Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
File: HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft (raw, json)
Hash identifier: dTnlnokQ1CRkEZup2aqXnEy6cdMSg6xIXtvcrxs28jc=
Subject key identifier: 21:CD:09:7C:DF:08:1D:0A:DF:0B:6B:43:20:5E:9A:34:68:DD:BE:85
Authority key identifier: 1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3
Certificate issuer: /CN=1d361d7f1f5f823977502606351fd48dfbee11e3
Certificate serial: 019D99992149FB62E7F2F10956310ADA2C11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
Manifest number: 09A8
Signing time: Fri 17 Apr 2026 04:00:42 +0000
Manifest this update: Fri 17 Apr 2026 04:00:42 +0000
Manifest next update: Sat 18 Apr 2026 04:00:42 +0000
Files and hashes: 1: 3W6mluySiEpKej6eN1jA5zstxy4.roa (hash: BnPbQOWoBcwsBllS5g956Y7roIr2qvKYxdvmXktrFbQ=)
2: HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl (hash: SaXQvpop5s8asnV+nkm0N4nDprvNAnZT/Sclumqp//A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:21:49:fb:62:e7:f2:f1:09:56:31:0a:da:2c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d361d7f1f5f823977502606351fd48dfbee11e3
Validity
Not Before: Apr 17 04:00:42 2026 GMT
Not After : Apr 18 04:00:42 2026 GMT
Subject: CN=21cd097cdf081d0adf0b6b43205e9a3468ddbe85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8e:08:bc:8d:97:79:48:fd:38:a2:80:1a:f5:
b3:05:f3:a3:6d:00:a6:75:56:3e:33:bd:51:fe:4b:
4f:f2:f4:d3:1e:7a:c9:59:7a:24:64:51:4f:e9:2a:
6f:4f:64:35:5b:02:8a:3a:ab:5e:ba:6c:89:4d:37:
12:71:cc:f4:8d:65:7b:c6:1a:cd:48:56:c7:13:bc:
80:38:fc:d2:3e:17:2b:83:da:51:6e:15:23:35:e5:
36:99:ff:f9:1e:f5:91:74:6f:a1:9f:18:1e:23:52:
15:9e:ac:f8:93:03:b8:b9:e8:a0:7e:65:a4:89:d1:
a5:7c:e4:0b:97:83:73:d9:bc:e2:1d:34:15:74:f8:
9e:47:8f:af:25:c3:b8:73:93:dd:c2:07:0d:92:b0:
a3:e2:4e:9c:13:8e:13:c1:61:47:79:0b:d7:fe:61:
22:8d:de:2f:ae:55:44:3f:94:7c:92:ca:ae:68:fb:
47:4f:12:18:ac:23:b0:91:c8:13:08:06:27:c9:be:
bd:80:9e:e1:71:ea:97:47:3a:18:a3:48:92:2f:34:
39:ef:d8:73:2c:d1:d6:b0:37:99:49:2f:bc:06:13:
ae:88:1b:24:73:0a:a5:e3:d3:5c:31:b7:70:d9:da:
8d:8e:01:e7:3b:b7:30:95:4f:ec:bb:97:5e:55:31:
63:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CD:09:7C:DF:08:1D:0A:DF:0B:6B:43:20:5E:9A:34:68:DD:BE:85
X509v3 Authority Key Identifier:
keyid:1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:90:20:5c:a1:a6:5f:b3:7f:d1:3e:69:8c:95:a6:0a:08:f2:
