Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft
File: HAICl4Occ5DfICUaXAkw5qZyvuM.mft (raw, json)
Hash identifier: FiAQAdqFIyBPvh4NVqCKIuhX1jeGjXhBJa1e0PWPOCI=
Subject key identifier: B4:9B:7B:C5:DC:E7:A4:42:E3:50:AC:8D:4D:8F:23:31:F4:90:11:7A
Authority key identifier: 1C:02:02:97:83:9C:73:90:DF:20:25:1A:5C:09:30:E6:A6:72:BE:E3
Certificate issuer: /CN=1c020297839c7390df20251a5c0930e6a672bee3
Certificate serial: 019CE5914405C0DFA11E60AAB788F17C7477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft
Manifest number: 1871
Signing time: Fri 13 Mar 2026 05:00:28 +0000
Manifest this update: Fri 13 Mar 2026 05:00:28 +0000
Manifest next update: Sat 14 Mar 2026 05:00:28 +0000
Files and hashes: 1: 1F9WIaTWCuPhT1fj3f_sEFEp_g8.roa (hash: TNYhPcHp1Cn0a4fwg5zefI73qcgF+qlhC3CnY4Ewyb4=)
2: HAICl4Occ5DfICUaXAkw5qZyvuM.crl (hash: SjgMbwAcMunDyWgxLLm/8wCSDFpqqDP3NP4pEWEjjNQ=)
3: LJKhD8fk07zXDMBgH7_ZquUEkWo.roa (hash: lpLkxTnWA14ekLx427upuk7B/wpO8bahUjpiRWlX+pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:91:44:05:c0:df:a1:1e:60:aa:b7:88:f1:7c:74:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c020297839c7390df20251a5c0930e6a672bee3
Validity
Not Before: Mar 13 05:00:28 2026 GMT
Not After : Mar 14 05:00:28 2026 GMT
Subject: CN=b49b7bc5dce7a442e350ac8d4d8f2331f490117a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f7:3b:25:d1:c4:e2:2a:63:13:77:d7:4d:69:
3c:e9:9b:bd:39:1f:2c:a2:85:e7:95:70:f0:23:bc:
79:d4:b3:e4:d6:0b:35:f4:bb:88:5a:a6:f6:69:04:
59:c1:5d:88:b6:b7:a6:14:e8:2b:c9:c6:41:a8:b3:
48:e5:1e:75:eb:01:72:d4:a8:11:59:92:c0:4e:99:
c8:b3:f9:03:50:fc:c1:14:ea:8e:e0:92:1e:90:d3:
86:98:c4:16:ab:07:8e:02:13:bb:b9:cd:87:a8:9d:
e3:ea:71:a1:40:98:b8:07:5d:3d:43:0c:7e:ff:f8:
8b:99:94:19:ab:69:a1:d6:5b:07:93:f6:16:3c:fe:
c6:4a:18:a1:6b:0c:7b:bc:f1:a8:48:77:d0:97:ec:
04:97:0c:f3:73:63:6b:3f:23:0c:25:8c:50:fb:75:
81:95:ee:49:df:e9:bc:ea:1e:8f:32:99:37:36:40:
8b:86:48:28:81:ff:28:a3:01:40:ae:6e:2e:87:62:
9a:52:60:f5:99:cb:a5:49:ee:b0:88:80:54:57:bb:
c4:e0:2e:72:9f:19:79:71:e1:4f:bd:7b:ab:12:fe:
50:f5:6e:91:81:19:d1:da:8a:c2:57:fb:3c:c2:0f:
e9:39:ff:9e:89:80:50:7c:1b:7f:c5:a3:3d:ea:2e:
7b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9B:7B:C5:DC:E7:A4:42:E3:50:AC:8D:4D:8F:23:31:F4:90:11:7A
X509v3 Authority Key Identifier:
keyid:1C:02:02:97:83:9C:73:90:DF:20:25:1A:5C:09:30:E6:A6:72:BE:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:c6:48:84:9d:79:b9:d6:90:76:6d:14:c7:29:e2:e5:0e:35:
54:89:17:93:e7:1f:6e:11:09:04:6f:21:91:81:93:3a:7b:31:
6c:76:ac:3c:b9:e5:85:b8:c3:e7:c3:35:8a:a1:0f:bd:30:21:
4f:3d:8a:9b:e5:75:00:b3:ad:6d:83:d1:ca:a5:70:47:b5:65:
cc:a7:84:f3:4a:d3:4b:96:71:8d:e4:c2:3b:e1:67:c8:f8:d3:
15:30:f4:4e:42:1e:bf:c5:2f:c7:ee:dd:b3:83:a0:0b:ea:2d:
3f:61:f3:38:34:bd:51:78:91:a8:73:cf:3a:d0:7f:f1:6d:22:
03:a3:1f:94:65:3c:c9:7f:8f:1f:58:99:07:fc:9b:ac:b1:79:
c6:f6:c2:78:a6:51:15:4d:41:98:a4:dc:9e:e9:e3:60:94:8e:
68:73:d2:8d:e6:98:32:30:f8:39:67:e0:72:e9:ce:2e:f8:50:
26:46:d8:ab:e5:b8:cf:12:81:20:da:da:01:4f:ab:a7:76:cf:
ea:97:46:bf:f9:d8:f7:b3:2f:ac:e8:e0:e6:63:39:c1:ab:6c:
c1:8a:45:60:6d:61:93:c6:ee:14:e7:cd:5d:2b:01:cc:8c:86:
0d:ae:80:0e:a9:37:95:5b:af:59:48:03:56:61:3e:86:e8:ba:
74:da:8d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:14:20 2026 by rpki-client