Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.mft
File: Ht4zFQwdJo2uOwTSqmnjBDCBb2E.mft (raw, json)
Hash identifier: I8JyOBpjRVs15heFkK+3ye502b+tS2ajClD2K+f7h5w=
Subject key identifier: 2A:81:1F:1E:61:A0:F2:0A:22:F1:39:AC:80:26:27:EC:84:36:18:B6
Authority key identifier: 1E:DE:33:15:0C:1D:26:8D:AE:3B:04:D2:AA:69:E3:04:30:81:6F:61
Certificate issuer: /CN=1ede33150c1d268dae3b04d2aa69e30430816f61
Certificate serial: 01A0C669D1D4600A5D0C92B95D6282B8E2EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.mft
Manifest number: E0
Signing time: Tue 22 Sep 2026 00:00:18 +0000
Manifest this update: Tue 22 Sep 2026 00:00:18 +0000
Manifest next update: Wed 23 Sep 2026 00:00:18 +0000
Files and hashes: 1: Ht4zFQwdJo2uOwTSqmnjBDCBb2E.crl (hash: d2LUZ3cs2GMKEWdOUX9TZP2Zy0JueiHhXgtq/lsZPP4=)
2: nOWw_Lrr2bgT8qlKsyD4_Yimth4.roa (hash: 6zSk/eu9Fh0Y0k4njwXKHhSTfWBnk84TWmm0U218WXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:69:d1:d4:60:0a:5d:0c:92:b9:5d:62:82:b8:e2:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ede33150c1d268dae3b04d2aa69e30430816f61
Validity
Not Before: Sep 22 00:00:18 2026 GMT
Not After : Sep 23 00:00:18 2026 GMT
Subject: CN=2a811f1e61a0f20a22f139ac802627ec843618b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:77:54:9f:60:ca:6a:bb:16:db:e6:99:11:e7:
a5:ea:d4:1b:d4:ca:df:7d:78:2e:a7:4d:7b:64:0c:
b9:cf:af:13:81:54:4b:8f:f1:7d:38:44:14:8d:fc:
8e:2b:a6:83:e1:93:f5:86:23:26:24:80:f5:a0:c8:
a5:b5:59:a4:fe:36:f0:1a:d4:36:60:73:72:79:cf:
25:e3:a4:4c:91:7b:c6:38:0a:00:6e:8d:65:fa:cc:
da:0c:b6:06:6e:1c:13:98:48:fb:66:a4:24:97:7e:
54:7f:a9:c2:32:93:b7:94:3a:9f:76:6d:f7:5c:ef:
99:1b:6d:e1:e5:29:0d:96:84:05:50:89:ed:21:e2:
ff:46:44:2a:6a:d9:6e:17:3f:f2:5d:f8:80:54:40:
d2:af:c7:3f:ea:28:50:bb:08:25:fc:d4:26:0c:79:
84:a9:f1:3c:e4:bb:c7:a3:6e:b3:a4:9b:4d:c7:5a:
f3:b2:5c:aa:c4:0f:91:4a:8b:2d:00:fa:20:ae:8f:
60:dd:1b:32:06:91:84:e2:46:e2:86:4c:a0:55:26:
03:34:4c:f0:49:f1:95:30:77:96:6d:2e:45:7f:6d:
b4:a5:62:17:28:18:15:d8:69:12:69:6d:f5:eb:73:
f7:73:9f:b5:84:d1:cf:d8:92:2c:de:0e:29:3b:d0:
c6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:81:1F:1E:61:A0:F2:0A:22:F1:39:AC:80:26:27:EC:84:36:18:B6
X509v3 Authority Key Identifier:
keyid:1E:DE:33:15:0C:1D:26:8D:AE:3B:04:D2:AA:69:E3:04:30:81:6F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:10:4d:ad:9b:7c:17:a5:f3:81:0a:3f:5c:dd:28:db:1b:77:
10:aa:f5:31:57:cd:ed:31:d9:91:01:cf:77:b5:80:1b:da:bd:
f6:56:b8:eb:ea:10:1f:40:68:fe:9c:53:f8:2d:5e:36:ea:e3:
b9:d9:9f:0b:f2:a9:eb:f9:94:07:fe:05:06:1b:19:88:34:32:
23:2b:32:98:ba:5a:64:a2:c9:42:f6:c1:da:02:36:80:cc:86:
2d:a7:87:1c:90:d4:57:df:76:da:8e:a6:59:85:01:9b:e1:b4:
97:b6:0b:e8:90:ad:d5:9f:9f:a5:99:7a:f1:b7:16:e5:d2:99:
87:37:a9:aa:6d:b5:fc:51:ee:23:66:c7:f9:46:f7:67:5a:88:
51:3e:5f:72:21:b5:5a:79:53:c5:20:07:ea:d6:49:62:1f:1b:
ca:4c:1d:58:7e:fb:1c:2c:82:2f:99:be:82:27:a3:ce:7d:8b:
4b:a6:6d:8e:b0:ff:1b:07:5f:98:ec:b5:fa:2c:0b:1c:bb:d0:
d6:57:fc:5a:ed:16:3e:df:11:d5:8d:f7:92:ce:52:99:cb:66:
3a:6f:f7:de:04:ce:eb:cf:25:0c:98:3c:9f:69:8a:fa:e1:20:
05:01:99:77:b4:98:07:3c:d7:5d:f7:c5:ec:79:39:17:2b:29:
0c:4d:5f:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGadHUYApdDJK5XWKCuOLqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlZGUzMzE1MGMxZDI2OGRhZTNiMDRkMmFhNjllMzA0MzA4
MTZmNjEwHhcNMjYwOTIyMDAwMDE4WhcNMjYwOTIzMDAwMDE4WjAzMTEwLwYDVQQD
EygyYTgxMWYxZTYxYTBmMjBhMjJmMTM5YWM4MDI2MjdlYzg0MzYxOGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3dUn2DKarsW2+aZEeel6tQb1Mrf
fXgup017ZAy5z68TgVRLj/F9OEQUjfyOK6aD4ZP1hiMmJID1oMiltVmk/jbwGtQ2
YHNyec8l46RMkXvGOAoAbo1l+szaDLYGbhwTmEj7ZqQkl35Uf6nCMpO3lDqfdm33
XO+ZG23h5SkNloQFUIntIeL/RkQqatluFz/yXfiAVEDSr8c/6ihQuwgl/NQmDHmE
qfE85LvHo26zpJtNx1rzslyqxA+RSostAPogro9g3RsyBpGE4kbihkygVSYDNEzw
SfGVMHeWbS5Ff220pWIXKBgV2GkSaW3163P3c5+1hNHP2JIs3g4pO9DGDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqBHx5hoPIKIvE5rIAmJ+yENhi2MB8GA1UdIwQY
MBaAFB7eMxUMHSaNrjsE0qpp4wQwgW9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHQ0ekZRd2RKbzJ1T3dUU3FtbmpCRENCYjJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hOWJkZGMtNDUwZC00ZThiLTg0M2Ut
MTU5YjUyMGY4ODRhLzEvSHQ0ekZRd2RKbzJ1T3dUU3FtbmpCRENCYjJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9hOWJkZGMtNDUwZC00ZThiLTg0M2UtMTU5YjUyMGY4ODRh
LzEvSHQ0ekZRd2RKbzJ1T3dUU3FtbmpCRENCYjJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGBBNrZt8
F6XzgQo/XN0o2xt3EKr1MVfN7THZkQHPd7WAG9q99la46+oQH0Bo/pxT+C1eNurj
udmfC/Kp6/mUB/4FBhsZiDQyIysymLpaZKLJQvbB2gI2gMyGLaeHHJDUV9922o6m
WYUBm+G0l7YL6JCt1Z+fpZl68bcW5dKZhzepqm21/FHuI2bH+Ub3Z1qIUT5fciG1
WnlTxSAH6tZJYh8bykwdWH77HCyCL5m+giejzn2LS6ZtjrD/GwdfmOy1+iwLHLvQ
1lf8Wu0WPt8R1Y33ks5SmctmOm/33gTO688lDJg8n2mK+uEgBQGZd7SYBzzXXffF
7Hk5FyspDE1fAQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 06:53:14 2026 by rpki-client