Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
File: htVCMjwOMFHJx7uO0dHorP09uDQ.mft (raw, json)
Hash identifier: RCTToR51VXiFd0ysip9Hadb8J4d6lXGoej4CtHhuzHo=
Subject key identifier: 1A:67:F7:03:97:6B:CE:D7:B9:36:F9:73:3F:5F:26:AD:F7:33:4B:A6
Authority key identifier: 86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
Certificate issuer: /CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Certificate serial: 01A12C206F9BD22A8D05A2F52832773F3531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
Manifest number: 1AA0
Signing time: Sun 11 Oct 2026 18:01:25 +0000
Manifest this update: Sun 11 Oct 2026 18:01:25 +0000
Manifest next update: Mon 12 Oct 2026 18:01:25 +0000
Files and hashes: 1: 1AbwTnYg0WXUPpYwnnaZL_ow3bI.roa (hash: hVk4TpP4RMB+g39qT2ebySuMm79Hn4thM7YjCCsMTe4=)
2: BDYQwgLBbnXzyxnCPY_pCM4L2nc.roa (hash: Dwn097khl7QE/wrVW+MLdk6jalK979i68YL0QuJEQkY=)
3: htVCMjwOMFHJx7uO0dHorP09uDQ.crl (hash: fSrXiTXBogv3uSUM+9OJBTwyaxeet5fR2W5yIA0F3us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:20:6f:9b:d2:2a:8d:05:a2:f5:28:32:77:3f:35:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Validity
Not Before: Oct 11 18:01:25 2026 GMT
Not After : Oct 12 18:01:25 2026 GMT
Subject: CN=1a67f703976bced7b936f9733f5f26adf7334ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e8:1d:ad:37:68:f0:5b:2d:1b:68:3f:d3:15:
3c:24:62:d6:95:17:56:9f:83:b5:3f:d8:f7:b6:2c:
af:f7:51:8f:15:02:03:82:22:40:cf:a6:4e:d5:04:
30:1c:51:4a:6f:a3:7f:2d:a4:f9:94:72:64:5f:ab:
be:4a:01:0b:35:4c:29:54:ef:01:fb:83:5c:4e:b8:
7a:6f:c5:cc:f6:cd:3a:68:7e:c7:8c:7f:6c:4c:c5:
ff:10:96:2f:4d:e4:5c:d4:de:dc:6d:a1:1e:a2:c5:
6c:a8:ef:71:9e:c9:d6:39:9d:e6:cb:38:c4:13:2d:
47:58:c4:b9:02:25:e7:0f:1d:b6:a1:73:c9:32:46:
ff:cd:2b:51:4a:41:b1:26:db:19:43:ad:e2:b8:5f:
b7:a2:bf:9d:33:7d:24:66:a1:29:95:31:bf:a5:56:
d8:e4:d9:d3:bf:fe:f7:54:81:76:3d:8e:39:da:db:
b2:71:c8:2e:95:ba:b5:f5:02:d9:d2:70:b3:d6:35:
37:ed:1e:62:83:0e:f1:44:27:f8:5d:3b:c9:4e:f0:
57:18:19:a7:44:84:6e:f2:fd:bc:1a:d3:b1:2b:70:
03:9a:f2:92:8b:ca:9f:25:ae:ba:54:3c:27:54:30:
95:7d:1f:fc:a0:15:a7:27:43:d6:6e:87:ad:29:7b:
18:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:67:F7:03:97:6B:CE:D7:B9:36:F9:73:3F:5F:26:AD:F7:33:4B:A6
X509v3 Authority Key Identifier:
keyid:86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:93:50:ba:bb:7d:97:2c:2e:ca:2a:a6:c6:ca:3c:d5:2b:36:
d2:0a:ac:c1:4a:e6:8a:8b:f8:c7:75:3c:ee:c6:f5:be:b1:47:
2a:23:fd:22:0d:19:ba:d1:4a:a2:1d:5c:ee:ac:8f:0a:03:e5:
5a:33:63:fd:aa:d3:32:4e:46:42:5e:8d:64:2e:0a:d5:0c:1c:
42:49:58:ec:db:8a:df:51:91:14:1b:ba:a1:e0:b9:3b:34:9c:
00:1a:32:76:97:91:23:9d:98:26:31:7b:d1:ec:d5:0d:63:48:
c3:a3:df:dc:74:16:d2:69:2c:ca:69:c0:86:d5:16:16:83:b5:
27:17:39:d5:d0:98:a9:7b:62:76:7a:88:ba:e8:73:1c:41:d6:
aa:65:e7:21:25:75:24:59:40:bc:03:54:f5:1b:2b:09:20:f1:
43:92:e3:74:84:7a:f2:ae:54:a8:eb:28:42:ae:94:d9:82:ad:
a0:69:9c:0b:bd:31:be:83:f1:8b:86:3f:5b:b1:b9:97:54:60:
de:1e:17:73:65:c0:20:78:58:87:af:2a:5d:7f:b6:e2:33:f8:
1e:4e:f6:41:bd:58:04:2c:90:23:dd:41:41:02:5a:a3:c3:ef:
8d:53:48:cf:1c:77:3c:0d:c2:2f:a4:fc:a7:62:e5:a7:32:34:
53:1e:fb:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:59:45 2026 by rpki-client