Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft
File: HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft (raw, json)
Hash identifier: 7h2KaB8BY3KejDaU2fvQIAeJIsJmU9UAywSgo5oKUv8=
Subject key identifier: F9:32:A6:B4:F8:0D:43:69:D5:D4:30:DB:79:8C:D4:A4:E7:CE:8F:55
Authority key identifier: 1E:D9:30:84:CE:C4:49:BE:D8:A6:FC:00:8B:C7:DD:99:5E:B3:73:1C
Certificate issuer: /CN=1ed93084cec449bed8a6fc008bc7dd995eb3731c
Certificate serial: 019CACB4C3CD531E2813604D3AA18396C290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtkwhM7ESb7YpvwAi8fdmV6zcxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft
Manifest number: 156B
Signing time: Mon 02 Mar 2026 04:00:53 +0000
Manifest this update: Mon 02 Mar 2026 04:00:53 +0000
Manifest next update: Tue 03 Mar 2026 04:00:53 +0000
Files and hashes: 1: HtkwhM7ESb7YpvwAi8fdmV6zcxw.crl (hash: WkiT3XPDAFILaXvoVW5+45v/g0iiNtVVIRvEQFCo98s=)
2: sliXU2u2F5b-dxDpfrgoAvWB8tc.roa (hash: shJia0FcMyfJBOItG4MpW4lD3TG/16YLivfvP64r49Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HtkwhM7ESb7YpvwAi8fdmV6zcxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:c3:cd:53:1e:28:13:60:4d:3a:a1:83:96:c2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ed93084cec449bed8a6fc008bc7dd995eb3731c
Validity
Not Before: Mar 2 04:00:53 2026 GMT
Not After : Mar 3 04:00:53 2026 GMT
Subject: CN=f932a6b4f80d4369d5d430db798cd4a4e7ce8f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6e:86:84:4c:6f:84:a8:e8:39:34:63:f6:65:
71:7c:8b:7b:59:bd:fb:64:ae:0d:2e:24:94:86:27:
3e:54:50:7f:b7:ab:6b:17:62:cc:3c:66:16:66:e9:
fa:2a:06:0b:02:8d:a4:18:45:ff:56:83:07:2a:1e:
11:b2:d1:d0:68:06:5c:d6:2e:89:c0:07:e7:a0:8b:
28:0f:9b:d6:31:91:19:a3:c7:e1:c5:48:6e:6f:65:
7a:a8:37:35:7f:34:b8:c8:23:c3:ed:b2:a6:30:a9:
b3:1f:8b:d0:d6:49:e7:cd:e0:7f:da:ee:75:43:f2:
e1:69:2d:54:a1:7c:43:48:85:d9:9f:3e:0d:07:e0:
48:15:9a:59:5f:15:cc:d1:a6:a6:da:c9:13:62:85:
e4:4b:0d:1c:8a:46:a1:30:60:ac:df:ba:99:2e:b3:
0b:b4:f8:d4:c8:9a:6e:dc:f6:59:65:5c:16:4b:bc:
3c:e9:f8:6e:b0:58:00:d4:9f:17:c2:4f:ba:34:02:
43:c9:f4:e4:da:b1:3b:7f:95:b7:71:ab:71:d8:71:
fb:c3:d1:6d:31:59:ac:f2:5c:3d:af:f0:76:9a:1e:
ec:5a:0e:ab:b7:36:c9:3f:5e:aa:68:76:61:fa:2b:
83:42:17:fa:42:32:99:b9:57:05:65:c7:f4:fb:7f:
03:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:32:A6:B4:F8:0D:43:69:D5:D4:30:DB:79:8C:D4:A4:E7:CE:8F:55
X509v3 Authority Key Identifier:
keyid:1E:D9:30:84:CE:C4:49:BE:D8:A6:FC:00:8B:C7:DD:99:5E:B3:73:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtkwhM7ESb7YpvwAi8fdmV6zcxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b3:69:98:72:a5:49:85:4b:8a:eb:78:7e:0f:f3:42:36:e4:
89:ef:82:93:ef:45:77:f8:d8:46:ae:67:bd:fa:9e:9c:c8:80:
56:9b:89:b0:bc:0d:36:38:9b:45:c2:fb:71:02:12:6f:d3:4c:
23:3d:df:7f:95:0d:ef:57:19:7c:12:03:dd:95:54:3e:99:f9:
90:b1:ac:1c:0c:3d:fb:a8:b1:09:00:c2:54:5d:38:9c:2c:75:
7c:2b:bf:c7:2a:63:d0:b4:9f:21:00:82:82:63:8d:b4:78:15:
e7:31:2b:71:34:f6:29:cc:49:4c:03:4e:8d:93:11:05:0b:77:
79:85:77:80:d4:c1:e0:4e:1c:1e:58:7b:d2:ed:83:75:09:1f:
5b:a7:ea:96:9e:0a:3e:9f:f9:5b:8c:ec:7c:2a:f6:8a:5c:11:
39:55:ba:b2:f4:e4:05:fa:5b:46:ba:f4:3a:c8:c8:53:d9:9f:
36:88:a7:16:45:b6:8f:4f:aa:cd:5e:68:db:8b:67:d3:eb:a9:
56:b3:e2:88:d3:99:3b:1b:61:80:cc:c1:84:04:8a:76:8b:0e:
93:1b:de:1d:7b:32:6c:8c:7a:40:20:d1:d8:c0:d9:cf:6c:ed:
3c:2f:f9:7d:33:83:9b:ff:bc:59:52:63:87:2e:c3:33:c8:77:
2a:d4:13:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:49:04 2026 by rpki-client