Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
File: ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft (raw, json)
Hash identifier: Wk4L4PghcGVOJsywwAeG1nSzkweAPN9gFMOeI7rXJeM=
Subject key identifier: DD:A3:18:E6:3A:DA:CF:24:4C:EC:D0:25:77:57:D9:BB:A0:66:1C:C6
Authority key identifier: 86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
Certificate issuer: /CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Certificate serial: 019FAA50F4057F2205046E5950EEAEB12094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
Manifest number: 1899
Signing time: Tue 28 Jul 2026 20:00:59 +0000
Manifest this update: Tue 28 Jul 2026 20:00:59 +0000
Manifest next update: Wed 29 Jul 2026 20:00:59 +0000
Files and hashes: 1: 10VeRd-dKyjhB82yK0FZfBzYDrU.roa (hash: Q3l/6xX2yJgapH3cvOFve36CvHD208D4sxfTot+xau4=)
2: ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl (hash: bTEz5ycEJZ2W4bgeWS2n/aPO9/OoGHdLQGSv3JGYAgM=)
3: l5D9Tvi9Koza2_mxtzxJQq_s-s0.roa (hash: 0MIxUszJignbxKF108EhpKWB6naIZK2n8zx9GIqX7e4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:f4:05:7f:22:05:04:6e:59:50:ee:ae:b1:20:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Validity
Not Before: Jul 28 20:00:59 2026 GMT
Not After : Jul 29 20:00:59 2026 GMT
Subject: CN=dda318e63adacf244cecd0257757d9bba0661cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d5:b7:a0:d6:5a:f7:5b:31:e3:19:d7:ab:3e:
28:00:15:90:44:d2:49:fc:16:2d:7b:bc:7b:25:ad:
0a:d3:9a:42:d8:3d:a8:16:46:05:e5:38:59:07:28:
3d:d3:61:54:f3:03:b1:22:3b:ec:3e:e0:22:9b:87:
66:9a:cc:3c:0e:6f:0e:9f:e5:f2:94:35:04:72:02:
d4:de:91:5f:3d:e0:b8:a7:0a:31:1a:bd:8b:df:48:
41:20:26:29:a9:73:51:ca:b2:29:8f:d5:fe:e2:4c:
6e:3a:2a:07:86:7f:e3:a1:b3:e9:4e:d3:f7:e0:c5:
94:ea:2d:be:63:11:97:cc:a9:28:f9:3b:24:a9:d4:
24:2a:2a:44:b4:81:69:7c:e7:da:3c:01:a6:1b:77:
a9:90:a7:e0:f6:26:1a:fc:ea:a7:56:e8:53:4b:14:
5b:d4:d7:5e:a9:1b:bc:81:d1:4e:c9:b7:35:79:93:
c2:cf:b4:9e:ee:80:c9:69:4a:3f:48:d4:ca:fd:d3:
1c:d9:d3:7e:7a:c0:b7:7a:6f:f1:0c:62:b6:7e:af:
3c:a4:31:c8:2a:8d:14:cb:63:5f:8b:14:73:da:bd:
3a:46:72:54:63:ae:b6:a2:76:b7:ea:9e:92:43:58:
2c:8d:cb:11:f7:e2:47:1f:66:db:28:69:05:7a:28:
11:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A3:18:E6:3A:DA:CF:24:4C:EC:D0:25:77:57:D9:BB:A0:66:1C:C6
X509v3 Authority Key Identifier:
keyid:86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:5b:a2:84:14:ca:80:47:27:40:0f:3e:17:91:43:ad:65:f6:
92:27:e1:e9:37:b6:d3:64:45:19:77:59:02:a4:1a:34:8a:5b:
d0:ad:19:76:77:81:94:00:a5:00:3c:32:89:6d:3e:50:dc:7f:
6a:6a:a1:f7:a3:89:93:3c:88:a8:33:59:2a:45:d5:4f:8b:e6:
d7:25:42:bf:df:b7:d8:8c:19:7c:6f:4a:e7:c2:12:30:e6:de:
f8:a5:bd:6f:9d:4b:bc:5b:df:d8:bd:55:0e:79:f7:f1:19:4e:
53:4b:69:c7:0f:98:f3:05:de:b0:0b:0e:c4:1d:d3:94:7d:e7:
a3:99:2e:32:58:d5:95:8d:8c:ed:e2:70:19:86:11:9d:ec:81:
ac:a1:29:bf:48:79:c0:15:10:75:39:cb:0f:93:f3:69:6b:15:
8f:9a:2f:5e:de:d4:15:71:a1:93:83:fb:98:eb:0e:49:d0:49:
4a:6a:7b:2a:2f:c1:95:17:e4:f7:fc:65:1c:ee:24:df:ee:ab:
f1:18:21:b2:d7:46:af:bc:07:a0:d8:6c:24:04:0c:13:3e:0c:
36:5e:35:5a:55:07:ee:14:9c:c4:4f:7b:d9:25:29:1d:53:21:
c6:3f:0d:2d:92:b9:d8:16:3a:58:2e:44:18:c5:0b:1e:8a:a6:
55:50:7c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:33:39 2026 by rpki-client