Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
File: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft (raw, json)
Hash identifier: SEHKCZ5wVv6sJ/JbJ11Cd2U1KG2QjLpWGg1qzpcwfJs=
Subject key identifier: 77:A6:F2:DC:C8:5C:16:98:58:23:C3:8E:5E:B1:F2:34:AC:B5:92:4B
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial: 019DF2DCFBFB068766764E258A134FABCE6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
Manifest number: 15CA
Signing time: Mon 04 May 2026 12:01:01 +0000
Manifest this update: Mon 04 May 2026 12:01:01 +0000
Manifest next update: Tue 05 May 2026 12:01:01 +0000
Files and hashes: 1: 4mHpvx9LkY6t4I-sMJMoaWx8VF0.roa (hash: TQ6l7XAp2vjcp5JOmsdpz5IqQGsnKehqiFiPx6igx/8=)
2: 9hVZarMZXXFecBErtuPkYLQrriE.roa (hash: KsiiLeHicnzuMLdpx8BniCnY9e3C72b9G03ZzbEor1A=)
3: 9m20uAAFdgNoVQH3076gaYQmYYU.roa (hash: ly6A2Lm/ZdDnqWIOLhpR56go+OLBASNK0cUewK9eTjc=)
4: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl (hash: KSx4clpiLVZ6q7531xC/H2x8JS//DkM4M034VCqc/ds=)
5: I2kYVGgTXf3beeheYP4NYqvlsqo.roa (hash: +1MdfvNf88UVk1eBDOjY75bUfmqtSM1iSrahOzZLtS8=)
6: QDsntjcOt3fxAoY-_3bsGRuRxHo.roa (hash: 8Wg5bkOdvAsky6YfIg1CDs57PHLp5vOyQI0z4fcD3vE=)
7: cOY-DC2HVK8oGsGuJBqrFqkU9C8.roa (hash: MwPd12qekQ7oRDjQ5MzO5S3l6bIuuruJk/odjgKUjg4=)
8: vdZ7NAZKpOOWfxeuOtoKVqSmi9o.roa (hash: nGN4JdghU2JG9U+xki8YfeD2LkJmHUGqq8eet8nt3TI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 May 2026 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f2:dc:fb:fb:06:87:66:76:4e:25:8a:13:4f:ab:ce:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Validity
Not Before: May 4 12:01:01 2026 GMT
Not After : May 5 12:01:01 2026 GMT
Subject: CN=77a6f2dcc85c16985823c38e5eb1f234acb5924b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f6:c1:56:99:4c:bf:76:f3:a5:2e:8a:d7:c6:
36:a7:fd:a9:8e:29:13:ac:00:ae:54:ad:78:71:5b:
43:35:28:b0:4d:2b:07:d0:3b:6f:1f:9d:40:64:58:
9d:cd:1d:84:b0:ca:28:e2:a6:d2:2a:bc:ef:20:c5:
e5:25:d1:8b:a6:07:28:0c:43:34:7a:5d:35:7c:8f:
6e:58:0a:02:88:df:30:f2:fd:fd:2d:fb:0a:93:d6:
b9:ab:2c:31:06:27:84:c3:bc:7c:4b:64:e4:80:d6:
ea:10:10:44:f1:6c:64:45:1d:92:51:1e:ac:19:dc:
ab:55:7e:a3:9e:25:f8:3d:63:e4:d6:31:0b:6e:2f:
d9:3c:12:97:0a:4f:35:43:3e:45:0d:e7:27:57:7b:
69:ab:e1:81:dd:8d:fd:ec:72:2c:40:e1:3e:65:dc:
50:e6:57:f1:52:fc:12:5f:ef:fa:74:be:6b:24:66:
95:98:4e:f5:bd:c2:77:d3:90:3a:df:9f:bf:e5:20:
7e:23:be:a0:96:9c:6e:04:bc:49:52:52:62:26:34:
51:a4:86:22:d6:1d:77:62:fc:ed:c3:f4:d9:d7:16:
46:46:f5:9a:38:c3:07:88:40:9f:87:ef:b1:3c:a9:
