Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
File: htqvTmjTIiSCMFRM2NspVo5s8AM.mft (raw, json)
Hash identifier: 2lzcT2K0knH9icJy0n4Fhh7XE/FCuQ87gwiKl42Nvjk=
Subject key identifier: 56:5B:59:14:86:AA:57:AD:3F:58:1A:16:5E:C8:24:02:4A:B9:65:8E
Authority key identifier: 86:DA:AF:4E:68:D3:22:24:82:30:54:4C:D8:DB:29:56:8E:6C:F0:03
Certificate issuer: /CN=86daaf4e68d322248230544cd8db29568e6cf003
Certificate serial: 019CAB34A533E0A741A2F8882665EE95EC9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htqvTmjTIiSCMFRM2NspVo5s8AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 21:01:19 +0000
Manifest this update: Sun 01 Mar 2026 21:01:19 +0000
Manifest next update: Mon 02 Mar 2026 21:01:19 +0000
Files and hashes: 1: LyQJZOiJBFj_CkncEm0AMCx8VkA.roa (hash: 0nBIH73/4Jum7OxlljaMAAXDP5B7wTyLZnA+y+yJXE4=)
2: htqvTmjTIiSCMFRM2NspVo5s8AM.crl (hash: YQ31fj+o8QKCKmFI0E9QBXsbrqEhp2kWzrBRDBb8pvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
rsync://rpki.ripe.net/repository/DEFAULT/htqvTmjTIiSCMFRM2NspVo5s8AM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:a5:33:e0:a7:41:a2:f8:88:26:65:ee:95:ec:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86daaf4e68d322248230544cd8db29568e6cf003
Validity
Not Before: Mar 1 21:01:19 2026 GMT
Not After : Mar 2 21:01:19 2026 GMT
Subject: CN=565b591486aa57ad3f581a165ec824024ab9658e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c7:9b:74:fd:ff:c5:a9:a0:7a:24:ec:20:43:
b7:7b:59:ff:29:ef:db:47:53:07:3c:f9:40:05:bc:
0b:01:7b:67:42:ae:8e:02:8e:8f:bf:4f:6e:0f:cb:
a7:51:d7:d6:12:df:31:37:57:0c:ef:85:47:a2:33:
d4:5a:86:45:19:dc:50:2c:d5:d9:06:5e:d0:11:52:
30:09:60:72:28:88:b1:ff:df:c5:d6:d8:5b:69:34:
2f:08:73:bb:ce:2a:93:65:db:cc:2c:b6:77:56:81:
ba:15:48:f9:c1:af:e5:02:61:a4:9d:af:83:c0:01:
21:6c:26:9f:c6:dd:b3:20:41:99:bb:d3:a6:26:13:
a5:f9:12:34:58:78:72:64:74:d2:a2:d1:ee:8c:73:
db:15:2e:37:94:44:a6:f5:32:e4:cd:fb:38:3a:31:
cf:2e:52:8e:b6:00:40:57:67:54:c0:2e:bf:ee:fc:
e7:50:36:3a:4c:74:92:7f:60:d7:7e:32:1a:30:0b:
9d:e1:b2:21:ce:c1:dd:5b:d3:61:3a:3d:37:77:45:
5f:70:75:41:4c:a2:2c:c0:7f:2f:fa:97:f6:79:99:
b1:17:9b:0d:ca:a6:cf:33:44:c7:4c:71:f5:74:dc:
32:50:38:61:2b:01:26:d1:4c:33:32:75:d6:30:c8:
70:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5B:59:14:86:AA:57:AD:3F:58:1A:16:5E:C8:24:02:4A:B9:65:8E
X509v3 Authority Key Identifier:
keyid:86:DA:AF:4E:68:D3:22:24:82:30:54:4C:D8:DB:29:56:8E:6C:F0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htqvTmjTIiSCMFRM2NspVo5s8AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:1e:8b:59:97:23:02:48:34:54:0b:3b:4f:e1:96:91:fe:aa:
6b:03:b2:56:30:d8:50:b6:41:f3:4a:ab:0a:27:32:73:56:41:
48:88:b0:d7:31:47:17:84:ef:30:a4:de:c0:21:53:54:28:ae:
af:eb:66:5d:21:f5:5d:6a:6d:6f:fd:f7:62:b9:f1:d7:0c:4e:
06:ea:ec:2d:ad:1c:f4:04:37:24:36:fb:59:b7:78:8a:29:55:
df:11:b3:20:c0:e9:ea:69:00:c5:5d:8f:ce:88:f9:db:ee:f1:
2a:1f:31:d3:b0:c2:64:59:44:d6:67:2b:81:92:1f:9b:f2:8f:
02:72:d6:f7:4b:d1:1c:8f:99:66:46:ee:84:f7:a4:9a:fe:bf:
6f:ac:05:23:6b:fb:75:aa:b5:97:5e:02:e2:84:59:81:cc:3a:
ab:6d:89:51:a7:b9:d3:93:f0:71:7d:00:25:5a:75:58:f7:f8:
46:1d:4a:f7:59:65:af:6b:cc:b5:bd:fd:14:0b:32:1f:63:62:
dc:5c:c8:27:f2:c5:f4:db:f8:15:53:d1:a5:50:55:d3:b5:53:
78:89:7e:3b:53:e4:65:11:27:49:f4:d7:8a:d1:8e:04:2d:a8:
57:3f:0c:cc:ba:52:69:55:60:06:9f:5a:f0:b1:cf:86:c1:00:
20:dd:00:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:38 2026 by rpki-client