:56:96:66:d6:72:e1:ed:de:82:27:49:c7:fa:41:68:7a:
00:2b:4c:c2:7e:fd:66:2a:ba:d6:f0:02:e7:6f:1e:9b:08:6c:
2a:49:44:54:91:4d:0a:81:83:5a:8d:31:51:80:36:11:4d:0d:
3b:4d:68:11:35:ed:88:f7:53:8e:23:a2:62:ed:11:72:68:c3:
1c:5e:35:5d:2f:6f:6d:ac:0c:71:cc:e4:75:c7:1f:69:f5:52:
ad:cc:c3:52:32:08:ac:fd:8b:14:a3:a3:a2:ca:10:03:de:ff:
bc:50:4b:72:80:31:0b:f4:f8:4b:1b:fd:ba:b0:20:13:f6:10:
cf:af:fa:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDuVEjUX6+EwiPp2kkcNN6hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDU0MjMyM2MwZTMwNTFjOWM3YmI4ZWQxZDFlOGFjZmQz
ZGI4MzQwHhcNMjYwOTI5MTgwMTM2WhcNMjYwOTMwMTgwMTM2WjAzMTEwLwYDVQQD
Eyg2M2VkOTA3NDAzNWJhMWJmNWZhYjRkMGY0YmM2YjMxN2I0ZmU1MTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfd1pMMmAcqVYEJtt50PwWODBh5W
ye1CEW7fcOi017VOKRxxzZnIPv2WZ74hHoukD0RJbac9lh6ddrcyA43JF0eEZjVO
TAxOaeFL7HY0pNSX/Zq+QKtu9d20EA/Zm/nMkNvASLs50yrAC0Zit4UQmI7uqvPs
VIS9re7tqGCa6jNSm+AEl6gJj7mOhSCWDCHuAk5n1/rrS9xpb/xcjiYxn6hchHMz
uTk+/qg1d709zBLVGt2rmp7XhAV2AyC35ePw0MdLrYArbPFbjwG4CLQ4W+oKIppX
Ju0eqky+MxpVMHplNTJ2CiVtNDL73dO9+9RAHC+dt6ensEL0BkB0w7/pBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPtkHQDW6G/X6tND0vGsxe0/lFUMB8GA1UdIwQY
MBaAFIbVQjI8DjBRyce7jtHR6Kz9Pbg0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRWQ01qd09NRkhKeDd1TzBkSG9yUDA5dURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hN2M3YzEtZmM0Mi00M2EzLTlhZDgt
NzBkYWQ1MWU3M2ZiLzEvaHRWQ01qd09NRkhKeDd1TzBkSG9yUDA5dURRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9hN2M3YzEtZmM0Mi00M2EzLTlhZDgtNzBkYWQ1MWU3M2Zi
LzEvaHRWQ01qd09NRkhKeDd1TzBkSG9yUDA5dURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALbzF89/2
DgRGC91tq6FTwCVTYR+aZ+rOlSupk9BCdvZe6eYyJNBKLWIyDknVemSG00mZdur5
z/orE29KA7Ue3e3JU00FgYA6XL25vJHIstKjYrhBSDihQeBxoDlBkQhUykeMftq2
G8wk7bj3ata5W7gYxdmJFfbp5S0f+Z67JMZWlmbWcuHt3oInScf6QWh6ACtMwn79
Ziq61vAC528emwhsKklEVJFNCoGDWo0xUYA2EU0NO01oETXtiPdTjiOiYu0RcmjD
HF41XS9vbawMcczkdccfafVSrczDUjIIrP2LFKOjosoQA97/vFBLcoAxC/T4Sxv9
urAgE/YQz6/6aA==
-----END CERTIFICATE-----
Generated at Wed Sep 30 00:21:58 2026 by rpki-client