Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
File: htVCMjwOMFHJx7uO0dHorP09uDQ.mft (raw, json)
Hash identifier: njd1QSgEBdElERt6T6Wkj/yXYzhSoVdn+txvaoJyWGA=
Subject key identifier: 96:99:0C:00:7F:66:BE:9F:B8:1F:35:A5:44:D5:38:C8:25:F0:CF:0C
Authority key identifier: 86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
Certificate issuer: /CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Certificate serial: 019F94A47D7C4D0B7DF94B8D665A26574E02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
Manifest number: 19CD
Signing time: Fri 24 Jul 2026 15:00:35 +0000
Manifest this update: Fri 24 Jul 2026 15:00:35 +0000
Manifest next update: Sat 25 Jul 2026 15:00:35 +0000
Files and hashes: 1: 1AbwTnYg0WXUPpYwnnaZL_ow3bI.roa (hash: hVk4TpP4RMB+g39qT2ebySuMm79Hn4thM7YjCCsMTe4=)
2: BDYQwgLBbnXzyxnCPY_pCM4L2nc.roa (hash: Dwn097khl7QE/wrVW+MLdk6jalK979i68YL0QuJEQkY=)
3: htVCMjwOMFHJx7uO0dHorP09uDQ.crl (hash: IOAAq2Soh2R+OermYLvCAytBcmwgPuCf2oxmAjvuQL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:7d:7c:4d:0b:7d:f9:4b:8d:66:5a:26:57:4e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Validity
Not Before: Jul 24 15:00:35 2026 GMT
Not After : Jul 25 15:00:35 2026 GMT
Subject: CN=96990c007f66be9fb81f35a544d538c825f0cf0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:74:09:3e:95:d0:a4:76:67:9f:6c:48:f7:89:
9d:29:81:7c:96:c5:1c:ed:ac:12:1f:6c:8c:0c:64:
32:18:3f:f8:3c:06:ab:0a:a9:d0:04:e6:65:e8:1c:
86:8c:16:37:a6:24:b2:92:6f:01:60:b3:ae:61:6d:
96:0a:58:3f:79:ef:58:63:d3:2c:06:f7:33:60:3e:
12:10:34:45:00:61:a4:5e:09:c4:df:f6:cc:96:82:
99:a1:b9:8e:3b:14:7b:8f:04:82:59:2c:d6:48:99:
f4:db:a0:c0:49:18:1a:88:be:78:e3:f9:07:4f:ba:
36:61:c2:dc:53:0a:3f:4d:e3:f8:47:53:62:b0:b3:
02:5e:4b:09:33:4b:ab:0f:aa:4d:61:c0:ea:94:53:
e3:cf:51:f6:2a:77:60:d9:1f:57:a2:ff:dc:a3:47:
b9:37:e4:b2:c9:1e:ff:fb:5b:38:25:e6:c5:f1:2c:
04:09:77:e4:49:12:7d:49:41:b4:9f:77:41:96:3a:
5f:4c:c5:43:df:76:40:56:fe:84:8c:84:3e:fc:5e:
18:b2:e3:f1:54:57:85:2f:a2:78:b2:e9:d9:01:54:
a4:22:5a:68:9f:fe:70:d9:df:20:c0:89:5a:03:9f:
ad:c7:38:b3:34:e4:2d:1b:38:4a:d0:90:c7:88:41:
c9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:99:0C:00:7F:66:BE:9F:B8:1F:35:A5:44:D5:38:C8:25:F0:CF:0C
X509v3 Authority Key Identifier:
keyid:86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:fd:f7:0a:88:8d:ca:c3:00:ab:76:f4:60:b0:83:35:92:1f:
ac:b1:31:07:e8:61:20:64:04:49:2b:a6:40:50:0b:32:af:5e:
42:78:cc:89:aa:3a:aa:24:3e:1f:2e:e8:45:94:1a:86:6e:8a:
e3:0c:48:d7:b7:b1:4e:0f:8d:cb:57:a1:f1:77:00:2f:98:4f:
16:a1:99:fb:3e:48:78:d0:43:48:07:ec:8c:5a:bf:a3:e4:5a:
0f:59:6b:77:8d:cc:45:3d:d6:73:e2:3c:a5:88:ae:42:65:14:
c9:e0:c2:17:31:52:a7:92:e3:0f:7d:dc:19:d8:fa:24:2d:0a:
0d:1b:e7:cb:da:54:56:0e:7d:31:7b:a7:32:c2:7e:c2:06:4e:
1f:f2:b1:6c:18:82:11:39:f8:06:0b:54:b7:23:4f:c7:2f:fc:
51:d4:45:86:ed:a4:ba:e8:fe:76:8e:d3:4d:34:80:ab:14:cc:
59:0d:b2:f1:21:13:4c:9d:88:29:f7:05:60:71:07:4e:9e:3f:
16:d8:50:ec:cc:a5:be:14:7c:a0:6f:08:f3:24:8a:21:e5:91:
3b:2c:98:e5:2f:86:af:67:dd:27:8b:eb:6e:d6:50:26:19:36:
70:c4:41:5c:80:73:d2:4b:95:c3:69:3d:08:3d:07:61:cd:4d:
9e:67:63:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:11:20 2026 by rpki-client