Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
File: ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft (raw, json)
Hash identifier: zSqv55RrdB6YvqOcm9m+gTv6Kb7Rd//WGze6HCWLIYA=
Subject key identifier: A0:03:99:43:C1:55:36:A1:25:AA:0C:9F:B9:AB:0E:A0:5C:C7:ED:E4
Authority key identifier: 86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
Certificate issuer: /CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Certificate serial: 01A0D1C9A5E35EAF81C4568ED1E4BACA278D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
Manifest number: 1932
Signing time: Thu 24 Sep 2026 05:00:48 +0000
Manifest this update: Thu 24 Sep 2026 05:00:48 +0000
Manifest next update: Fri 25 Sep 2026 05:00:48 +0000
Files and hashes: 1: 10VeRd-dKyjhB82yK0FZfBzYDrU.roa (hash: Q3l/6xX2yJgapH3cvOFve36CvHD208D4sxfTot+xau4=)
2: ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl (hash: 7ZYonjafo7pIJjHO0hLsNTeAtn3rwyu7PtTwxvgB7uM=)
3: l5D9Tvi9Koza2_mxtzxJQq_s-s0.roa (hash: 0MIxUszJignbxKF108EhpKWB6naIZK2n8zx9GIqX7e4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:a5:e3:5e:af:81:c4:56:8e:d1:e4:ba:ca:27:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Validity
Not Before: Sep 24 05:00:48 2026 GMT
Not After : Sep 25 05:00:48 2026 GMT
Subject: CN=a0039943c15536a125aa0c9fb9ab0ea05cc7ede4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f2:81:7b:5a:d3:53:ba:3b:c8:7a:c5:e1:59:
fa:5d:16:23:9e:b4:f4:de:0c:4d:a5:fe:4f:b2:40:
d9:e0:f9:c5:ed:96:c7:70:c9:0b:ea:2d:0f:8e:2c:
54:1d:6b:e9:8c:5a:ae:a1:7a:bd:a5:93:c1:95:ad:
67:da:8a:bd:b1:81:43:ce:27:d2:c0:a3:bd:71:8f:
07:2f:e9:81:69:91:c4:59:38:57:74:53:7b:12:cb:
db:2e:ba:68:84:6a:0f:7b:99:8d:7d:42:f1:3f:68:
20:db:12:6f:95:78:95:4d:9e:8e:26:9f:16:b8:f7:
53:17:9e:18:16:99:99:5b:2d:9d:08:39:ba:fa:6b:
b1:a9:4a:e3:8c:8b:d7:d3:2f:62:e9:3b:20:fb:d6:
59:ef:1e:0d:ac:6f:2e:28:91:dd:86:2e:bd:88:f5:
1e:72:b3:90:5d:65:5e:46:cd:0f:b6:df:6e:eb:78:
a6:03:4f:c4:77:39:a0:b0:a1:e8:e0:00:c4:39:7f:
f7:fd:83:5f:e9:a6:a5:cf:13:d4:1c:7f:f7:e6:df:
d1:48:4a:9a:2b:c9:03:3b:07:fc:69:e9:fc:22:33:
17:13:b8:9c:c1:2e:55:39:42:7e:8e:fa:86:53:09:
63:13:80:3a:f9:51:3f:4b:8b:c8:93:96:0e:0b:ae:
3a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:03:99:43:C1:55:36:A1:25:AA:0C:9F:B9:AB:0E:A0:5C:C7:ED:E4
X509v3 Authority Key Identifier:
keyid:86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c8:99:32:01:15:4a:c6:2f:df:36:03:12:ee:ed:6c:86:d4:
a1:01:a9:1a:a9:df:48:9a:b3:a9:e1:e2:4e:b0:62:c9:9b:b4:
ac:65:8e:47:e0:41:28:d5:31:6e:b3:b7:68:ad:2e:6d:89:ed:
38:7c:06:dd:21:48:0c:48:12:27:2b:cb:bd:6b:83:c8:11:16:
ac:1b:2d:de:2b:6c:c8:7c:2e:bc:6a:59:92:79:de:7a:13:3d:
65:eb:cb:27:3f:bb:b7:b6:47:e5:38:0c:38:fe:c8:ba:5c:c4:
18:50:9a:24:47:b6:1f:1f:aa:a2:19:a0:de:35:bb:6a:f4:90:
38:a8:72:07:84:f7:5c:4c:62:77:cb:94:eb:00:fc:c0:a9:22:
f5:e0:22:b2:18:69:db:f1:68:9c:85:48:5f:f3:1c:cc:5b:e2:
1e:b3:a3:a2:0a:c1:ed:86:9c:e0:8d:2a:e1:24:1f:71:ae:5d:
ea:5a:7b:3f:f8:ad:d5:87:a4:9e:a9:18:0d:5f:5c:4f:47:5e:
09:48:6d:22:2b:a8:fb:ed:d8:7a:3f:0c:e6:6a:d1:a4:b5:a2:
24:74:f3:09:22:b7:41:93:af:3c:ff:65:eb:ba:6a:5f:6d:74:
3b:3b:24:74:db:b4:af:ff:cb:ce:25:8f:a5:1a:d9:f9:a2:93:
e0:9d:04:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:36:49 2026 by rpki-client