Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/730e38-ff89-43e1-94fe-a1b778f4d07d/1/HTHgIH7TynaEoD6I-aHeKSLdRd4.mft
File: HTHgIH7TynaEoD6I-aHeKSLdRd4.mft (raw, json)
Hash identifier: NFIN1v6wMUMfm2zAMewE9eeuCdCQJCkeC4TW9gUPYaw=
Subject key identifier: CE:CA:11:4D:FE:58:49:FD:99:54:6A:67:20:50:9C:3A:6A:04:94:0F
Authority key identifier: 1D:31:E0:20:7E:D3:CA:76:84:A0:3E:88:F9:A1:DE:29:22:DD:45:DE
Certificate issuer: /CN=1d31e0207ed3ca7684a03e88f9a1de2922dd45de
Certificate serial: 01A0C85939B91FCE9BA81F377246A87AE56B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HTHgIH7TynaEoD6I-aHeKSLdRd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/730e38-ff89-43e1-94fe-a1b778f4d07d/1/HTHgIH7TynaEoD6I-aHeKSLdRd4.mft
Manifest number: 0610
Signing time: Tue 22 Sep 2026 09:01:25 +0000
Manifest this update: Tue 22 Sep 2026 09:01:25 +0000
Manifest next update: Wed 23 Sep 2026 09:01:25 +0000
Files and hashes: 1: HTHgIH7TynaEoD6I-aHeKSLdRd4.crl (hash: f2IbkEMV2eqCOoNx8KqRDLSPuSTNCQcfSK+zSfusssU=)
2: JF1S5nChkcbeHK1YmZzl8eEwqB8.roa (hash: wmxaRB1M5Kn+LV3DtXz/lQpX7fY1n782f7y8VXUfVvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/730e38-ff89-43e1-94fe-a1b778f4d07d/1/HTHgIH7TynaEoD6I-aHeKSLdRd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/730e38-ff89-43e1-94fe-a1b778f4d07d/1/HTHgIH7TynaEoD6I-aHeKSLdRd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HTHgIH7TynaEoD6I-aHeKSLdRd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:59:39:b9:1f:ce:9b:a8:1f:37:72:46:a8:7a:e5:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d31e0207ed3ca7684a03e88f9a1de2922dd45de
Validity
Not Before: Sep 22 09:01:25 2026 GMT
Not After : Sep 23 09:01:25 2026 GMT
Subject: CN=ceca114dfe5849fd99546a6720509c3a6a04940f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:22:45:db:e9:b5:96:11:a1:d8:0c:4e:5f:8d:
4d:66:34:10:68:f2:9e:0b:0f:01:83:db:53:33:c3:
8b:49:9d:fc:1c:b3:0a:09:76:00:94:be:57:67:99:
dc:33:58:15:ea:b9:f9:94:3a:95:2e:0b:9a:e0:7c:
a8:bf:61:fa:50:03:d5:70:ff:48:c8:fe:0a:23:c2:
8f:5d:d2:b8:f5:94:07:e7:24:fd:4a:81:41:6a:1b:
9f:31:49:0d:6e:51:dc:bb:ef:37:b4:e7:d3:a5:75:
09:d4:e8:88:6a:47:7f:05:4f:fa:64:25:94:1e:77:
65:be:d6:d6:07:6c:1e:aa:33:02:b0:2b:a3:50:02:
8f:69:e5:aa:75:75:2c:2b:62:5c:4d:6d:27:f8:e8:
70:f4:f3:2a:91:bf:04:a4:4a:58:be:aa:ee:b6:03:
5d:44:5d:f3:48:b9:82:dd:6c:3a:42:41:3b:da:07:
67:0e:85:5b:e8:f1:db:65:df:d2:1b:49:7c:15:12:
96:da:ec:f4:36:e9:06:db:79:8c:59:e1:51:66:43:
d3:d0:9e:62:f5:7e:1e:85:ec:1f:8f:8a:d3:f5:12:
46:11:d7:6d:42:88:70:3c:44:33:b8:9e:16:db:63:
67:de:91:3a:e6:9b:a3:93:7d:b0:1d:28:8d:97:99:
34:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CA:11:4D:FE:58:49:FD:99:54:6A:67:20:50:9C:3A:6A:04:94:0F
X509v3 Authority Key Identifier:
keyid:1D:31:E0:20:7E:D3:CA:76:84:A0:3E:88:F9:A1:DE:29:22:DD:45:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTHgIH7TynaEoD6I-aHeKSLdRd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/730e38-ff89-43e1-94fe-a1b778f4d07d/1/HTHgIH7TynaEoD6I-aHeKSLdRd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/730e38-ff89-43e1-94fe-a1b778f4d07d/1/HTHgIH7TynaEoD6I-aHeKSLdRd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:14:78:82:85:37:19:f3:e3:66:eb:b7:66:d8:35:c1:84:a7:
8f:f6:e6:22:74:f6:65:b5:85:03:b3:04:a3:fe:e3:68:68:d4:
13:8a:9d:b0:99:a7:c8:9d:a9:24:12:22:f9:f4:05:63:f4:9d:
69:8c:17:d6:f6:a3:fa:01:8e:ba:b6:f9:50:2e:1d:c4:30:ba:
b0:97:c5:4f:9c:88:04:c7:5d:96:6a:d6:9b:f5:fe:44:3a:79:
58:d6:c0:e2:7e:90:d5:86:83:ac:c0:38:1f:fc:a3:2b:f1:d4:
e0:77:bc:5f:22:17:7c:55:94:8d:ec:b9:05:1f:87:5b:8b:cb:
db:77:cc:91:44:bb:34:47:5d:16:97:41:3a:52:17:de:b3:60:
f7:8e:5d:05:09:cf:3c:c3:a8:00:a7:58:46:fb:55:f9:11:9b:
57:0e:f3:64:67:9e:8b:d7:6c:f6:15:86:84:68:92:7d:f5:18:
11:0b:f0:c9:85:50:e2:7d:c4:52:88:54:2b:db:e6:a2:d0:ad:
e8:c6:f0:be:9b:21:f7:42:4d:48:da:cc:de:b2:ef:2f:c8:19:
70:de:79:29:e3:18:49:16:91:f2:29:b0:ca:e6:d5:3c:9e:ff:
ac:ac:25:1f:18:06:1c:08:ef:78:68:0a:f4:ab:92:2b:9e:86:
4d:f2:b4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:49:22 2026 by rpki-client