57:01:28:a7:47:82:fa:e4:95:e9:ef:fb:02:91:71:
59:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A6:F2:DC:C8:5C:16:98:58:23:C3:8E:5E:B1:F2:34:AC:B5:92:4B
X509v3 Authority Key Identifier:
keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:21:3b:3f:55:59:d4:d2:c7:eb:4d:f8:cf:b3:7f:b7:19:db:
d9:52:31:ae:c2:e3:f1:ac:d1:d2:50:0b:b3:0a:f2:da:41:fc:
8e:a8:20:b7:76:12:9f:5d:51:81:0b:21:95:94:41:d1:98:84:
ce:c4:95:b7:79:14:4d:af:cd:65:26:dc:c7:12:20:a2:9d:0a:
3b:5d:89:79:13:2b:1c:18:70:29:92:e0:71:cd:10:58:32:b0:
a7:64:9d:a8:c9:3a:10:db:f7:c5:f6:ed:ca:16:fd:b7:a5:70:
76:0a:ca:ee:f1:a1:dd:ce:d6:33:64:19:30:73:ef:d9:c2:1c:
c1:a0:1b:6d:8e:f1:58:df:06:5a:0c:18:19:be:d4:c4:f4:e4:
a5:57:4b:a3:e9:b9:8a:51:0a:91:5b:fa:74:f9:43:f0:50:bb:
ff:41:20:dd:f8:f8:47:07:a9:2c:68:9d:61:f6:e3:3b:8b:6e:
73:81:8f:bb:4e:3e:8c:a6:fb:46:9c:e9:6e:8a:87:e9:d5:ff:
71:29:c1:a3:aa:97:eb:2a:0d:56:32:97:9f:8a:b5:34:89:99:
77:8d:4d:f2:2f:82:3c:9c:62:0c:f1:d6:7e:6b:a4:11:b5:63:
2d:b4:9e:43:91:4b:ff:01:d1:63:28:42:69:ad:ff:87:42:88:
2c:c7:d0:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3y3Pv7Bodmdk4lihNPq85vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMDZhODJiYjExNWQ3MzkzZTM5ZmQ1OGI3M2JiZjIwZjZj
ZDBiMWYwHhcNMjYwNTA0MTIwMTAxWhcNMjYwNTA1MTIwMTAxWjAzMTEwLwYDVQQD
Eyg3N2E2ZjJkY2M4NWMxNjk4NTgyM2MzOGU1ZWIxZjIzNGFjYjU5MjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/bBVplMv3bzpS6K18Y2p/2pjikT
rACuVK14cVtDNSiwTSsH0DtvH51AZFidzR2EsMoo4qbSKrzvIMXlJdGLpgcoDEM0
el01fI9uWAoCiN8w8v39LfsKk9a5qywxBieEw7x8S2TkgNbqEBBE8WxkRR2SUR6s
GdyrVX6jniX4PWPk1jELbi/ZPBKXCk81Qz5FDecnV3tpq+GB3Y397HIsQOE+ZdxQ
5lfxUvwSX+/6dL5rJGaVmE71vcJ305A635+/5SB+I76glpxuBLxJUlJiJjRRpIYi
1h13Yvztw/TZ1xZGRvWaOMMHiECfh++xPKlXASinR4L65JXp7/sCkXFZRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHem8tzIXBaYWCPDjl6x8jSstZJLMB8GA1UdIwQY
MBaAFBwGqCuxFdc5Pjn9WLc7vyD2zQsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUt
NzI2MDU3YTFmMmE0LzEvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUtNzI2MDU3YTFmMmE0
LzEvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgCE7P1VZ
1NLH6034z7N/txnb2VIxrsLj8azR0lALswry2kH8jqggt3YSn11RgQshlZRB0ZiE
zsSVt3kUTa/NZSbcxxIgop0KO12JeRMrHBhwKZLgcc0QWDKwp2SdqMk6ENv3xfbt
yhb9t6VwdgrK7vGh3c7WM2QZMHPv2cIcwaAbbY7xWN8GWgwYGb7UxPTkpVdLo+m5
ilEKkVv6dPlD8FC7/0Eg3fj4RwepLGidYfbjO4tuc4GPu04+jKb7RpzpboqH6dX/
cSnBo6qX6yoNVjKXn4q1NImZd41N8i+CPJxiDPHWfmukEbVjLbSeQ5FL/wHRYyhC
aa3/h0KILMfQXQ==
-----END CERTIFICATE-----
Generated at Mon May 4 20:49:27 2026 by rpki-client