Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
File: htVCMjwOMFHJx7uO0dHorP09uDQ.mft (raw, json)
Hash identifier: a7yr1arUbumCVXb4Zo4kQbzVXS1dD3ZyqyNQ/m/o3ko=
Subject key identifier: 03:CE:C4:86:0A:F9:01:19:66:63:C2:66:E6:F1:43:84:B0:D2:1D:7C
Authority key identifier: 86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
Certificate issuer: /CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Certificate serial: 019FABD151D685E99E0CDE363639FCC7557D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
Manifest number: 19D9
Signing time: Wed 29 Jul 2026 03:00:49 +0000
Manifest this update: Wed 29 Jul 2026 03:00:49 +0000
Manifest next update: Thu 30 Jul 2026 03:00:49 +0000
Files and hashes: 1: 1AbwTnYg0WXUPpYwnnaZL_ow3bI.roa (hash: hVk4TpP4RMB+g39qT2ebySuMm79Hn4thM7YjCCsMTe4=)
2: BDYQwgLBbnXzyxnCPY_pCM4L2nc.roa (hash: Dwn097khl7QE/wrVW+MLdk6jalK979i68YL0QuJEQkY=)
3: htVCMjwOMFHJx7uO0dHorP09uDQ.crl (hash: /TJA4v9YSPWGnNZWfcAmK5BNSPFqwUoM++rhMjZaY8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:51:d6:85:e9:9e:0c:de:36:36:39:fc:c7:55:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Validity
Not Before: Jul 29 03:00:49 2026 GMT
Not After : Jul 30 03:00:49 2026 GMT
Subject: CN=03cec4860af901196663c266e6f14384b0d21d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8a:5e:68:6c:65:31:16:0d:28:bf:e4:db:43:
a8:84:18:9f:13:7e:7c:7f:11:49:3e:52:0b:a9:c7:
38:e2:8b:18:51:4a:46:46:17:02:15:11:0f:fa:12:
43:08:92:fd:44:56:f5:61:06:06:e1:6b:2d:ac:9f:
00:2f:f2:c8:71:92:5f:3b:dc:4b:fd:fc:fe:21:9c:
86:14:80:02:74:0e:f7:87:4d:cd:cb:be:ef:0d:d1:
29:d5:54:5c:a7:d2:ed:3d:1a:39:aa:1c:be:5b:9f:
be:48:54:c7:9c:0d:9d:78:4d:94:82:69:27:00:7b:
bd:46:87:65:04:de:b7:55:95:28:ea:c0:6d:61:ca:
64:29:4f:41:b8:3b:58:7a:80:99:62:0d:f8:db:c7:
b6:cd:f8:cb:66:12:70:a2:37:d3:93:a8:1f:52:9a:
5c:48:c7:93:cc:5b:8c:08:7b:41:3e:f2:b5:c4:04:
b3:a6:6b:4a:b6:9a:c8:de:51:2e:db:be:0b:8a:fe:
78:7b:e0:7b:66:77:8c:c6:f4:bc:86:0d:2a:9a:eb:
e3:c8:4b:10:93:d2:ce:90:37:6c:ab:3c:52:38:3c:
ad:a6:e3:32:6e:99:bf:f1:eb:e9:c2:77:b3:41:52:
aa:36:8f:b0:7c:be:9c:2e:96:9e:9c:8a:af:09:2f:
74:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CE:C4:86:0A:F9:01:19:66:63:C2:66:E6:F1:43:84:B0:D2:1D:7C
X509v3 Authority Key Identifier:
keyid:86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:a6:ca:c3:9d:58:60:dc:0a:2a:ff:d7:13:48:92:87:b1:42:
e3:fa:c4:d1:97:58:43:72:1a:c9:9c:95:93:f4:b7:1a:dd:6b:
fb:3d:d8:81:ed:ac:bd:cd:c7:0b:f5:e5:cd:ab:ac:d3:9e:92:
c4:b5:06:e9:a0:6c:a4:08:f1:b0:01:dd:1c:19:39:f8:18:0e:
97:d4:a3:2f:a6:28:5f:45:0a:dd:dd:9e:4d:e7:1f:62:ab:83:
00:60:6c:65:02:96:f2:da:d2:f3:92:fd:bb:40:f7:fe:15:b5:
7f:3a:a4:ee:fd:ed:33:4e:d3:6e:de:15:b8:97:fc:6b:94:ac:
ca:31:cf:b8:df:42:26:82:6f:f8:f8:85:ea:b8:3f:70:97:05:
c2:ad:42:67:81:a2:fd:2a:d0:fb:c6:02:3e:c0:67:7c:f0:64:
f9:1d:41:75:0d:79:dc:79:8d:c7:92:59:21:d4:1c:9f:8a:bf:
2c:f6:3c:32:2a:cf:d9:8c:ff:bb:39:3d:d8:97:c3:8d:75:0f:
64:9c:15:09:2e:6f:a4:98:db:92:d4:ef:a2:21:b5:92:1d:eb:
ba:c4:8b:1a:41:52:1b:e6:c1:3c:8d:d1:9f:0f:e4:69:e8:bf:
5d:38:7c:9b:dc:84:d3:0b:9a:a3:66:eb:5e:03:2f:06:5e:a8:
fe:e7:54:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:43:25 2026 by rpki-client