Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
File: haqtxWj2ySj9dk1CHULHHPV5GVQ.mft (raw, json)
Hash identifier: hJb5igyDuD/R6jqjVRYtvXSDjQq7fSqlxy4PPvatFVM=
Subject key identifier: 0F:10:CD:FA:68:32:86:35:51:0C:AB:5A:55:ED:FF:8E:EF:26:AB:DE
Authority key identifier: 85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
Certificate issuer: /CN=85aaadc568f6c928fd764d421d42c71cf5791954
Certificate serial: 01A08DC46D7D8387E31EE68D83147A4F3387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
Manifest number: 1961
Signing time: Fri 11 Sep 2026 00:00:55 +0000
Manifest this update: Fri 11 Sep 2026 00:00:55 +0000
Manifest next update: Sat 12 Sep 2026 00:00:55 +0000
Files and hashes: 1: AM5ErPXEiMWsS6Ae1m7Tslc6XbE.roa (hash: bjQPug2v0rNOIw/ni5VI2hHRrE9nXwVPApu1cIBClbQ=)
2: haqtxWj2ySj9dk1CHULHHPV5GVQ.crl (hash: YSipYYyY2DlJFQlij6FVzJAmA8/7fTBhcRQ7XAs2vaQ=)
3: x85HhXDdK_S_B_1TyEgGIu-iBaU.roa (hash: NwFDd4jlTrwT9j2WB98f+hEAsx2o3sG2DrPxRU3nr38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:c4:6d:7d:83:87:e3:1e:e6:8d:83:14:7a:4f:33:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85aaadc568f6c928fd764d421d42c71cf5791954
Validity
Not Before: Sep 11 00:00:55 2026 GMT
Not After : Sep 12 00:00:55 2026 GMT
Subject: CN=0f10cdfa68328635510cab5a55edff8eef26abde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c8:0a:7a:52:ad:bf:e7:38:4e:3f:a5:6e:78:
07:bc:d8:dc:a4:68:12:be:84:64:0e:75:04:3f:87:
3a:b0:82:6c:1e:28:a3:65:ee:9b:77:32:f1:49:a4:
0b:6f:e6:9b:ce:af:5f:fd:46:c6:27:ed:48:14:27:
ee:5f:d4:6f:1f:56:41:0b:2d:76:71:ee:57:52:dc:
51:35:75:88:1d:a0:52:5f:50:89:95:70:62:04:66:
a3:ac:81:56:be:0a:60:90:5a:fb:fb:fa:57:4a:cb:
d4:36:b5:2e:fc:c0:d3:a7:f3:76:4e:df:a2:3a:c3:
77:27:8c:84:99:37:84:f4:a9:ca:98:9f:72:d5:bb:
ce:ff:f1:a1:a2:c4:b3:77:7e:1b:bb:b8:51:12:c6:
30:38:87:79:64:16:da:0d:10:8c:ee:d7:fa:cc:bc:
4d:82:84:0e:2b:28:44:5e:27:78:f6:5e:1c:e2:a6:
db:aa:a9:dc:36:ec:0e:bc:d1:a3:76:74:f7:e8:7e:
e4:31:5f:29:77:29:86:2c:b4:f7:72:96:66:53:2a:
fe:b7:99:fc:3e:ec:66:6a:49:17:5e:fa:4a:15:97:
ad:ef:aa:cb:3c:a3:b0:fa:3e:a6:7c:64:c2:f8:35:
85:ef:25:3b:da:ad:7d:51:18:e0:8a:32:44:e3:0b:
5a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:10:CD:FA:68:32:86:35:51:0C:AB:5A:55:ED:FF:8E:EF:26:AB:DE
X509v3 Authority Key Identifier:
keyid:85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:53:35:db:2b:41:ca:b3:e5:58:32:f4:dc:28:4e:12:20:c8:
ac:e6:c6:fa:d4:72:fc:32:c1:03:fe:be:60:77:d1:52:2e:8b:
8e:ee:ea:8b:3b:83:2e:6b:65:ff:85:2a:53:8f:4d:79:a0:72:
73:79:ba:aa:02:3a:06:34:c7:fa:50:01:50:a1:0d:f3:3d:e2:
4c:b4:65:bf:57:4b:66:75:ef:cc:62:b5:e1:b3:33:44:59:87:
45:6a:ff:d3:c6:43:90:47:fe:f2:e9:fc:8c:90:05:d6:a0:e9:
66:8b:7f:35:ac:16:1b:79:fb:05:ee:07:47:f3:f8:21:65:23:
ed:a8:60:db:6d:0d:d7:8f:c0:ed:e3:c2:43:9c:e8:2a:e5:cd:
43:18:7a:7e:0b:be:e2:4a:be:71:06:a2:13:12:bc:50:2d:52:
40:ec:f5:37:bf:a4:db:4c:53:16:58:3f:65:8d:db:27:7f:a4:
ec:da:17:24:78:96:fb:3b:c1:e7:92:b5:79:37:d3:45:00:9b:
16:ac:11:72:d0:8f:cc:50:6d:8e:45:42:ae:a8:dc:cd:d6:04:
05:23:86:02:8a:ea:e0:17:6d:6c:b1:9e:55:35:49:4d:7e:91:
45:8a:c2:5d:28:20:62:1a:5e:ec:63:d2:75:37:e2:39:39:75:
4a:20:1e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 06:51:58 2026 by rpki-client