Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
File: haqtxWj2ySj9dk1CHULHHPV5GVQ.mft (raw, json)
Hash identifier: eS7BpBIKWyD4GjQh5UvLEwM9j+LYSmEGYm6KEMszgNY=
Subject key identifier: 49:C1:0C:53:6C:AB:1B:5D:65:C7:98:19:6B:24:BA:DA:88:07:62:E4
Authority key identifier: 85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
Certificate issuer: /CN=85aaadc568f6c928fd764d421d42c71cf5791954
Certificate serial: 019CE6DB20837193C1881344A35AD1569A8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
Manifest number: 177C
Signing time: Fri 13 Mar 2026 11:00:46 +0000
Manifest this update: Fri 13 Mar 2026 11:00:46 +0000
Manifest next update: Sat 14 Mar 2026 11:00:46 +0000
Files and hashes: 1: AM5ErPXEiMWsS6Ae1m7Tslc6XbE.roa (hash: bjQPug2v0rNOIw/ni5VI2hHRrE9nXwVPApu1cIBClbQ=)
2: haqtxWj2ySj9dk1CHULHHPV5GVQ.crl (hash: ejI4Tuh7/Z28KEbxLjVYqDXgRSwGMp21UfnyXt8jN4I=)
3: irA0JceEuEodl99Q_dZTTdY7HaA.roa (hash: VyxTOx+3wVfafkLhbAvwOmaRgP56DMjB9J1S/JOzUO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:db:20:83:71:93:c1:88:13:44:a3:5a:d1:56:9a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85aaadc568f6c928fd764d421d42c71cf5791954
Validity
Not Before: Mar 13 11:00:46 2026 GMT
Not After : Mar 14 11:00:46 2026 GMT
Subject: CN=49c10c536cab1b5d65c798196b24bada880762e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7f:5b:d2:1a:f6:fd:38:ac:a7:96:82:99:65:
e4:dc:db:e4:91:f3:cb:73:a7:44:16:cb:ce:b0:13:
5a:22:22:bb:1d:16:fd:63:f6:2e:79:e6:ba:0f:4f:
9c:28:28:74:d9:a5:09:95:57:83:25:3d:53:20:50:
c9:a5:88:ed:5c:ea:a3:19:e7:fc:7a:aa:10:49:8d:
64:1a:ce:3f:95:37:ea:a3:13:0e:f5:9a:e1:49:5a:
0f:97:b2:8e:b4:ba:65:38:87:c7:93:b6:da:1d:78:
c3:6e:6d:28:cb:9b:48:a5:db:f0:db:3d:df:d7:ba:
39:11:95:33:53:7c:0b:42:b0:c5:90:93:fd:ff:67:
7c:cb:81:13:b2:62:3b:9a:4b:42:c1:19:3d:80:3a:
e1:b3:b2:4c:cb:d1:ab:cf:62:b8:2a:88:29:d0:ee:
05:e8:ad:f1:22:1d:76:fa:d6:80:e6:c0:60:24:f4:
f6:ec:77:e4:12:e9:62:2d:5d:bc:91:4b:3e:ad:52:
6a:10:f4:0d:36:d9:ba:eb:5b:cd:23:ab:70:c7:b3:
61:cd:f8:41:0a:7d:5a:72:5c:b9:e3:e9:d5:76:02:
3a:fc:3c:d6:43:e2:38:9f:4f:b9:3e:04:86:cd:bd:
d0:79:f0:d8:2c:a9:a2:9f:10:6e:14:e7:ba:ce:5f:
41:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C1:0C:53:6C:AB:1B:5D:65:C7:98:19:6B:24:BA:DA:88:07:62:E4
X509v3 Authority Key Identifier:
keyid:85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d2:be:5b:32:65:4f:2d:11:dd:b9:5a:0e:90:98:f2:a8:11:
c3:b2:16:35:2c:0e:60:40:e0:42:7d:41:c0:8d:14:a3:dc:08:
8d:ee:49:cd:47:49:66:d7:c7:16:01:4f:ce:08:bf:3c:51:7d:
16:ca:b4:4d:a6:2c:d7:e0:a3:bc:45:0a:4a:32:63:8b:3d:00:
fc:ca:fe:67:07:29:6f:54:f2:c6:3b:0a:2e:b9:35:2c:c5:e4:
f9:cf:2d:c7:f9:63:c1:09:53:56:ed:c1:23:9d:76:e7:9e:20:
1a:11:2e:76:1c:db:1e:75:f0:a2:f4:1c:00:0c:51:00:5a:f1:
04:4c:45:b1:47:59:9f:73:b2:1f:f4:8b:b8:aa:70:fc:2a:08:
44:b8:d5:3f:90:7b:ad:45:de:fd:6e:5d:32:23:44:86:f4:d2:
2c:8a:da:25:a5:40:af:1c:01:2b:0a:5f:c0:a6:fe:d5:26:1d:
f4:73:0d:58:5c:a2:6f:8e:37:54:96:b8:f0:9d:90:c1:95:e5:
7f:eb:9b:61:b1:a4:d6:1e:a6:ea:1a:80:7a:93:20:c9:00:b0:
92:02:8f:d2:15:9e:f5:4a:ac:ab:55:e4:d7:8a:1f:a4:54:a2:
93:bd:38:08:f2:58:10:48:b2:85:52:80:dc:45:be:c7:f3:4d:
e2:a4:c8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 17:46:38 2026 by rpki-client