Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
File: htVCMjwOMFHJx7uO0dHorP09uDQ.mft (raw, json)
Hash identifier: pAz0BjrH5558QhSB6qUaXxhQilQ7yCZ/61KlqnonjVA=
Subject key identifier: 4D:85:F1:7C:5C:0F:55:5D:EE:19:A9:B1:3D:2B:A6:95:B2:76:BF:01
Authority key identifier: 86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
Certificate issuer: /CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Certificate serial: 019EC224613F7393132E188C00682F354336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
Manifest number: 1960
Signing time: Sat 13 Jun 2026 18:00:24 +0000
Manifest this update: Sat 13 Jun 2026 18:00:24 +0000
Manifest next update: Sun 14 Jun 2026 18:00:24 +0000
Files and hashes: 1: 1AbwTnYg0WXUPpYwnnaZL_ow3bI.roa (hash: hVk4TpP4RMB+g39qT2ebySuMm79Hn4thM7YjCCsMTe4=)
2: BDYQwgLBbnXzyxnCPY_pCM4L2nc.roa (hash: Dwn097khl7QE/wrVW+MLdk6jalK979i68YL0QuJEQkY=)
3: htVCMjwOMFHJx7uO0dHorP09uDQ.crl (hash: gIGhNMEbBG3dku1oi+QQkHECd6O/0il8I3eg6555K8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:61:3f:73:93:13:2e:18:8c:00:68:2f:35:43:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Validity
Not Before: Jun 13 18:00:24 2026 GMT
Not After : Jun 14 18:00:24 2026 GMT
Subject: CN=4d85f17c5c0f555dee19a9b13d2ba695b276bf01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:45:17:bd:13:17:7f:5d:b5:bf:f2:55:ca:a1:
38:76:e5:0d:bc:d1:25:da:cc:ec:15:d6:aa:2e:89:
0e:b4:78:ca:3d:66:4c:78:2b:9f:71:0b:91:d1:18:
3b:63:0d:94:fb:7d:fe:b0:e0:dc:30:7c:13:40:d9:
7c:ec:90:7f:92:b1:cb:67:37:62:7f:8c:63:96:c5:
05:ff:0d:fd:43:98:1f:53:3c:be:a9:f4:8a:4d:c0:
c9:fb:f3:9c:aa:a6:ef:55:46:fd:49:ec:96:03:48:
06:d6:e3:01:e9:b3:ec:b9:96:af:a0:0e:c6:7a:1a:
0b:cc:3f:ad:67:ab:cf:47:c1:9b:3f:4e:10:b2:1c:
20:a4:69:3e:44:f3:1a:8c:a3:7d:3e:fb:a9:fd:b0:
05:94:7e:e8:e4:b5:d1:b0:d6:1f:08:4d:01:5d:5d:
21:7c:b4:ab:9e:9f:1d:64:4f:5b:7a:05:b4:b4:3f:
9e:1b:79:3d:74:f9:54:7a:7e:05:21:60:ca:ad:aa:
20:c6:38:d1:ec:de:78:25:44:63:0e:4d:e1:dd:09:
6b:d3:ab:39:30:f3:4f:52:12:52:48:1b:af:8e:3d:
aa:21:d3:0b:48:37:15:c1:f6:14:c7:5e:c3:f9:f6:
59:77:c7:3b:14:89:b1:e6:29:ea:94:1b:c1:d3:72:
24:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:85:F1:7C:5C:0F:55:5D:EE:19:A9:B1:3D:2B:A6:95:B2:76:BF:01
X509v3 Authority Key Identifier:
keyid:86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:7e:0c:e3:8d:6d:ec:30:ae:8b:7d:b9:07:c9:0e:89:25:cc:
