Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
File: htVCMjwOMFHJx7uO0dHorP09uDQ.mft (raw, json)
Hash identifier: 7R2R8HOF9ll6xmGV6O3q+7JkE7rr26bup/fOnb0yUow=
Subject key identifier: 4D:E6:E1:0D:B2:69:35:24:3E:A1:E8:1D:85:E1:F3:97:10:36:EB:3C
Authority key identifier: 86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
Certificate issuer: /CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Certificate serial: 019D99D0AE3F1379A6EE6E1CDECC8DB50980
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 05:01:23 +0000
Manifest this update: Fri 17 Apr 2026 05:01:23 +0000
Manifest next update: Sat 18 Apr 2026 05:01:23 +0000
Files and hashes: 1: 1AbwTnYg0WXUPpYwnnaZL_ow3bI.roa (hash: hVk4TpP4RMB+g39qT2ebySuMm79Hn4thM7YjCCsMTe4=)
2: Wn4stG9r3sPGrKZA-bHeBQoqYZE.roa (hash: q+6bbzrK5RoX6mP8fjjAray92+/gWY61XEVj188QjD8=)
3: htVCMjwOMFHJx7uO0dHorP09uDQ.crl (hash: ror8EGqNPdIphBCXrVtvIO4wcI/L4HRyjNqLaBKd9AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:ae:3f:13:79:a6:ee:6e:1c:de:cc:8d:b5:09:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Validity
Not Before: Apr 17 05:01:23 2026 GMT
Not After : Apr 18 05:01:23 2026 GMT
Subject: CN=4de6e10db26935243ea1e81d85e1f3971036eb3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c0:97:66:67:19:d2:0a:90:8b:d9:b8:3a:6d:
eb:5b:63:4b:b1:16:6f:38:44:9a:62:c4:bf:0b:4c:
0e:f2:9c:e0:6b:70:51:fb:a4:ef:6d:da:7a:b5:1c:
55:89:52:a9:f7:49:80:6d:bc:2e:00:30:a4:2b:f1:
66:b2:37:26:d5:90:1b:86:83:be:f4:a8:0d:23:db:
20:69:42:a6:7b:cf:08:97:f5:73:83:ae:78:4e:72:
7c:0b:b1:34:7c:3c:ab:a5:40:5c:f6:d9:4c:39:8d:
ec:20:12:e2:33:7c:ad:0a:00:a0:c2:9e:bd:61:25:
1a:92:8a:20:7d:b8:24:ee:03:a8:a6:c1:25:3f:59:
e2:fb:3e:da:b2:4b:a5:59:51:28:9b:14:44:62:f5:
df:82:0a:98:08:6b:7b:2d:78:3d:50:fc:e7:f0:26:
6d:09:b5:c9:4e:2b:f8:68:20:63:71:4e:21:cb:a0:
ac:aa:8c:0d:3e:62:80:8b:37:68:6a:8c:a0:2c:5b:
a9:6b:c0:6b:21:2a:4b:a6:e1:b5:97:8a:c7:96:d9:
9e:08:d1:4d:bf:96:e4:62:88:80:ec:58:0e:f1:97:
fb:26:c6:ba:5e:58:35:ac:bf:6d:56:3e:59:6b:75:
bb:5e:22:a3:85:4f:53:44:e6:02:ec:cd:1f:61:83:
58:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E6:E1:0D:B2:69:35:24:3E:A1:E8:1D:85:E1:F3:97:10:36:EB:3C
X509v3 Authority Key Identifier:
keyid:86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e5:04:25:48:ac:49:32:b0:80:d5:6b:56:d4:6d:af:c5:41:
3c:89:e8:d2:69:99:63:d2:29:33:1d:4f:07:14:08:e8:41:71:
