Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
File: Ha5HTXlZfbddH01JkBtSVYu_avQ.mft (raw, json)
Hash identifier: q5NdQGN5I+92oBTm51JLNKgP3mb2suG21iOVVA/BeJk=
Subject key identifier: A4:ED:EB:85:A7:EB:5F:75:66:3B:D3:89:36:E2:86:4E:67:6C:27:7D
Authority key identifier: 1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
Certificate issuer: /CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Certificate serial: 01A06D5D97469E436990DDBE0D3D09AEA485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
Manifest number: 1256
Signing time: Fri 04 Sep 2026 17:00:45 +0000
Manifest this update: Fri 04 Sep 2026 17:00:45 +0000
Manifest next update: Sat 05 Sep 2026 17:00:45 +0000
Files and hashes: 1: Ha5HTXlZfbddH01JkBtSVYu_avQ.crl (hash: lS1hkNgoVRMZDzQCfeR05ChMIcv97Ebo8mVh01mYD7s=)
2: k97xiEPNhhSgqvtrR_5TEOjiPrM.roa (hash: ZH1DGUuXgshBEvHt5egPH/VHWGjZYucZ8h4th9PhsLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:5d:97:46:9e:43:69:90:dd:be:0d:3d:09:ae:a4:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Validity
Not Before: Sep 4 17:00:45 2026 GMT
Not After : Sep 5 17:00:45 2026 GMT
Subject: CN=a4edeb85a7eb5f75663bd38936e2864e676c277d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b7:14:3b:96:38:ee:44:46:3b:bd:18:aa:27:
f6:02:7c:e0:ef:64:df:e9:9c:f7:2d:4f:da:48:04:
79:1e:38:ad:fd:8b:6a:83:c0:8c:d4:28:f8:66:25:
39:94:9c:21:30:5d:d1:c0:79:e8:e3:a9:8b:d3:f7:
9d:48:9f:2f:d9:25:8c:54:ac:f3:23:71:f7:54:45:
a7:b9:b2:70:eb:69:a0:ec:8e:a4:8c:99:5e:68:ab:
a0:8a:02:dd:f1:eb:5f:1f:ee:90:19:a8:34:85:3e:
14:c3:4f:ab:05:ce:bd:15:49:9f:f1:73:64:8c:8b:
b6:28:ae:2a:3a:fe:79:4c:c5:05:3a:9a:cb:00:76:
2f:98:41:13:69:a0:50:af:69:5f:21:c9:dd:13:f8:
e6:98:e7:93:f1:a4:52:8d:5f:65:16:7c:cd:25:03:
e1:3b:a5:8b:5c:05:62:60:64:0d:41:fc:fd:5d:8e:
75:ee:07:14:51:a6:a8:73:ae:2e:3f:2c:bb:ba:03:
f6:22:ff:fb:4e:64:b1:96:9c:84:84:64:4a:48:74:
4d:48:12:ba:89:cf:02:d4:e2:79:77:6f:ee:0f:9e:
d7:f7:61:a9:98:c8:d0:16:34:50:6c:8c:e8:82:ff:
bf:eb:57:ac:54:87:e3:a6:c7:f7:e5:2f:7a:bd:1e:
1a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:ED:EB:85:A7:EB:5F:75:66:3B:D3:89:36:E2:86:4E:67:6C:27:7D
X509v3 Authority Key Identifier:
keyid:1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:4d:d9:e2:86:13:29:81:69:2e:6d:74:23:ce:f4:2c:36:38:
3a:e3:97:89:1b:ab:51:a9:93:9f:2f:8c:2d:88:01:dc:0f:95:
a9:e4:46:fe:56:33:5e:4b:43:63:1f:3f:f2:b2:10:c2:34:a0:
be:3c:56:46:58:61:d0:ac:cc:b7:ba:df:fa:ac:e0:1a:f5:d7:
78:c5:a2:d4:4a:78:23:2c:24:88:39:d7:2c:11:47:14:85:c8:
5c:83:94:68:2c:08:99:a1:85:3f:93:57:c3:31:56:24:ba:0c:
dd:6a:26:d7:3f:23:93:11:91:50:90:e2:85:bc:f2:bf:ce:8b:
f6:46:38:e4:c1:e7:cb:5c:24:44:f6:7e:9d:2b:02:eb:e3:7b:
88:1d:ba:65:45:c3:d0:b8:06:c1:e6:30:1b:ce:35:8b:e9:87:
14:8c:81:ab:4e:77:e6:07:b4:2b:e3:64:ca:ed:67:91:14:52:
38:80:91:a5:c6:d0:d2:a5:83:45:7f:e5:d7:07:b6:83:0b:8a:
07:03:9e:5b:76:65:95:77:f2:e7:4d:f9:62:53:8b:47:5a:5d:
53:d3:6d:50:c9:b3:7f:a2:86:a9:97:d6:1e:a8:a2:bf:a9:45:
ea:1e:71:0e:4d:d7:4f:28:c0:e7:8e:c0:f8:20:30:1a:f6:01:
26:cc:5f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:40:31 2026 by rpki-client