Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
File: htVCMjwOMFHJx7uO0dHorP09uDQ.mft (raw, json)
Hash identifier: nD4B3N+VqGq6yREhxH07mpnTr05RKLpIwJgYjDAT/kk=
Subject key identifier: 6F:EB:12:55:97:F7:01:7F:1E:B7:89:32:28:C0:F5:7F:5B:8D:47:5A
Authority key identifier: 86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
Certificate issuer: /CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Certificate serial: 019CAC4730A346F5EE0961205A02E296169D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
Manifest number: 184B
Signing time: Mon 02 Mar 2026 02:01:12 +0000
Manifest this update: Mon 02 Mar 2026 02:01:12 +0000
Manifest next update: Tue 03 Mar 2026 02:01:12 +0000
Files and hashes: 1: 1AbwTnYg0WXUPpYwnnaZL_ow3bI.roa (hash: hVk4TpP4RMB+g39qT2ebySuMm79Hn4thM7YjCCsMTe4=)
2: Wn4stG9r3sPGrKZA-bHeBQoqYZE.roa (hash: q+6bbzrK5RoX6mP8fjjAray92+/gWY61XEVj188QjD8=)
3: htVCMjwOMFHJx7uO0dHorP09uDQ.crl (hash: F1Ar0xdW5ytCqkhXKVyeZ84YZl9yeoprX9G+a9hSuaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:30:a3:46:f5:ee:09:61:20:5a:02:e2:96:16:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Validity
Not Before: Mar 2 02:01:12 2026 GMT
Not After : Mar 3 02:01:12 2026 GMT
Subject: CN=6feb125597f7017f1eb7893228c0f57f5b8d475a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:01:28:1d:b9:8e:0d:9a:57:fa:9f:6d:b8:94:
64:31:eb:54:e4:e8:d2:18:c9:94:8e:d1:c8:55:d8:
2a:32:23:49:68:55:60:f4:9f:b8:d9:18:63:0a:44:
4d:d4:43:2d:72:0a:a5:9e:51:b4:99:b6:b9:8c:3b:
9e:c8:f2:ff:4d:75:8b:54:a9:c5:82:3e:f8:a8:e9:
7f:ca:0d:f6:75:c3:15:7d:01:6e:1e:8b:48:5c:83:
3c:40:ac:e2:69:20:b9:b9:55:41:1d:e9:66:54:03:
0e:8d:44:99:b1:4c:30:c7:02:3a:16:99:f1:f3:13:
fc:7a:57:63:72:a4:9e:be:65:f6:ee:bc:83:4e:68:
68:47:3f:c2:ef:8e:74:d5:d2:db:0f:b2:f2:51:3b:
62:28:cc:85:c2:06:ce:06:10:c4:d5:27:6a:b6:8f:
d6:21:5e:c4:4b:d5:18:41:46:7b:1a:1e:7f:ca:ce:
c1:ba:5f:32:e2:f6:5e:5d:de:df:41:ae:a2:0d:3b:
de:fe:ce:05:70:52:aa:ee:66:8a:2c:c4:b5:f7:c5:
7c:bb:74:7f:90:b5:01:39:1e:fe:61:bc:9f:92:34:
20:da:3b:80:57:aa:d9:75:cb:58:7a:be:bc:7b:49:
e9:c7:aa:ef:91:d7:83:32:13:6c:fd:be:2f:18:b3:
89:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:EB:12:55:97:F7:01:7F:1E:B7:89:32:28:C0:F5:7F:5B:8D:47:5A
X509v3 Authority Key Identifier:
keyid:86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c7:21:c9:21:9f:a4:8f:50:9d:dc:64:c9:ef:49:91:d5:5c:
