
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.mft
File: Ht4zFQwdJo2uOwTSqmnjBDCBb2E.mft (raw, json)
Hash identifier: YEi66PcYK273KCIChYBwnQgxhNR9dXqQQt9cK/5JxNg=
Subject key identifier: 9D:41:0A:B2:5C:0A:3D:F9:92:86:0C:FB:19:F1:70:1C:FB:8E:63:B6
Authority key identifier: 1E:DE:33:15:0C:1D:26:8D:AE:3B:04:D2:AA:69:E3:04:30:81:6F:61
Certificate issuer: /CN=1ede33150c1d268dae3b04d2aa69e30430816f61
Certificate serial: 01A1E05F1227F11737CF49DF5F08689DA0D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.mft
Manifest number: 0172
Signing time: Sun 15 Nov 2026 18:01:29 +0000
Manifest this update: Sun 15 Nov 2026 18:01:29 +0000
Manifest next update: Mon 16 Nov 2026 18:01:29 +0000
Files and hashes: 1: Ht4zFQwdJo2uOwTSqmnjBDCBb2E.crl (hash: kHvIPJ65BqL9DJmb61p9L2kt45o29DT3hcWOExlUtHk=)
2: nOWw_Lrr2bgT8qlKsyD4_Yimth4.roa (hash: 6zSk/eu9Fh0Y0k4njwXKHhSTfWBnk84TWmm0U218WXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:5f:12:27:f1:17:37:cf:49:df:5f:08:68:9d:a0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ede33150c1d268dae3b04d2aa69e30430816f61
Validity
Not Before: Nov 15 18:01:29 2026 GMT
Not After : Nov 16 18:01:29 2026 GMT
Subject: CN=9d410ab25c0a3df992860cfb19f1701cfb8e63b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2b:59:e0:fe:b5:24:5f:3f:95:47:94:fe:a5:
d0:2e:1f:26:fa:ec:7d:0d:06:61:e3:65:e5:f2:1b:
32:65:db:cf:9a:d5:ec:ac:bb:ac:10:13:85:1a:56:
b9:03:14:40:d3:5f:fb:d9:42:4d:90:92:42:89:6f:
ac:3d:67:fc:e0:1f:f6:71:fe:02:3d:e4:a7:ab:09:
d1:98:70:b1:b7:2f:71:60:53:c1:98:cd:a8:50:88:
89:8e:fc:1c:56:74:90:08:70:c7:4f:2e:48:90:35:
34:ff:4c:bb:f1:75:c6:20:26:cd:31:99:7d:13:ba:
0b:7a:db:7d:c6:16:dc:c5:cb:8c:a5:4f:45:75:a0:
96:4d:42:af:45:3a:98:13:7b:60:3c:62:fa:56:b2:
b8:7a:13:f7:4f:38:73:31:0e:dd:0b:93:3d:8c:6d:
d2:a0:6b:bd:de:70:72:98:ac:0b:36:ef:17:da:98:
7c:b5:c5:a7:3f:61:b4:15:2b:30:9b:45:34:bf:d2:
7d:82:3d:2f:e0:1c:f7:96:c4:60:47:1a:da:2f:bc:
8a:af:d7:24:b8:db:8e:04:5b:98:47:f1:e7:d9:b8:
c7:5a:69:44:9d:56:d9:45:78:d6:8a:f4:82:c6:b9:
ea:d2:bb:1d:93:58:19:61:f0:c9:77:58:df:e1:dd:
c4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:41:0A:B2:5C:0A:3D:F9:92:86:0C:FB:19:F1:70:1C:FB:8E:63:B6
X509v3 Authority Key Identifier:
keyid:1E:DE:33:15:0C:1D:26:8D:AE:3B:04:D2:AA:69:E3:04:30:81:6F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:99:39:26:de:20:7a:76:72:00:9a:da:39:f3:b9:70:35:b8:
fd:cf:41:99:9c:c9:39:df:c9:1b:e8:1d:4b:ad:6c:3f:70:ad:
b1:05:3d:30:70:a0:b3:ed:53:3a:52:da:8a:a5:d3:dd:b8:a5:
3e:40:e9:f3:bc:da:25:e8:cd:95:28:92:ee:ff:53:61:74:bc:
87:28:d1:61:f0:3d:2a:79:e4:4b:ea:db:50:01:d1:fd:ef:69:
26:3f:c9:0b:bd:db:69:10:bf:18:ec:6b:f6:a7:cb:8f:34:ec:
f7:c8:35:4a:83:94:ac:bd:bc:3f:f2:d5:ec:34:cb:c3:f5:1a:
0d:64:de:d6:70:37:ce:f6:68:e0:84:3d:27:ab:b4:a5:59:01:
cf:40:83:06:94:74:56:ca:4f:9f:75:a1:c3:ce:cc:77:d1:da:
5d:a6:4e:d6:50:5f:c2:15:01:c3:0d:05:36:3e:68:af:e3:a5:
0b:b1:91:b5:a8:48:ce:fc:7f:6c:b9:50:f3:39:ae:95:40:e2:
91:5f:15:3f:98:d6:ad:77:23:b7:47:3a:2b:5a:31:b8:62:22:
c9:19:3d:3b:0f:54:47:7a:49:7d:8f:d7:f7:05:9f:ee:6f:7a:
1b:79:16:98:21:14:e6:3b:12:54:a9:a6:6f:d9:ac:c5:01:54:
08:e4:61:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:56:39 2026 by rpki-client