Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
File: htVCMjwOMFHJx7uO0dHorP09uDQ.mft (raw, json)
Hash identifier: 3upjRZNK23O896SL82ebJ2f0Qp4F3Isy1OUHOzzwVJE=
Subject key identifier: F4:29:A2:11:C6:48:D6:A2:7D:C5:DA:F8:B4:9C:7A:94:F3:D3:C2:CA
Authority key identifier: 86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
Certificate issuer: /CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Certificate serial: 01A12FFD31C09847FA4A8531B5FAA6E83D75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
Manifest number: 1AA2
Signing time: Mon 12 Oct 2026 12:01:24 +0000
Manifest this update: Mon 12 Oct 2026 12:01:24 +0000
Manifest next update: Tue 13 Oct 2026 12:01:24 +0000
Files and hashes: 1: 1AbwTnYg0WXUPpYwnnaZL_ow3bI.roa (hash: hVk4TpP4RMB+g39qT2ebySuMm79Hn4thM7YjCCsMTe4=)
2: BDYQwgLBbnXzyxnCPY_pCM4L2nc.roa (hash: Dwn097khl7QE/wrVW+MLdk6jalK979i68YL0QuJEQkY=)
3: htVCMjwOMFHJx7uO0dHorP09uDQ.crl (hash: D6jv1li8Alue+P3PE2jQls7L36S3+B/9ARY6fC3CZtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 12:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:fd:31:c0:98:47:fa:4a:85:31:b5:fa:a6:e8:3d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Validity
Not Before: Oct 12 12:01:24 2026 GMT
Not After : Oct 13 12:01:24 2026 GMT
Subject: CN=f429a211c648d6a27dc5daf8b49c7a94f3d3c2ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f1:10:43:e8:ce:9a:3e:c7:6e:f8:9f:fe:82:
6f:22:e6:23:cd:d9:db:97:06:89:de:3c:e2:19:48:
bc:b4:75:21:34:28:8c:10:d5:d4:0e:a4:5d:fa:fa:
bc:d3:89:81:b0:f8:0a:d9:82:2b:45:6d:82:20:62:
39:44:14:1f:f1:e1:77:ef:0e:ac:3d:12:b2:19:84:
f4:d8:8f:51:eb:8f:e2:49:29:94:81:56:ef:f4:c3:
2c:bb:99:50:8d:72:ff:5c:c4:0c:77:04:a7:e7:61:
36:0c:86:d5:0b:10:45:e0:64:cb:93:d9:ce:df:8e:
27:0b:25:74:ef:01:d3:cc:1c:8b:f3:a0:75:dd:6f:
dc:f7:60:f0:8d:db:94:88:78:6c:e4:1a:35:8a:ff:
9f:86:23:a3:37:ee:bc:9d:e6:77:a3:75:f0:08:b4:
64:1c:bb:14:1f:21:11:eb:79:90:46:d0:b4:0e:9f:
2a:c8:ec:a8:4b:94:ac:57:f5:67:fb:d8:9b:6f:5a:
4e:07:7c:7b:d6:e1:52:ff:c1:f4:f8:a4:b7:6a:aa:
d9:9e:d5:2e:05:1f:c6:5d:bf:2e:94:af:59:26:e9:
c6:22:99:ea:04:07:05:a8:7b:51:df:46:7c:8c:b0:
91:ca:1a:fe:d6:c5:0e:77:b3:e8:09:9a:66:94:1c:
3f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:29:A2:11:C6:48:D6:A2:7D:C5:DA:F8:B4:9C:7A:94:F3:D3:C2:CA
X509v3 Authority Key Identifier:
keyid:86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:24:68:00:f9:c9:2a:4e:3a:0e:86:93:fb:b5:59:3d:e6:f8:
