Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.mft
File: htljhE-CBdE2lDRTHJmGAMFXgaE.mft (raw, json)
Hash identifier: OdKoXzIZhJbgQfAx9c8relgv/ct/1LU528AJMuq/I+k=
Subject key identifier: D3:9A:7E:14:43:B4:47:E8:E2:2F:7C:2A:EB:DD:06:A9:A7:21:47:26
Authority key identifier: 86:D9:63:84:4F:82:05:D1:36:94:34:53:1C:99:86:00:C1:57:81:A1
Certificate issuer: /CN=86d963844f8205d1369434531c998600c15781a1
Certificate serial: 019CAEDA511F729FCA2C94FC59244AEE4AAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htljhE-CBdE2lDRTHJmGAMFXgaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.mft
Manifest number: 0171
Signing time: Mon 02 Mar 2026 14:01:09 +0000
Manifest this update: Mon 02 Mar 2026 14:01:09 +0000
Manifest next update: Tue 03 Mar 2026 14:01:09 +0000
Files and hashes: 1: AL6_iNyYf5_-8MNJEgieEgNDMIY.roa (hash: 0+d8aJSNzAigR1rPUuhEaaIGr2KsvOX77RXS9BnQQ0E=)
2: Ri6eR0hyModJmhU4qRXYfOTF-Qg.roa (hash: vp43LSqg4UfumRnhKAC/q4lMv6KhCs9VlzcPfCyPdH4=)
3: SNSZyMcxHfPqzsZovpnv0TS4kEk.roa (hash: 6uX+ryYbLRIBx9RtsjWqz+fa+ZH7FgeP5Ku25N+gV9g=)
4: htljhE-CBdE2lDRTHJmGAMFXgaE.crl (hash: V3TEKX0mgQR5DZfzL9a5V2pzIvoMs7KKpAsA57h/ZfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/htljhE-CBdE2lDRTHJmGAMFXgaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:51:1f:72:9f:ca:2c:94:fc:59:24:4a:ee:4a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d963844f8205d1369434531c998600c15781a1
Validity
Not Before: Mar 2 14:01:09 2026 GMT
Not After : Mar 3 14:01:09 2026 GMT
Subject: CN=d39a7e1443b447e8e22f7c2aebdd06a9a7214726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8e:e7:14:f0:ab:1f:3d:83:71:56:d1:dc:bc:
c0:61:73:45:43:ef:30:5a:dd:50:2d:d6:e3:d8:59:
2d:71:49:6c:ed:f3:b4:65:28:5a:7b:46:db:cc:8b:
05:40:07:e0:3e:ea:6d:9b:84:16:db:d8:81:d0:4b:
97:a5:74:aa:54:83:af:b1:42:37:60:41:76:98:b6:
b5:ac:98:85:56:35:f5:a1:a1:77:4d:26:2c:08:cf:
65:64:88:ad:8e:f0:e4:f3:4f:97:8c:81:98:30:a4:
89:c2:30:95:9e:4d:d4:9c:18:cd:98:d8:0e:de:b0:
5d:e1:64:af:6c:7d:ca:dc:33:e3:d1:8b:7b:b1:83:
aa:62:9a:bb:9e:1d:78:6b:4f:20:9b:b3:fa:49:7d:
26:36:d4:7f:6f:be:90:1b:27:c7:67:49:bc:17:c0:
9e:0c:d8:21:60:a4:bc:32:2a:f5:99:ea:7b:d1:8d:
e4:a1:5e:f3:65:08:f3:db:05:03:6d:b3:a5:a2:a8:
de:e2:ba:3d:c0:a4:b6:35:52:f4:f9:d9:f6:2e:77:
13:f3:f4:8f:d6:f4:ee:97:79:5a:57:d7:81:96:09:
8a:b2:95:9d:c8:10:b8:30:52:fa:8f:74:18:76:86:
1f:ed:ef:f2:bc:5c:02:0b:42:f8:73:d3:4f:01:6e:
e6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:9A:7E:14:43:B4:47:E8:E2:2F:7C:2A:EB:DD:06:A9:A7:21:47:26
X509v3 Authority Key Identifier:
keyid:86:D9:63:84:4F:82:05:D1:36:94:34:53:1C:99:86:00:C1:57:81:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htljhE-CBdE2lDRTHJmGAMFXgaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:a3:fd:29:3a:a5:76:b7:5b:24:59:91:07:fa:49:03:ae:38:
e5:09:b5:47:7f:d6:de:28:6b:8e:3d:ef:f1:05:43:0e:71:a5:
eb:c9:34:91:b7:72:de:42:30:21:e8:3c:ca:ea:50:8a:a5:2e:
6f:52:a2:76:1d:34:c8:8f:2f:b7:26:31:70:8f:da:28:3d:01:
99:56:33:13:97:69:05:f8:b1:cb:bc:12:34:de:8b:80:94:40:
ad:0c:fc:76:8b:9b:1c:0b:31:df:38:6e:0a:30:1b:92:7e:fa:
bc:9a:11:bd:b6:a1:b2:47:08:d5:ca:76:6e:f9:e7:23:6e:70:
23:e7:85:e3:0a:d7:58:0e:1d:45:ed:d4:0e:11:7f:6e:d6:a4:
1c:f1:67:ce:39:14:2b:9f:ae:34:e3:48:af:18:48:4b:f3:c4:
29:bd:6c:36:fe:6f:a9:fb:d0:fe:45:c6:d1:f7:d3:0e:52:80:
86:6b:db:40:6b:4f:d0:8a:55:ef:0e:97:94:cf:fc:64:f2:92:
f2:55:8e:af:d8:61:30:7a:e5:cf:51:39:5d:72:75:cf:06:a7:
bf:4a:c2:e2:a1:55:26:ae:46:ba:da:5d:dc:d6:3d:b8:c3:48:
b4:3b:23:71:f4:f8:2e:a6:77:9f:33:f5:fe:fc:b2:15:c1:28:
68:ba:70:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:15:04 2026 by rpki-client