ab:fe:f4:05:66:2e:3e:69:8c:77:88:af:ba:1d:2b:5f:7a:ef:
9b:d6:cc:5e:7e:a2:ca:3b:b1:ac:08:9e:c4:06:17:b2:51:c6:
98:22:a2:d8:48:36:dc:4b:16:1f:a9:4e:97:98:c6:33:26:36:
8c:a0:00:ba:14:42:63:ba:30:0c:dd:9d:e3:49:e7:be:df:c7:
7f:b4:00:99:f0:6c:cc:39:fb:89:84:2b:94:93:a2:cb:fe:d8:
96:28:51:4a:79:88:a9:a5:7f:10:ec:ed:da:00:ff:3c:20:af:
5b:fb:fe:b5:00:5e:c4:13:a7:da:f2:f0:e2:d4:6c:3a:bf:c6:
70:e2:13:21:ae:10:60:90:76:07:12:cc:41:f0:ba:78:b9:39:
33:f1:27:fa:e2:ee:80:45:f0:05:3a:9d:ef:27:5c:f7:52:77:
68:53:17:4e:1a:58:57:fe:aa:60:2c:7c:27:32:15:16:6b:29:
df:c7:b3:b4:12:c3:63:92:a2:20:83:f6:ae:41:ea:5a:7f:b0:
ca:91:76:b5:d9:0f:76:60:51:d3:1a:71:be:10:ef:aa:1e:37:
36:53:f5:6c:2b:b6:43:01:1e:87:1c:2a:6f:bb:9c:e6:38:18:
42:29:39:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmSFJ+2Ln8vEJVjEK2iwRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMzYxZDdmMWY1ZjgyMzk3NzUwMjYwNjM1MWZkNDhkZmJl
ZTExZTMwHhcNMjYwNDE3MDQwMDQyWhcNMjYwNDE4MDQwMDQyWjAzMTEwLwYDVQQD
EygyMWNkMDk3Y2RmMDgxZDBhZGYwYjZiNDMyMDVlOWEzNDY4ZGRiZTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI4IvI2XeUj9OKKAGvWzBfOjbQCm
dVY+M71R/ktP8vTTHnrJWXokZFFP6SpvT2Q1WwKKOqteumyJTTcSccz0jWV7xhrN
SFbHE7yAOPzSPhcrg9pRbhUjNeU2mf/5HvWRdG+hnxgeI1IVnqz4kwO4ueigfmWk
idGlfOQLl4Nz2bziHTQVdPieR4+vJcO4c5PdwgcNkrCj4k6cE44TwWFHeQvX/mEi
jd4vrlVEP5R8ksquaPtHTxIYrCOwkcgTCAYnyb69gJ7hceqXRzoYo0iSLzQ579hz
LNHWsDeZSS+8BhOuiBskcwql49NcMbdw2dqNjgHnO7cwlU/su5deVTFjGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHNCXzfCB0K3wtrQyBemjRo3b6FMB8GA1UdIwQY
MBaAFB02HX8fX4I5d1AmBjUf1I377hHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFRZZGZ4OWZnamwzVUNZR05SX1VqZnZ1RWVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kNzhmNmEtNzZlNy00ZWY0LTgyYmEt
ZTkxODhiY2VjMGM1LzEvSFRZZGZ4OWZnamwzVUNZR05SX1VqZnZ1RWVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9kNzhmNmEtNzZlNy00ZWY0LTgyYmEtZTkxODhiY2VjMGM1
LzEvSFRZZGZ4OWZnamwzVUNZR05SX1VqZnZ1RWVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaZAgXKGm
X7N/0T5pjJWmCgjyq/70BWYuPmmMd4ivuh0rX3rvm9bMXn6iyjuxrAiexAYXslHG
mCKi2Eg23EsWH6lOl5jGMyY2jKAAuhRCY7owDN2d40nnvt/Hf7QAmfBszDn7iYQr
lJOiy/7YlihRSnmIqaV/EOzt2gD/PCCvW/v+tQBexBOn2vLw4tRsOr/GcOITIa4Q
YJB2BxLMQfC6eLk5M/En+uLugEXwBTqd7ydc91J3aFMXThpYV/6qYCx8JzIVFmsp
38eztBLDY5KiIIP2rkHqWn+wypF2tdkPdmBR0xpxvhDvqh43NlP1bCu2QwEehxwq
b7uc5jgYQik5lg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:33:26 2026 by rpki-client