Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
File: Ha5HTXlZfbddH01JkBtSVYu_avQ.mft (raw, json)
Hash identifier: 2C5TmJZkOUQP2nFPNAD5WHiz2gKj5rnmaEfKvziwKfY=
Subject key identifier: ED:3A:6D:EF:35:1A:B9:B2:D0:B4:B3:E7:BC:75:D2:D2:66:09:5E:5F
Authority key identifier: 1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
Certificate issuer: /CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Certificate serial: 019CBB1513B1C497B07601C1A79D5F1BFC54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
Manifest number: 106C
Signing time: Wed 04 Mar 2026 23:00:46 +0000
Manifest this update: Wed 04 Mar 2026 23:00:46 +0000
Manifest next update: Thu 05 Mar 2026 23:00:46 +0000
Files and hashes: 1: Ha5HTXlZfbddH01JkBtSVYu_avQ.crl (hash: NF52eXzYZJ6XJIP+8p3fQJBF+aTfsgHqx5BSQc/BqqM=)
2: k97xiEPNhhSgqvtrR_5TEOjiPrM.roa (hash: ZH1DGUuXgshBEvHt5egPH/VHWGjZYucZ8h4th9PhsLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 19:55:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bb:15:13:b1:c4:97:b0:76:01:c1:a7:9d:5f:1b:fc:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Validity
Not Before: Mar 4 23:00:46 2026 GMT
Not After : Mar 5 23:00:46 2026 GMT
Subject: CN=ed3a6def351ab9b2d0b4b3e7bc75d2d266095e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5e:84:a6:c9:2f:d0:73:14:1e:29:4f:3d:97:
c7:9a:0f:73:fb:cb:f8:18:fb:27:e6:7d:09:7d:a8:
31:20:03:70:e6:9b:db:68:52:9e:c1:d0:74:16:2f:
71:5c:79:3a:e7:33:70:06:2d:0c:c2:3c:27:58:03:
ac:aa:07:ab:11:d6:47:0b:5b:e7:8c:27:8c:fb:4e:
6b:bf:3f:60:b3:4c:3a:0a:5f:8d:9f:c2:d9:4d:12:
ca:b9:ad:0f:ed:ed:f8:ff:a6:9f:2d:55:3e:2c:4c:
d6:7f:79:82:62:ab:ee:56:45:d6:62:7c:c3:24:5a:
86:68:a4:9d:78:d7:e7:b0:83:97:9c:ac:b4:48:b0:
a5:19:7f:25:f3:4d:4c:f3:d7:00:72:9d:dc:2a:c8:
1e:3b:d7:03:d5:07:a7:bf:f2:8e:22:57:7c:cc:c1:
aa:d5:a7:1e:7f:e2:3e:16:cd:d9:d0:b2:96:af:a9:
41:5c:62:26:7a:6b:93:cf:8e:3f:2b:61:f0:9f:c6:
4f:43:06:d3:57:be:9b:14:aa:22:c1:db:d0:45:05:
6c:49:d4:6a:2c:9a:21:77:a7:99:f1:ef:e5:77:9d:
e3:39:b3:54:f7:7c:32:4a:83:0c:d8:35:f7:c9:a9:
cd:47:18:73:ae:ff:b7:26:2e:24:45:60:7d:63:ad:
ba:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3A:6D:EF:35:1A:B9:B2:D0:B4:B3:E7:BC:75:D2:D2:66:09:5E:5F
X509v3 Authority Key Identifier:
keyid:1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:cd:d4:39:e5:c9:80:69:a8:b4:98:42:f5:2c:29:51:85:ab:
22:1d:7b:8d:f3:54:96:be:a8:7e:20:cc:0b:bb:6c:d6:be:52:
5b:eb:f4:06:60:12:27:d8:84:36:30:8b:3d:67:9f:a0:bb:57:
aa:b7:28:4e:f1:70:48:0b:63:08:07:90:21:fe:e1:c7:f7:e9:
60:c3:a9:de:f7:79:2d:08:10:bb:62:e4:dc:b5:88:22:75:bc:
7d:fd:cd:74:9b:2c:c4:06:dd:d0:d2:75:c9:64:90:64:0e:09:
f6:6e:3d:6e:58:85:a5:58:bd:cf:6b:d4:c4:0d:8d:a7:43:c4:
87:33:5d:57:a0:7e:55:d6:f7:3d:2e:79:bb:f5:9c:22:eb:22:
36:16:5f:db:7a:3b:ce:d1:64:1b:5a:19:13:ec:a3:59:3e:89:
14:d6:66:cf:e1:b0:6f:24:83:ea:f9:c7:72:2b:e2:8c:2c:5d:
f4:14:73:1b:14:a4:93:f9:1b:11:6c:b7:9d:8e:ff:87:67:21:
dd:fd:be:7d:7a:9f:39:8b:f1:13:ad:22:9a:e4:a0:0b:3c:c0:
99:9f:1e:9f:aa:ef:fc:84:b0:f2:39:e7:89:ce:0a:07:df:2e:
fd:fa:06:6f:a4:97:4e:21:37:3d:c0:aa:0a:6e:91:24:8d:2b:
fd:07:99:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 03:04:33 2026 by rpki-client