Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/ha9TEIBex1YaGiL5yJDJcx-23r8.mft
File: ha9TEIBex1YaGiL5yJDJcx-23r8.mft (raw, json)
Hash identifier: ULKYN0RtS1MBGy9PuV2EvtOe8mQcUZ/BuC/ACTXtJGQ=
Subject key identifier: 34:F2:78:31:3C:51:87:57:94:10:2F:1A:79:01:B3:AC:25:01:69:19
Authority key identifier: 85:AF:53:10:80:5E:C7:56:1A:1A:22:F9:C8:90:C9:73:1F:B6:DE:BF
Certificate issuer: /CN=85af5310805ec7561a1a22f9c890c9731fb6debf
Certificate serial: 019FF9B689991006D4A656A72F6EF3DA84E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ha9TEIBex1YaGiL5yJDJcx-23r8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/ha9TEIBex1YaGiL5yJDJcx-23r8.mft
Manifest number: 1A00
Signing time: Thu 13 Aug 2026 06:01:57 +0000
Manifest this update: Thu 13 Aug 2026 06:01:57 +0000
Manifest next update: Fri 14 Aug 2026 06:01:57 +0000
Files and hashes: 1: CMoH5Cyx1SfbFkp_AVi7WFSimSI.roa (hash: UPKbCnfFUk0J12uscJpZ+uKcHazd2OTNHLlOMouWxhg=)
2: ha9TEIBex1YaGiL5yJDJcx-23r8.crl (hash: 31dI/dwZSdrsv+ieev0xhz3R+j4V1lcD8/QiYLzA/D8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/ha9TEIBex1YaGiL5yJDJcx-23r8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/ha9TEIBex1YaGiL5yJDJcx-23r8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ha9TEIBex1YaGiL5yJDJcx-23r8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 06:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:b6:89:99:10:06:d4:a6:56:a7:2f:6e:f3:da:84:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85af5310805ec7561a1a22f9c890c9731fb6debf
Validity
Not Before: Aug 13 06:01:57 2026 GMT
Not After : Aug 14 06:01:57 2026 GMT
Subject: CN=34f278313c51875794102f1a7901b3ac25016919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b8:08:96:92:19:d8:3a:5d:e2:0e:a3:f4:a5:
0b:44:d2:cf:f1:4a:85:45:63:68:1d:b6:1d:3f:53:
07:91:16:ed:34:f9:9f:d4:9d:83:5d:1b:e1:16:4b:
c0:7e:1a:23:9a:5f:e4:b6:a6:f6:47:4e:78:31:45:
40:69:fb:22:81:b8:3a:03:8e:06:71:11:8a:53:3d:
cf:65:c7:b9:97:73:8a:84:cb:99:d5:6b:2f:c0:ca:
b5:3b:30:7b:85:ba:6a:0a:b8:b1:6a:47:c6:63:e8:
51:a6:f0:78:63:66:5d:2b:a0:82:64:cc:fd:a0:72:
7a:ac:12:37:3f:bc:aa:21:21:da:b3:3e:ce:17:69:
e1:6a:9e:6e:89:98:11:ac:90:5d:d1:db:9d:13:d5:
59:b6:52:88:db:cf:09:ea:73:a1:99:a3:87:fa:8f:
66:c0:1c:fa:c2:d1:53:c4:5c:f3:c9:f7:a0:bb:da:
6c:95:fd:4b:79:0e:56:84:96:59:fe:1c:17:e8:40:
da:d4:59:e0:b1:d1:40:92:ce:2d:1d:2d:78:20:9f:
13:9f:f6:8b:de:a3:0c:cd:f7:fe:13:3e:fe:3f:19:
ae:96:07:02:e4:34:85:01:f9:ad:c8:19:53:68:fe:
0f:10:9b:6f:5e:2d:66:ba:6c:66:20:5e:ae:65:77:
49:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F2:78:31:3C:51:87:57:94:10:2F:1A:79:01:B3:AC:25:01:69:19
X509v3 Authority Key Identifier:
