Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
File: ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft (raw, json)
Hash identifier: a7pzHnrZ1JKFRc2A87ec6FWFneX51005nz+pg9mBUnM=
Subject key identifier: 75:C5:5A:EE:28:73:BC:FE:2C:0B:CB:D7:C3:78:B6:3C:0D:E7:55:1C
Authority key identifier: 86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
Certificate issuer: /CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Certificate serial: 019CABA1BADA9DFB1BBD0DDBB5923072F24E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
Manifest number: 170C
Signing time: Sun 01 Mar 2026 23:00:28 +0000
Manifest this update: Sun 01 Mar 2026 23:00:28 +0000
Manifest next update: Mon 02 Mar 2026 23:00:28 +0000
Files and hashes: 1: 10VeRd-dKyjhB82yK0FZfBzYDrU.roa (hash: Q3l/6xX2yJgapH3cvOFve36CvHD208D4sxfTot+xau4=)
2: ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl (hash: OPF7VKj5/724N3InCp9JTqSCdXxCMFfAk7KmAwLZRWI=)
3: l5D9Tvi9Koza2_mxtzxJQq_s-s0.roa (hash: 0MIxUszJignbxKF108EhpKWB6naIZK2n8zx9GIqX7e4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:ba:da:9d:fb:1b:bd:0d:db:b5:92:30:72:f2:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Validity
Not Before: Mar 1 23:00:28 2026 GMT
Not After : Mar 2 23:00:28 2026 GMT
Subject: CN=75c55aee2873bcfe2c0bcbd7c378b63c0de7551c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:45:fa:75:37:f4:15:e4:f2:86:7e:f0:de:6e:
2a:5a:e7:13:21:03:16:72:f9:d1:b8:b6:12:85:f6:
7a:88:3f:83:34:7c:d3:b6:2b:94:c9:e5:fb:90:08:
c5:e3:b8:d0:2b:47:b4:bd:a6:a7:e2:7e:53:2c:7c:
2c:50:f6:b5:6d:3e:68:e3:f3:24:7f:f7:a9:ce:93:
9e:6b:bd:24:df:fe:f1:5b:26:41:78:15:b7:3d:d1:
b8:7d:10:ad:e8:0d:91:e6:94:0c:95:ce:53:96:58:
9f:5a:96:d5:2f:59:c6:88:f7:1c:34:9b:07:f4:ae:
25:4d:3d:1d:fe:7c:18:79:5f:40:b9:6b:2f:48:55:
9c:73:35:c9:7c:24:83:2e:41:e4:a6:75:b9:9e:9b:
b0:ca:75:ab:e7:87:f7:84:08:26:02:94:1b:b1:b8:
5e:cc:81:ee:8e:fd:42:9f:1f:15:fb:5a:4d:e6:87:
a8:1f:88:30:40:b9:03:b1:65:46:3c:39:ca:cd:bd:
d4:88:33:bc:d5:1f:c5:89:03:d0:ed:a2:65:79:3a:
21:83:49:4d:2a:b8:c5:c8:f9:a2:e8:da:a6:3c:54:
fe:e8:b7:97:0e:93:32:08:1a:e6:31:23:e1:43:00:
2e:1e:a8:cf:38:a9:63:d4:d0:26:02:bb:2b:72:ee:
1c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C5:5A:EE:28:73:BC:FE:2C:0B:CB:D7:C3:78:B6:3C:0D:E7:55:1C
X509v3 Authority Key Identifier:
keyid:86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:16:c4:01:08:e4:a6:57:fb:c3:df:52:d0:93:73:b3:80:e3:
70:56:a1:0a:64:21:d6:bd:4f:f2:f3:5a:41:88:81:1a:76:ad:
30:9c:b3:5e:01:7a:83:e5:ce:60:38:22:82:dd:ba:f5:7f:40:
0a:b7:64:5a:c2:d2:12:a0:b7:11:5e:69:85:b6:15:28:10:b4:
dd:c2:36:7f:42:21:4c:ce:90:f7:08:18:aa:c8:9f:61:4a:ff:
45:6b:e8:30:85:e6:0e:4a:ef:6b:b0:83:aa:3c:e2:3c:85:fd:
e1:c6:66:71:6e:cb:85:bf:18:76:ce:64:dd:09:70:ad:d2:0d:
b8:34:56:75:7b:11:d0:b9:4b:95:11:7e:65:77:69:bc:b3:8d:
b8:2b:92:a8:e5:de:ee:2e:c6:22:b1:9f:8e:46:aa:03:94:ef:
32:8c:d0:3c:c6:6a:09:de:d0:e9:32:3d:0c:71:64:97:fd:f2:
2d:4c:3c:cf:1a:51:c5:2e:cb:22:a7:f7:5b:36:1e:bf:d8:25:
ea:2b:53:de:50:48:b3:9f:54:66:ff:7b:6a:48:7f:51:6b:b5:
39:96:87:11:74:35:40:d7:62:99:30:b9:22:33:7c:df:d3:68:
4a:23:8f:b5:0c:7e:11:00:78:0f:4b:17:3e:53:9b:de:ea:49:
27:5c:30:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:18 2026 by rpki-client