45:bd:99:2e:b8:f8:79:32:fb:18:8d:69:9d:2d:d9:76:9a:94:
ae:20:bf:7c:c6:76:53:91:b4:d0:0c:5b:18:8d:e3:5e:fe:c1:
52:ff:62:20:6d:fc:e0:4d:79:97:88:1f:8e:5d:86:27:42:12:
50:b0:0b:6b:ac:e8:ef:5a:f0:7d:7a:a5:89:ac:9a:f4:59:35:
19:08:33:f2:a7:46:7d:0c:44:7f:d9:47:8d:dc:39:1f:6f:c7:
2b:58:87:d5:c8:f5:d8:c3:47:37:22:8c:5d:d9:4d:2b:3b:20:
48:79:92:64:54:ae:78:cb:c2:23:3a:23:94:25:48:c7:03:81:
68:f0:4a:8e:9b:9e:04:67:0f:44:3f:00:18:52:46:37:77:63:
ca:1b:81:c7:7c:e9:4a:f8:eb:52:5c:bf:6c:22:3e:bb:5c:99:
80:8a:2d:ca:b1:d1:d2:5b:38:df:ae:47:9f:be:5a:6c:4f:d3:
e2:a4:f1:53:33:2c:0a:0f:e4:e0:7f:88:86:b7:0e:2b:5e:82:
22:b3:16:6b:16:ea:1c:62:49:e4:ee:3d:2f:e3:ee:f9:fa:aa:
33:8d:cd:38:52:ee:0e:ba:73:82:6a:53:ea:a8:94:96:23:8a:
21:01:58:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRzCjRvXuCWEgWgLilhadMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDU0MjMyM2MwZTMwNTFjOWM3YmI4ZWQxZDFlOGFjZmQz
ZGI4MzQwHhcNMjYwMzAyMDIwMTEyWhcNMjYwMzAzMDIwMTEyWjAzMTEwLwYDVQQD
Eyg2ZmViMTI1NTk3ZjcwMTdmMWViNzg5MzIyOGMwZjU3ZjViOGQ0NzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AEoHbmODZpX+p9tuJRkMetU5OjS
GMmUjtHIVdgqMiNJaFVg9J+42RhjCkRN1EMtcgqlnlG0mba5jDueyPL/TXWLVKnF
gj74qOl/yg32dcMVfQFuHotIXIM8QKziaSC5uVVBHelmVAMOjUSZsUwwxwI6Fpnx
8xP8eldjcqSevmX27ryDTmhoRz/C74501dLbD7LyUTtiKMyFwgbOBhDE1Sdqto/W
IV7ES9UYQUZ7Gh5/ys7Bul8y4vZeXd7fQa6iDTve/s4FcFKq7maKLMS198V8u3R/
kLUBOR7+YbyfkjQg2juAV6rZdctYer68e0npx6rvkdeDMhNs/b4vGLOJ1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/rElWX9wF/HreJMijA9X9bjUdaMB8GA1UdIwQY
MBaAFIbVQjI8DjBRyce7jtHR6Kz9Pbg0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRWQ01qd09NRkhKeDd1TzBkSG9yUDA5dURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hN2M3YzEtZmM0Mi00M2EzLTlhZDgt
NzBkYWQ1MWU3M2ZiLzEvaHRWQ01qd09NRkhKeDd1TzBkSG9yUDA5dURRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9hN2M3YzEtZmM0Mi00M2EzLTlhZDgtNzBkYWQ1MWU3M2Zi
LzEvaHRWQ01qd09NRkhKeDd1TzBkSG9yUDA5dURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKschySGf
pI9Qndxkye9JkdVcRb2ZLrj4eTL7GI1pnS3ZdpqUriC/fMZ2U5G00AxbGI3jXv7B
Uv9iIG384E15l4gfjl2GJ0ISULALa6zo71rwfXqliaya9Fk1GQgz8qdGfQxEf9lH
jdw5H2/HK1iH1cj12MNHNyKMXdlNKzsgSHmSZFSueMvCIzojlCVIxwOBaPBKjpue
BGcPRD8AGFJGN3djyhuBx3zpSvjrUly/bCI+u1yZgIotyrHR0ls4365Hn75abE/T
4qTxUzMsCg/k4H+IhrcOK16CIrMWaxbqHGJJ5O49L+Pu+fqqM43NOFLuDrpzgmpT
6qiUliOKIQFYQg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:33:38 2026 by rpki-client