d6:2c:f5:92:94:72:d5:57:d6:45:94:36:a8:4d:e0:91:ee:37:
56:0f:00:15:37:67:fd:26:c6:8c:bf:e9:4d:9f:fb:61:2a:ab:
9d:24:8e:2f:5d:8b:88:f7:29:54:c3:6f:c2:2f:bb:af:5d:41:
c1:01:a9:13:75:5c:72:f9:9f:fe:1f:8a:a7:63:4b:d9:a3:ee:
1b:da:a9:65:14:87:d5:e8:95:94:ec:dd:3d:6e:75:5a:1d:d8:
f7:9d:20:03:15:78:95:83:85:01:58:15:2c:a4:25:a2:81:f3:
42:af:bc:9b:bb:06:71:d1:7d:46:a5:46:fb:64:00:00:cf:f2:
06:f2:62:92:49:14:ed:4c:6c:b0:82:24:c2:4a:f6:70:50:2d:
53:35:c3:d1:1d:97:67:9e:8c:b7:07:60:ce:be:1c:2c:4b:fb:
9b:5b:ab:c1:29:96:34:c0:2e:01:5c:18:f9:5d:d7:74:85:35:
f0:f9:88:d6:aa:7f:ce:37:f8:29:9d:40:65:55:e6:74:33:e0:
1e:39:fa:4c:06:24:a2:8a:a8:0f:9f:80:a2:2b:31:9a:15:9e:
3c:4b:2e:6d:3f:59:d9:bb:b6:d4:95:f5:5a:f5:03:8f:b7:30:
97:ac:f4:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CJGE/c5MTLhiMAGgvNUM2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDU0MjMyM2MwZTMwNTFjOWM3YmI4ZWQxZDFlOGFjZmQz
ZGI4MzQwHhcNMjYwNjEzMTgwMDI0WhcNMjYwNjE0MTgwMDI0WjAzMTEwLwYDVQQD
Eyg0ZDg1ZjE3YzVjMGY1NTVkZWUxOWE5YjEzZDJiYTY5NWIyNzZiZjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kUXvRMXf121v/JVyqE4duUNvNEl
2szsFdaqLokOtHjKPWZMeCufcQuR0Rg7Yw2U+33+sODcMHwTQNl87JB/krHLZzdi
f4xjlsUF/w39Q5gfUzy+qfSKTcDJ+/OcqqbvVUb9SeyWA0gG1uMB6bPsuZavoA7G
ehoLzD+tZ6vPR8GbP04QshwgpGk+RPMajKN9Pvup/bAFlH7o5LXRsNYfCE0BXV0h
fLSrnp8dZE9begW0tD+eG3k9dPlUen4FIWDKraogxjjR7N54JURjDk3h3Qlr06s5
MPNPUhJSSBuvjj2qIdMLSDcVwfYUx17D+fZZd8c7FImx5inqlBvB03IksQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2F8XxcD1Vd7hmpsT0rppWydr8BMB8GA1UdIwQY
MBaAFIbVQjI8DjBRyce7jtHR6Kz9Pbg0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRWQ01qd09NRkhKeDd1TzBkSG9yUDA5dURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hN2M3YzEtZmM0Mi00M2EzLTlhZDgt
NzBkYWQ1MWU3M2ZiLzEvaHRWQ01qd09NRkhKeDd1TzBkSG9yUDA5dURRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9hN2M3YzEtZmM0Mi00M2EzLTlhZDgtNzBkYWQ1MWU3M2Zi
LzEvaHRWQ01qd09NRkhKeDd1TzBkSG9yUDA5dURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASH4M441t
7DCui325B8kOiSXM1iz1kpRy1VfWRZQ2qE3gke43Vg8AFTdn/SbGjL/pTZ/7YSqr
nSSOL12LiPcpVMNvwi+7r11BwQGpE3Vccvmf/h+Kp2NL2aPuG9qpZRSH1eiVlOzd
PW51Wh3Y950gAxV4lYOFAVgVLKQlooHzQq+8m7sGcdF9RqVG+2QAAM/yBvJikkkU
7UxssIIkwkr2cFAtUzXD0R2XZ56Mtwdgzr4cLEv7m1urwSmWNMAuAVwY+V3XdIU1
8PmI1qp/zjf4KZ1AZVXmdDPgHjn6TAYkooqoD5+AoisxmhWePEsubT9Z2bu21JX1
WvUDj7cwl6z0eg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:02:02 2026 by rpki-client