b6:ad:b8:74:c5:f7:9f:93:bd:27:a0:dc:08:39:96:7a:29:a0:
9a:8d:7b:bc:04:05:2f:f9:fa:90:9d:8f:b5:08:10:5b:93:b9:
19:06:74:bd:35:02:c2:80:74:3f:33:3f:c8:18:5b:f9:77:5a:
b0:aa:dc:e5:06:2b:ad:8d:7b:e2:7a:a0:d8:3e:35:bd:f9:08:
34:27:62:61:21:90:a8:eb:20:45:11:cf:62:47:35:d6:e0:df:
b1:1a:f6:3d:4d:48:1b:d5:f1:3e:5f:03:41:14:6c:ff:1a:2e:
3f:c6:60:7d:b8:21:d4:29:da:24:49:f0:d1:20:7a:8c:e3:96:
0e:9c:d9:a0:8f:fd:b1:d8:45:28:47:73:af:75:1c:99:22:69:
e7:06:a9:02:66:d2:76:e0:63:b3:51:6e:4c:77:85:44:3f:64:
7e:8c:cb:4d:c9:c0:6f:11:75:ab:cb:2a:a1:1e:40:17:d9:0d:
50:d2:02:05:4c:7f:bc:f4:a7:aa:0f:20:ef:55:e1:ef:b6:ec:
27:e6:3f:bc:30:b5:ac:ca:6f:8b:f0:16:76:a5:2b:0c:96:15:
ad:a6:aa:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0K4/E3mm7m4c3syNtQmAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDU0MjMyM2MwZTMwNTFjOWM3YmI4ZWQxZDFlOGFjZmQz
ZGI4MzQwHhcNMjYwNDE3MDUwMTIzWhcNMjYwNDE4MDUwMTIzWjAzMTEwLwYDVQQD
Eyg0ZGU2ZTEwZGIyNjkzNTI0M2VhMWU4MWQ4NWUxZjM5NzEwMzZlYjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncCXZmcZ0gqQi9m4Om3rW2NLsRZv
OESaYsS/C0wO8pzga3BR+6Tvbdp6tRxViVKp90mAbbwuADCkK/Fmsjcm1ZAbhoO+
9KgNI9sgaUKme88Il/Vzg654TnJ8C7E0fDyrpUBc9tlMOY3sIBLiM3ytCgCgwp69
YSUakoogfbgk7gOopsElP1ni+z7askulWVEomxREYvXfggqYCGt7LXg9UPzn8CZt
CbXJTiv4aCBjcU4hy6CsqowNPmKAizdoaoygLFupa8BrISpLpuG1l4rHltmeCNFN
v5bkYoiA7FgO8Zf7Jsa6Xlg1rL9tVj5Za3W7XiKjhU9TROYC7M0fYYNYAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3m4Q2yaTUkPqHoHYXh85cQNus8MB8GA1UdIwQY
MBaAFIbVQjI8DjBRyce7jtHR6Kz9Pbg0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRWQ01qd09NRkhKeDd1TzBkSG9yUDA5dURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hN2M3YzEtZmM0Mi00M2EzLTlhZDgt
NzBkYWQ1MWU3M2ZiLzEvaHRWQ01qd09NRkhKeDd1TzBkSG9yUDA5dURRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9hN2M3YzEtZmM0Mi00M2EzLTlhZDgtNzBkYWQ1MWU3M2Zi
LzEvaHRWQ01qd09NRkhKeDd1TzBkSG9yUDA5dURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG+UEJUis
STKwgNVrVtRtr8VBPIno0mmZY9IpMx1PBxQI6EFxtq24dMX3n5O9J6DcCDmWeimg
mo17vAQFL/n6kJ2PtQgQW5O5GQZ0vTUCwoB0PzM/yBhb+XdasKrc5QYrrY174nqg
2D41vfkINCdiYSGQqOsgRRHPYkc11uDfsRr2PU1IG9XxPl8DQRRs/xouP8Zgfbgh
1CnaJEnw0SB6jOOWDpzZoI/9sdhFKEdzr3UcmSJp5wapAmbSduBjs1FuTHeFRD9k
fozLTcnAbxF1q8sqoR5AF9kNUNICBUx/vPSnqg8g71Xh77bsJ+Y/vDC1rMpvi/AW
dqUrDJYVraaqYA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:03:22 2026 by rpki-client