Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/3b6788-39c7-47e7-9789-cd114fc95ee3/1/ht-eAQiRCzo5rZOEqEbjGatSMKs.mft
File: ht-eAQiRCzo5rZOEqEbjGatSMKs.mft (raw, json)
Hash identifier: d31LYXZYn/cJjoG6IoZekqNDZOap78pVj0A4sEuIbbg=
Subject key identifier: 25:D2:E8:34:AE:FF:F0:74:DF:09:64:54:51:B8:CC:29:56:DF:DF:82
Authority key identifier: 86:DF:9E:01:08:91:0B:3A:39:AD:93:84:A8:46:E3:19:AB:52:30:AB
Certificate issuer: /CN=86df9e0108910b3a39ad9384a846e319ab5230ab
Certificate serial: 01A0BDD480E8712DD8F4F0931185007593C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ht-eAQiRCzo5rZOEqEbjGatSMKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3b6788-39c7-47e7-9789-cd114fc95ee3/1/ht-eAQiRCzo5rZOEqEbjGatSMKs.mft
Manifest number: 0130
Signing time: Sun 20 Sep 2026 08:00:15 +0000
Manifest this update: Sun 20 Sep 2026 08:00:15 +0000
Manifest next update: Mon 21 Sep 2026 08:00:15 +0000
Files and hashes: 1: ht-eAQiRCzo5rZOEqEbjGatSMKs.crl (hash: 4KNHOpdn80Bg/kB1kkK9IBe6DYLw9iPgrgny24jM/L4=)
2: xR7lHLxk8Lwsa1PxkTtlSkA2y9o.asa (hash: l6T14CjpEOwE6Md2ZhabwS3SrWDRTzGa9GM3xWAEiBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3b6788-39c7-47e7-9789-cd114fc95ee3/1/ht-eAQiRCzo5rZOEqEbjGatSMKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3b6788-39c7-47e7-9789-cd114fc95ee3/1/ht-eAQiRCzo5rZOEqEbjGatSMKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ht-eAQiRCzo5rZOEqEbjGatSMKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 08:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:d4:80:e8:71:2d:d8:f4:f0:93:11:85:00:75:93:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86df9e0108910b3a39ad9384a846e319ab5230ab
Validity
Not Before: Sep 20 08:00:15 2026 GMT
Not After : Sep 21 08:00:15 2026 GMT
Subject: CN=25d2e834aefff074df09645451b8cc2956dfdf82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:17:c3:b2:e9:5c:4f:9a:fa:d3:79:28:a8:4a:
2e:3d:e6:e9:97:1e:54:10:1d:d6:56:2e:ae:1f:11:
90:5b:d3:a3:a4:7c:fd:11:0f:c8:a5:c2:67:21:af:
7f:4b:c4:cf:77:11:ec:ad:b9:86:36:e9:75:61:28:
d1:7e:31:d0:11:e7:00:bc:fc:e3:86:7d:a6:25:ed:
1b:85:3f:6d:01:f9:30:37:d2:e4:78:35:85:6d:c9:
9f:20:f8:77:d8:ce:45:d4:ef:d4:08:0e:07:14:4c:
69:b4:d2:b2:8a:3d:d6:e4:3a:ec:a9:f5:6a:f4:f7:
68:61:c6:c1:e3:ae:c5:70:8e:10:e2:71:bf:82:1e:
fc:40:a9:b9:25:4e:94:85:fe:d5:ec:81:0a:75:5b:
1c:60:78:5d:3e:13:d9:0e:4b:e2:70:65:d3:31:44:
4a:c7:ba:dc:d5:66:bd:1c:0c:24:05:f4:3a:51:fe:
11:d2:27:37:12:82:44:fc:90:ad:dd:f2:de:37:32:
5f:81:fc:dc:81:06:86:2e:0c:25:76:f4:84:9f:33:
4c:46:ea:1e:15:87:e4:34:00:85:29:d9:db:38:b9:
f8:e7:99:0a:53:b4:ab:65:f3:05:97:47:3d:cb:6a:
d5:4d:6a:44:7e:a8:11:85:c3:dd:05:94:49:d0:6d:
b7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D2:E8:34:AE:FF:F0:74:DF:09:64:54:51:B8:CC:29:56:DF:DF:82
X509v3 Authority Key Identifier:
keyid:86:DF:9E:01:08:91:0B:3A:39:AD:93:84:A8:46:E3:19:AB:52:30:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht-eAQiRCzo5rZOEqEbjGatSMKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3b6788-39c7-47e7-9789-cd114fc95ee3/1/ht-eAQiRCzo5rZOEqEbjGatSMKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3b6788-39c7-47e7-9789-cd114fc95ee3/1/ht-eAQiRCzo5rZOEqEbjGatSMKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:8c:fa:01:47:f3:6b:b8:b6:b0:68:b7:4c:f5:16:1f:c9:ec:
c8:a5:dc:46:02:9c:6f:ee:46:1d:de:68:a9:f3:14:da:6c:64:
9d:e8:47:e4:d7:a5:35:53:15:7e:c3:39:db:16:9a:d4:17:ad:
1d:f3:35:60:49:6d:da:64:e4:31:1c:33:ae:62:42:43:12:6a:
6b:93:c2:dc:62:0d:6d:c0:ec:6d:68:76:b6:f3:da:3b:d3:c2:
19:3b:da:bb:c7:b2:40:ec:9b:0a:5a:a7:26:69:55:d4:15:fb:
ee:4a:f0:8c:2c:64:18:ec:0f:0b:4a:1c:c0:9c:bf:57:04:4e:
5e:07:97:32:c6:41:10:48:36:2c:2a:c8:e9:9d:c8:5c:57:3a:
70:2d:ca:4e:86:6a:81:06:62:cd:90:4c:3c:1a:d0:c3:d4:19:
20:6d:5c:40:d8:c3:95:3e:33:a3:fa:a7:ae:56:c5:5d:74:50:
86:7b:d5:c2:97:02:0d:f9:8f:01:67:e8:4a:2f:3c:dd:7b:bd:
b0:50:1e:74:8d:a7:3c:2f:73:5a:8e:1a:4f:71:4e:d7:08:39:
1f:8f:ae:29:76:2e:9a:73:3e:86:26:05:65:0f:aa:4b:aa:d2:
e4:eb:eb:b5:fc:2d:87:8d:9d:1d:3f:7a:bb:6e:65:a3:28:a5:
e9:4f:0d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:38:29 2026 by rpki-client