keyid:85:AF:53:10:80:5E:C7:56:1A:1A:22:F9:C8:90:C9:73:1F:B6:DE:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ha9TEIBex1YaGiL5yJDJcx-23r8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/ha9TEIBex1YaGiL5yJDJcx-23r8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/ha9TEIBex1YaGiL5yJDJcx-23r8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:24:9c:ad:0e:d3:8d:ae:e5:ab:a0:78:84:a9:9b:e5:07:26:
f3:eb:0a:2a:d3:2f:1b:dc:fa:3c:11:2e:02:14:93:09:50:89:
be:e7:d9:2d:ea:3b:55:2d:6d:f5:b6:f0:fa:7b:62:4d:8f:25:
d4:7d:e4:32:45:f5:bc:0b:fc:25:bb:70:8e:63:8f:2c:6b:9b:
67:02:e8:ba:8e:df:d1:80:75:3f:38:64:e1:38:a3:5b:f2:29:
88:f0:d6:f0:e7:cf:cd:ee:bf:98:e6:a8:18:27:9a:ee:f0:46:
3a:6c:e9:32:82:59:38:98:75:41:1e:70:7f:49:03:80:ac:4a:
45:a8:9a:5c:d4:2b:dd:8d:25:5b:16:22:c8:1d:1f:b7:67:0e:
4f:ac:9e:7f:21:09:49:d8:ff:b2:26:bb:71:c5:6b:dd:81:58:
cc:bb:57:ec:c3:81:06:04:bb:c9:93:20:aa:b4:2c:b7:28:bb:
e5:0a:7a:b3:a9:a1:16:e8:2f:be:ba:e8:2d:c7:46:9c:8c:d2:
f8:c6:27:c9:5e:fe:f3:60:71:4b:19:45:c8:49:58:06:3b:ab:
64:ed:66:48:c8:b1:45:98:4c:3c:26:0a:0f:ea:89:f8:6a:d2:
62:49:fa:fb:04:57:be:46:ce:05:b0:2d:02:bf:1e:50:1c:f9:
fe:85:aa:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/5tomZEAbUplanL27z2oTlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1YWY1MzEwODA1ZWM3NTYxYTFhMjJmOWM4OTBjOTczMWZi
NmRlYmYwHhcNMjYwODEzMDYwMTU3WhcNMjYwODE0MDYwMTU3WjAzMTEwLwYDVQQD
EygzNGYyNzgzMTNjNTE4NzU3OTQxMDJmMWE3OTAxYjNhYzI1MDE2OTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLgIlpIZ2Dpd4g6j9KULRNLP8UqF
RWNoHbYdP1MHkRbtNPmf1J2DXRvhFkvAfhojml/ktqb2R054MUVAafsigbg6A44G
cRGKUz3PZce5l3OKhMuZ1WsvwMq1OzB7hbpqCrixakfGY+hRpvB4Y2ZdK6CCZMz9
oHJ6rBI3P7yqISHasz7OF2nhap5uiZgRrJBd0dudE9VZtlKI288J6nOhmaOH+o9m
wBz6wtFTxFzzyfegu9pslf1LeQ5WhJZZ/hwX6EDa1FngsdFAks4tHS14IJ8Tn/aL
3qMMzff+Ez7+PxmulgcC5DSFAfmtyBlTaP4PEJtvXi1mumxmIF6uZXdJzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDTyeDE8UYdXlBAvGnkBs6wlAWkZMB8GA1UdIwQY
MBaAFIWvUxCAXsdWGhoi+ciQyXMftt6/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGE5VEVJQmV4MVlhR2lMNXlKREpjeC0yM3I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8wMDE0MDYtMmUxZi00YWViLTkwYTct
NzUyODM1MGQ0YzEzLzEvaGE5VEVJQmV4MVlhR2lMNXlKREpjeC0yM3I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8wMDE0MDYtMmUxZi00YWViLTkwYTctNzUyODM1MGQ0YzEz
LzEvaGE5VEVJQmV4MVlhR2lMNXlKREpjeC0yM3I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABSScrQ7T
ja7lq6B4hKmb5Qcm8+sKKtMvG9z6PBEuAhSTCVCJvufZLeo7VS1t9bbw+ntiTY8l
1H3kMkX1vAv8JbtwjmOPLGubZwLouo7f0YB1Pzhk4TijW/IpiPDW8OfPze6/mOao
GCea7vBGOmzpMoJZOJh1QR5wf0kDgKxKRaiaXNQr3Y0lWxYiyB0ft2cOT6yefyEJ
Sdj/sia7ccVr3YFYzLtX7MOBBgS7yZMgqrQstyi75Qp6s6mhFugvvrroLcdGnIzS
+MYnyV7+82BxSxlFyElYBjurZO1mSMixRZhMPCYKD+qJ+GrSYkn6+wRXvkbOBbAt
Ar8eUBz5/oWq4g==
-----END CERTIFICATE-----
Generated at Thu Aug 13 13:42:38 2026 by rpki-client