Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
File: haqtxWj2ySj9dk1CHULHHPV5GVQ.mft (raw, json)
Hash identifier: tKC9MYlw+FgH5Vq2i4rCzq1yhMKirn/EnAi+Utr532I=
Subject key identifier: 9F:90:EE:82:7E:0E:7C:0C:FC:E7:80:A9:2C:70:74:2A:4B:6E:1E:DB
Authority key identifier: 85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
Certificate issuer: /CN=85aaadc568f6c928fd764d421d42c71cf5791954
Certificate serial: 019DD0877E2FC59AC9C5F77C3F9EF4207E9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
Manifest number: 17F5
Signing time: Mon 27 Apr 2026 20:00:33 +0000
Manifest this update: Mon 27 Apr 2026 20:00:33 +0000
Manifest next update: Tue 28 Apr 2026 20:00:33 +0000
Files and hashes: 1: AM5ErPXEiMWsS6Ae1m7Tslc6XbE.roa (hash: bjQPug2v0rNOIw/ni5VI2hHRrE9nXwVPApu1cIBClbQ=)
2: haqtxWj2ySj9dk1CHULHHPV5GVQ.crl (hash: XVavLjw1FVBTvqq8uxOsEsDy9IHXL1cGETKwx25U6CE=)
3: irA0JceEuEodl99Q_dZTTdY7HaA.roa (hash: VyxTOx+3wVfafkLhbAvwOmaRgP56DMjB9J1S/JOzUO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:87:7e:2f:c5:9a:c9:c5:f7:7c:3f:9e:f4:20:7e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85aaadc568f6c928fd764d421d42c71cf5791954
Validity
Not Before: Apr 27 20:00:33 2026 GMT
Not After : Apr 28 20:00:33 2026 GMT
Subject: CN=9f90ee827e0e7c0cfce780a92c70742a4b6e1edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ef:f3:a4:11:68:4c:c5:b9:18:46:39:c6:36:
5c:57:18:2f:2d:42:4c:c9:26:39:b0:4e:fb:e4:d9:
7f:68:f7:bf:46:b1:13:89:56:e9:8d:98:67:87:59:
95:bb:17:c9:10:02:13:92:9b:59:96:d8:4c:60:b2:
c7:8c:58:4e:37:e9:e5:13:db:cf:a4:1f:7f:a5:95:
e9:49:e9:da:b7:51:5c:3e:7c:12:fd:d2:30:a1:45:
26:94:69:08:52:6d:7d:67:12:71:c3:75:7b:9c:6f:
f7:21:de:e4:11:86:c3:bd:36:9c:7c:c6:81:4c:12:
bd:ef:45:92:00:b1:0f:59:b6:f9:69:d2:3c:69:e7:
fc:7e:f0:27:ad:81:a7:92:77:c2:87:b1:6a:c5:c1:
58:3b:19:48:d5:25:c6:64:14:f8:ca:07:5d:e6:ba:
e3:ef:99:b8:c2:4d:27:9b:33:46:3e:a5:f9:89:3f:
85:c9:a7:f6:c7:dc:0c:5a:f0:5f:1f:f1:55:b4:4c:
22:1c:ba:71:06:ac:bd:5e:83:22:8f:ad:72:95:e9:
89:ed:c1:38:92:92:f4:e4:b8:9a:12:df:57:32:33:
32:fc:9a:90:7f:56:83:c2:f6:6a:7e:30:f4:b8:e5:
eb:9c:96:d8:8e:49:fa:fa:d8:0f:3f:eb:fe:1b:e5:
ef:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:90:EE:82:7E:0E:7C:0C:FC:E7:80:A9:2C:70:74:2A:4B:6E:1E:DB
X509v3 Authority Key Identifier:
keyid:85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:3d:07:c6:59:02:16:1a:8a:3b:b5:7b:cf:0d:dc:03:4c:be:
