Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/1ceddd-98d1-47fd-b30c-6ab98d36dac6/1/HAaGYxPWaK_oeYb65f95QfkoBps.mft
File: HAaGYxPWaK_oeYb65f95QfkoBps.mft (raw, json)
Hash identifier: +YQjkcNXVAgzo4NEq/g0bTLe+/ce0xzawZ1dtWZHLHE=
Subject key identifier: 17:4C:07:BB:A0:03:61:3D:6F:71:03:81:BC:16:CE:3A:DD:57:88:E0
Authority key identifier: 1C:06:86:63:13:D6:68:AF:E8:79:86:FA:E5:FF:79:41:F9:28:06:9B
Certificate issuer: /CN=1c06866313d668afe87986fae5ff7941f928069b
Certificate serial: 019D38D2FF7957A75EEA29C6474119042688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaGYxPWaK_oeYb65f95QfkoBps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/1ceddd-98d1-47fd-b30c-6ab98d36dac6/1/HAaGYxPWaK_oeYb65f95QfkoBps.mft
Manifest number: 1287
Signing time: Sun 29 Mar 2026 09:00:45 +0000
Manifest this update: Sun 29 Mar 2026 09:00:45 +0000
Manifest next update: Mon 30 Mar 2026 09:00:45 +0000
Files and hashes: 1: HAaGYxPWaK_oeYb65f95QfkoBps.crl (hash: 3UfPaJKVAZUaPY+ti8DoxOH0KkFInZKBytOKI7n8enY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/1ceddd-98d1-47fd-b30c-6ab98d36dac6/1/HAaGYxPWaK_oeYb65f95QfkoBps.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/1ceddd-98d1-47fd-b30c-6ab98d36dac6/1/HAaGYxPWaK_oeYb65f95QfkoBps.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAaGYxPWaK_oeYb65f95QfkoBps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:ff:79:57:a7:5e:ea:29:c6:47:41:19:04:26:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06866313d668afe87986fae5ff7941f928069b
Validity
Not Before: Mar 29 09:00:45 2026 GMT
Not After : Mar 30 09:00:45 2026 GMT
Subject: CN=174c07bba003613d6f710381bc16ce3add5788e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b2:ce:2a:4f:6e:bf:ae:3f:fb:14:1b:ce:e3:
3f:ac:ed:30:ee:9c:fe:95:a9:53:97:e2:f3:71:19:
ef:f2:c7:40:35:81:fb:dc:58:68:1c:d1:25:ab:52:
60:db:31:11:ef:07:a6:b2:fd:55:49:e4:75:6e:e9:
cb:0c:fe:5c:63:68:53:22:ef:ec:06:71:92:1b:a3:
a7:5c:82:f1:25:62:56:bf:2c:92:11:be:b6:8b:13:
70:8f:73:3b:dd:1c:e4:63:74:b8:6e:81:46:9a:d4:
37:13:26:94:b6:7c:ae:bf:dd:d6:86:f1:86:49:ca:
da:2a:0d:c3:72:74:b8:30:14:f5:90:80:69:cc:70:
a6:5f:07:87:75:33:2c:be:9d:92:83:ac:a8:7c:c8:
db:4d:47:fd:ae:65:1a:ce:f8:6a:6c:9b:03:00:49:
9c:b1:a3:57:c9:91:0d:3b:d8:1b:22:0a:a8:d4:ec:
b5:76:dd:df:04:ec:18:a8:83:86:3a:56:ce:83:38:
13:49:e3:66:83:8c:7d:4c:f7:8e:7a:3b:ea:61:8d:
3b:98:5c:70:81:ba:67:c4:bf:1e:ac:9a:31:31:7e:
99:7d:40:5d:9f:3d:c5:88:85:87:78:62:6f:b9:25:
79:d9:98:30:4b:19:c6:8c:61:ba:88:66:41:5c:2e:
d9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4C:07:BB:A0:03:61:3D:6F:71:03:81:BC:16:CE:3A:DD:57:88:E0
X509v3 Authority Key Identifier:
keyid:1C:06:86:63:13:D6:68:AF:E8:79:86:FA:E5:FF:79:41:F9:28:06:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaGYxPWaK_oeYb65f95QfkoBps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/1ceddd-98d1-47fd-b30c-6ab98d36dac6/1/HAaGYxPWaK_oeYb65f95QfkoBps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/1ceddd-98d1-47fd-b30c-6ab98d36dac6/1/HAaGYxPWaK_oeYb65f95QfkoBps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:8f:1e:24:67:b6:ce:9f:96:d2:2e:15:63:84:b7:5a:68:8d:
ee:85:a5:c1:dd:46:1a:52:b2:0c:b3:ae:c2:ac:8e:18:e6:33:
b7:89:ba:c3:49:f9:f7:bd:3e:8c:e2:d0:ea:bd:bf:e2:cb:69:
6f:a0:fb:93:49:1f:b5:28:6e:5b:06:ac:62:f2:e4:2d:65:1f:
53:0d:94:12:e5:8c:10:a8:aa:6f:a0:3b:ee:ff:af:39:60:63:
62:70:db:30:2d:b4:62:c0:de:5b:a1:9e:aa:d4:60:97:58:c0:
76:00:fd:c3:c2:cf:d8:41:a5:d0:5d:db:e1:d4:ae:fa:19:cc:
8a:2e:a7:3d:fe:14:f3:c0:44:93:fd:00:4a:79:c5:81:a6:79:
74:5a:9b:1c:57:05:cc:9b:7a:4e:0b:66:1a:02:43:41:2d:ce:
a0:06:70:c2:db:97:70:e7:1c:59:a8:02:8b:3b:e6:99:65:79:
f8:a6:62:06:72:aa:27:56:48:54:dc:fd:2e:b6:a2:31:1e:7a:
26:d8:d9:63:43:dd:41:b2:f9:d6:36:a0:ec:46:1d:c4:d8:06:
76:88:7d:ae:a3:4e:05:f8:33:8a:fe:a1:30:f6:61:11:77:00:
5b:6b:7c:a2:11:0a:f2:1d:29:08:6d:88:aa:e4:87:ed:d3:88:
e3:ad:71:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:25 2026 by rpki-client