Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
File: haqtxWj2ySj9dk1CHULHHPV5GVQ.mft (raw, json)
Hash identifier: HRbz0lYQSU0URgtciniCgC/7lLNuymzzpjEDMLZ51WM=
Subject key identifier: 58:9D:FF:FC:80:31:60:B8:26:ED:E2:F3:FA:8A:30:3B:51:97:38:04
Authority key identifier: 85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
Certificate issuer: /CN=85aaadc568f6c928fd764d421d42c71cf5791954
Certificate serial: 01A17CCF0798ACD791C4B713016FCA86F6DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
Manifest number: 19DD
Signing time: Tue 27 Oct 2026 10:01:44 +0000
Manifest this update: Tue 27 Oct 2026 10:01:44 +0000
Manifest next update: Wed 28 Oct 2026 10:01:44 +0000
Files and hashes: 1: AM5ErPXEiMWsS6Ae1m7Tslc6XbE.roa (hash: bjQPug2v0rNOIw/ni5VI2hHRrE9nXwVPApu1cIBClbQ=)
2: haqtxWj2ySj9dk1CHULHHPV5GVQ.crl (hash: 5Z3+3qrMpjCKksWrU0sX15gdwtkie1s3j4saECXSS+4=)
3: tiWeCWTzhrIvsgFDw__Go4NFrmk.roa (hash: wWl6ZsQZ/uGjyr/V5rf2Mytz3uYLDMd0O1QEO33zRQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 10:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:cf:07:98:ac:d7:91:c4:b7:13:01:6f:ca:86:f6:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85aaadc568f6c928fd764d421d42c71cf5791954
Validity
Not Before: Oct 27 10:01:44 2026 GMT
Not After : Oct 28 10:01:44 2026 GMT
Subject: CN=589dfffc803160b826ede2f3fa8a303b51973804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:37:e6:14:5e:45:4c:18:a4:f6:da:04:92:12:
c9:3f:b0:72:fc:4d:5e:19:69:12:8c:62:7c:fc:77:
03:50:1c:24:af:45:96:19:0f:03:eb:b3:fe:15:f4:
b3:ae:64:ed:0d:10:90:73:93:38:9e:53:86:95:4c:
b2:b7:8d:bf:00:e2:d8:5b:6a:e0:7a:59:73:f9:a6:
6d:e1:4b:03:0c:cf:90:81:f0:1e:6f:c9:77:be:16:
b1:84:b2:1e:01:09:e5:1b:60:75:6a:29:b7:c1:d2:
12:58:38:35:63:51:a5:73:3a:e8:af:61:a5:33:21:
9b:c4:06:31:5c:b0:cc:10:f2:26:db:53:df:75:05:
5c:3d:99:bb:b9:5c:7a:85:7a:6f:fb:02:4c:41:27:
3c:0d:74:d0:90:49:ee:02:d8:36:17:18:73:e3:01:
a6:cd:45:ab:ee:70:83:f8:4b:4a:d0:e2:bb:60:ff:
0c:8b:23:83:f0:0c:dd:62:60:f3:a0:88:58:9a:3d:
d3:da:49:4c:2e:a9:da:77:a7:0f:5d:d1:95:6e:d3:
b1:ac:34:b6:80:88:10:6d:54:41:95:70:84:12:d4:
af:f2:52:ac:d0:23:fb:b9:a5:5c:63:8e:39:2e:4d:
a5:af:5f:9c:87:60:91:6b:be:4b:31:99:ad:c1:df:
42:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9D:FF:FC:80:31:60:B8:26:ED:E2:F3:FA:8A:30:3B:51:97:38:04
X509v3 Authority Key Identifier:
keyid:85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:77:91:aa:61:09:85:21:fe:e5:68:d5:32:15:5f:cb:85:03:
6b:48:7e:c7:2a:c0:e6:b4:c6:7d:2e:0d:79:9f:1e:29:35:8e:
f0:9a:9e:67:89:88:6f:a9:54:4b:ae:83:6a:a0:e8:a2:56:d0:
54:f4:0d:da:9d:1a:54:18:15:0b:72:d4:23:38:52:ec:aa:16:
2b:5f:3b:41:71:0f:21:02:35:52:fc:9a:79:1f:da:c9:71:4b:
c1:97:3f:a8:16:02:2b:ee:44:b8:37:d9:92:f2:52:60:78:a3:
0e:b8:dc:d5:39:80:5f:55:f2:e5:ed:a2:40:58:e7:48:5c:52:
c8:99:94:d1:5b:4a:dc:f2:03:8d:3e:c2:fc:97:35:5f:b1:16:
8d:46:e3:24:60:9d:8e:e0:a3:75:54:6c:4a:36:a5:19:0a:c6:
c3:86:49:71:e2:5e:4d:6e:d9:c5:c8:9d:36:ea:f4:dc:c2:89:
ca:49:25:4f:88:20:94:a4:3a:ad:cb:83:f4:37:af:37:64:aa:
29:18:12:e5:a7:2d:0e:fa:22:8e:d7:6d:fb:de:77:f5:6d:a6:
9d:27:95:95:55:81:72:ed:7b:14:4a:bf:db:fb:14:da:c3:fa:
ab:f2:39:a5:c8:63:40:d4:75:ae:14:78:44:8d:d6:2e:44:3d:
a5:4b:c3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:22:37 2026 by rpki-client