ec:e2:a4:2b:1b:46:41:3c:d3:ee:fa:51:4e:d2:35:20:a8:e2:
08:ff:d8:55:17:a1:42:52:c3:ba:2b:16:62:b0:3e:4a:1b:64:
d6:17:ef:c7:63:2b:d3:3d:50:fd:37:46:f1:90:31:93:c9:b7:
7b:16:19:cd:6e:a2:a2:a5:04:f9:d9:de:80:3a:5b:0f:69:d7:
e5:40:ff:5a:e4:e1:b0:ba:cc:9a:6f:fb:c2:5f:ae:15:84:24:
de:73:7a:c9:99:b6:14:46:bf:14:10:24:67:2b:ef:4f:79:88:
5e:d6:04:fd:47:5b:4b:45:66:cb:3a:71:88:6e:e6:f2:8d:ef:
90:58:02:56:49:c6:6a:fd:56:af:a1:83:94:5f:d2:34:39:72:
ed:f9:c4:88:56:d0:15:e5:ae:cb:25:0f:a6:92:8a:5c:91:c5:
cd:84:b9:6b:77:a5:e6:22:2e:c6:ab:53:0a:1f:f2:d8:a0:9f:
d1:49:7f:87:21:41:12:75:e2:d6:b7:f7:d0:1a:86:9c:2d:d5:
bf:21:15:b8:74:c1:cc:39:c4:a4:3a:b6:e9:1e:e5:89:0f:08:
b2:80:1e:44:c0:83:cc:25:66:ff:eb:5d:15:e8:b9:6f:83:80:
3d:7b:ee:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3Qh34vxZrJxfd8P570IH6bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1YWFhZGM1NjhmNmM5MjhmZDc2NGQ0MjFkNDJjNzFjZjU3
OTE5NTQwHhcNMjYwNDI3MjAwMDMzWhcNMjYwNDI4MjAwMDMzWjAzMTEwLwYDVQQD
Eyg5ZjkwZWU4MjdlMGU3YzBjZmNlNzgwYTkyYzcwNzQyYTRiNmUxZWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxO/zpBFoTMW5GEY5xjZcVxgvLUJM
ySY5sE775Nl/aPe/RrETiVbpjZhnh1mVuxfJEAITkptZlthMYLLHjFhON+nlE9vP
pB9/pZXpSenat1FcPnwS/dIwoUUmlGkIUm19ZxJxw3V7nG/3Id7kEYbDvTacfMaB
TBK970WSALEPWbb5adI8aef8fvAnrYGnknfCh7FqxcFYOxlI1SXGZBT4ygdd5rrj
75m4wk0nmzNGPqX5iT+Fyaf2x9wMWvBfH/FVtEwiHLpxBqy9XoMij61ylemJ7cE4
kpL05LiaEt9XMjMy/JqQf1aDwvZqfjD0uOXrnJbYjkn6+tgPP+v+G+XvbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+Q7oJ+DnwM/OeAqSxwdCpLbh7bMB8GA1UdIwQY
MBaAFIWqrcVo9sko/XZNQh1Cxxz1eRlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGFxdHhXajJ5U2o5ZGsxQ0hVTEhIUFY1R1ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8wZWJkZDQtMjYxNy00ZDMxLWE4YzMt
NDVlYTM4ZGEyMjE4LzEvaGFxdHhXajJ5U2o5ZGsxQ0hVTEhIUFY1R1ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8wZWJkZDQtMjYxNy00ZDMxLWE4YzMtNDVlYTM4ZGEyMjE4
LzEvaGFxdHhXajJ5U2o5ZGsxQ0hVTEhIUFY1R1ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYD0HxlkC
FhqKO7V7zw3cA0y+7OKkKxtGQTzT7vpRTtI1IKjiCP/YVRehQlLDuisWYrA+Shtk
1hfvx2Mr0z1Q/TdG8ZAxk8m3exYZzW6ioqUE+dnegDpbD2nX5UD/WuThsLrMmm/7
wl+uFYQk3nN6yZm2FEa/FBAkZyvvT3mIXtYE/UdbS0VmyzpxiG7m8o3vkFgCVknG
av1Wr6GDlF/SNDly7fnEiFbQFeWuyyUPppKKXJHFzYS5a3el5iIuxqtTCh/y2KCf
0Ul/hyFBEnXi1rf30BqGnC3VvyEVuHTBzDnEpDq26R7liQ8IsoAeRMCDzCVm/+td
Fei5b4OAPXvuzQ==
-----END CERTIFICATE-----
Generated at Tue Apr 28 03:23:40 2026 by rpki-client