Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
File: htqvTmjTIiSCMFRM2NspVo5s8AM.mft (raw, json)
Hash identifier: sqlZvqExAdqpFbUnFXe0UNZTCoWIF639uAZFYeOxz1E=
Subject key identifier: 18:59:99:B1:D4:EA:2B:B4:F9:C4:ED:BC:67:16:B3:2D:46:28:5C:83
Authority key identifier: 86:DA:AF:4E:68:D3:22:24:82:30:54:4C:D8:DB:29:56:8E:6C:F0:03
Certificate issuer: /CN=86daaf4e68d322248230544cd8db29568e6cf003
Certificate serial: 019D98BDDA8EBDC74E63FAB02ABABA7ED155
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htqvTmjTIiSCMFRM2NspVo5s8AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 00:01:12 +0000
Manifest this update: Fri 17 Apr 2026 00:01:12 +0000
Manifest next update: Sat 18 Apr 2026 00:01:12 +0000
Files and hashes: 1: LyQJZOiJBFj_CkncEm0AMCx8VkA.roa (hash: 0nBIH73/4Jum7OxlljaMAAXDP5B7wTyLZnA+y+yJXE4=)
2: htqvTmjTIiSCMFRM2NspVo5s8AM.crl (hash: 2iLQsZO9pSe9L00z3vVLjdqOm3ydTVDmb4iaemlYvvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
rsync://rpki.ripe.net/repository/DEFAULT/htqvTmjTIiSCMFRM2NspVo5s8AM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:da:8e:bd:c7:4e:63:fa:b0:2a:ba:ba:7e:d1:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86daaf4e68d322248230544cd8db29568e6cf003
Validity
Not Before: Apr 17 00:01:12 2026 GMT
Not After : Apr 18 00:01:12 2026 GMT
Subject: CN=185999b1d4ea2bb4f9c4edbc6716b32d46285c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e4:9e:c5:97:46:f2:da:9c:b5:10:9c:64:a5:
48:3f:97:2e:83:bc:3a:a8:2a:1a:ed:2b:ae:b3:82:
71:a9:19:96:28:e2:79:0c:f4:e2:bd:df:77:8f:42:
da:33:cb:95:fd:6f:94:81:e2:a3:c1:5b:70:12:32:
fd:38:ad:97:96:1e:4b:c8:bc:5b:67:4f:eb:99:6f:
09:95:59:5b:51:9e:00:c3:a8:17:eb:6f:93:ae:4c:
3a:49:b0:dc:17:cf:53:6e:1e:71:46:6c:d3:99:57:
91:39:59:21:89:6d:26:9e:f3:35:ec:20:ba:a8:25:
75:00:7d:3c:a1:0b:9e:b3:0c:ca:58:bf:db:19:93:
87:c2:da:e5:c1:70:c4:30:ec:f2:5b:d2:5c:3f:e6:
9b:a2:fd:e7:1f:11:c6:be:31:fc:4f:37:cf:a4:dd:
2e:ce:92:5e:21:cb:d6:33:63:aa:f9:3d:1e:d8:9b:
5b:24:8f:d9:44:90:2c:83:76:e1:c2:42:50:31:9c:
ea:ed:68:14:fd:38:7a:39:eb:4b:d1:53:bf:fc:e6:
26:05:f6:56:42:a1:c6:98:62:5d:e7:73:72:44:4f:
51:ba:f8:c0:6d:76:7b:29:41:ec:8b:03:c0:bc:73:
c8:65:4c:49:5e:e0:5c:99:dd:40:4f:ae:2e:ce:82:
5c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:59:99:B1:D4:EA:2B:B4:F9:C4:ED:BC:67:16:B3:2D:46:28:5C:83
X509v3 Authority Key Identifier:
keyid:86:DA:AF:4E:68:D3:22:24:82:30:54:4C:D8:DB:29:56:8E:6C:F0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htqvTmjTIiSCMFRM2NspVo5s8AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:8f:9c:6a:34:57:a8:26:03:a2:67:2e:90:5a:2b:d0:17:ca:
67:82:62:02:fb:ed:a1:1c:cb:c9:4f:2e:5f:e0:71:e2:29:33:
2e:26:4d:ba:2d:20:61:04:ef:bd:5e:ab:96:51:0a:0e:22:e3:
01:cf:f5:d5:ed:18:be:89:e1:25:2a:24:41:9e:7b:c6:16:04:
d9:c8:f6:f6:3a:ed:e0:8d:5c:9f:71:93:5c:ae:c2:08:6f:13:
be:ad:3a:13:79:10:35:a7:93:ab:f1:67:17:33:23:cc:b4:d3:
b0:d6:a3:fe:10:73:e4:b7:a9:39:62:b4:ea:ba:f5:b0:ed:22:
9a:9e:2f:0a:83:f0:35:a0:ba:94:c2:27:0d:be:39:9a:90:73:
ee:25:95:b1:02:28:b9:97:ac:4a:8a:4f:e5:7c:79:95:14:4c:
c5:f1:4c:f4:00:ee:6b:f3:a3:c5:b1:ba:6a:5d:59:98:96:a6:
d4:90:5d:11:12:fc:e4:13:91:00:51:0f:b2:70:98:70:58:b2:
06:69:d7:37:aa:6a:a5:ea:e0:95:68:ba:9a:05:ad:38:a9:42:
d8:06:0b:3b:21:d5:af:ab:c6:d3:c1:bd:20:70:bc:7d:72:cf:
8c:ed:09:52:0a:9f:43:c1:d3:56:ea:e4:e3:32:1a:f2:21:0f:
f8:f4:04:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:54 2026 by rpki-client