54:45:5e:61:80:78:60:6d:c7:fe:2d:82:fc:c2:e5:25:b8:c2:
76:dd:cf:e2:64:84:b1:59:4c:43:93:91:9f:2f:43:6b:b6:b2:
aa:f1:c0:bd:3a:fd:2a:ff:4e:45:37:b4:b8:26:fc:d1:92:b4:
c3:e2:d1:05:46:e0:22:82:55:5a:a1:d0:e5:fb:5c:54:3b:c4:
33:95:d8:9e:f3:86:32:7d:be:21:6a:3f:21:d9:ab:b1:67:b0:
72:68:60:93:a2:60:96:fc:07:c3:a9:1a:b6:4d:8d:40:fb:f0:
a4:9e:ae:68:e5:d5:3f:65:c7:2c:a9:99:8d:76:0e:bd:46:64:
d1:4b:a4:b6:69:5b:48:a5:40:06:65:60:ee:3c:66:b4:df:92:
03:ae:5f:ba:c0:3b:97:35:6d:7a:64:65:47:35:64:fb:56:6b:
b2:19:8f:91:40:7d:57:d5:3f:01:7b:cf:49:5e:98:e2:fb:92:
90:51:7e:e3:42:36:a6:1a:a6:d0:20:a9:57:da:e3:f5:b2:0b:
d6:f7:35:0a:72:e3:e1:4d:d7:23:ac:a6:2e:d0:cc:5d:4d:52:
f2:1d:e0:5e:5c:af:1e:49:3f:fe:e4:52:78:0c:92:46:6e:74:
82:74:d9:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEv/THAmEf6SoUxtfqm6D11MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDU0MjMyM2MwZTMwNTFjOWM3YmI4ZWQxZDFlOGFjZmQz
ZGI4MzQwHhcNMjYxMDEyMTIwMTI0WhcNMjYxMDEzMTIwMTI0WjAzMTEwLwYDVQQD
EyhmNDI5YTIxMWM2NDhkNmEyN2RjNWRhZjhiNDljN2E5NGYzZDNjMmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fEQQ+jOmj7Hbvif/oJvIuYjzdnb
lwaJ3jziGUi8tHUhNCiMENXUDqRd+vq804mBsPgK2YIrRW2CIGI5RBQf8eF37w6s
PRKyGYT02I9R64/iSSmUgVbv9MMsu5lQjXL/XMQMdwSn52E2DIbVCxBF4GTLk9nO
344nCyV07wHTzByL86B13W/c92DwjduUiHhs5Bo1iv+fhiOjN+68neZ3o3XwCLRk
HLsUHyER63mQRtC0Dp8qyOyoS5SsV/Vn+9ibb1pOB3x71uFS/8H0+KS3aqrZntUu
BR/GXb8ulK9ZJunGIpnqBAcFqHtR30Z8jLCRyhr+1sUOd7PoCZpmlBw/LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQpohHGSNaifcXa+LScepTz08LKMB8GA1UdIwQY
MBaAFIbVQjI8DjBRyce7jtHR6Kz9Pbg0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRWQ01qd09NRkhKeDd1TzBkSG9yUDA5dURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hN2M3YzEtZmM0Mi00M2EzLTlhZDgt
NzBkYWQ1MWU3M2ZiLzEvaHRWQ01qd09NRkhKeDd1TzBkSG9yUDA5dURRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9hN2M3YzEtZmM0Mi00M2EzLTlhZDgtNzBkYWQ1MWU3M2Zi
LzEvaHRWQ01qd09NRkhKeDd1TzBkSG9yUDA5dURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcCRoAPnJ
Kk46DoaT+7VZPeb4VEVeYYB4YG3H/i2C/MLlJbjCdt3P4mSEsVlMQ5ORny9Da7ay
qvHAvTr9Kv9ORTe0uCb80ZK0w+LRBUbgIoJVWqHQ5ftcVDvEM5XYnvOGMn2+IWo/
IdmrsWewcmhgk6JglvwHw6katk2NQPvwpJ6uaOXVP2XHLKmZjXYOvUZk0Uuktmlb
SKVABmVg7jxmtN+SA65fusA7lzVtemRlRzVk+1ZrshmPkUB9V9U/AXvPSV6Y4vuS
kFF+40I2phqm0CCpV9rj9bIL1vc1CnLj4U3XI6ymLtDMXU1S8h3gXlyvHkk//uRS
eAySRm50gnTZwg==
-----END CERTIFICATE-----
Generated at Mon Oct 12 19:49:48 2026 by rpki-client