Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
File: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft (raw, json)
Hash identifier: 5OLMX2DlnMbhvA7J6UZZaN9TBXG9MK5s4uXZmYS7eFU=
Subject key identifier: A7:72:E8:53:13:AA:8D:DA:CF:32:0F:96:FA:5E:4B:20:84:4C:FB:43
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial: 019F0F9AFBA7DAFF2ADE1F182F0F2C8E0B1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
Manifest number: 165E
Signing time: Sun 28 Jun 2026 19:00:42 +0000
Manifest this update: Sun 28 Jun 2026 19:00:42 +0000
Manifest next update: Mon 29 Jun 2026 19:00:42 +0000
Files and hashes: 1: 4mHpvx9LkY6t4I-sMJMoaWx8VF0.roa (hash: TQ6l7XAp2vjcp5JOmsdpz5IqQGsnKehqiFiPx6igx/8=)
2: 9hVZarMZXXFecBErtuPkYLQrriE.roa (hash: KsiiLeHicnzuMLdpx8BniCnY9e3C72b9G03ZzbEor1A=)
3: 9m20uAAFdgNoVQH3076gaYQmYYU.roa (hash: ly6A2Lm/ZdDnqWIOLhpR56go+OLBASNK0cUewK9eTjc=)
4: Eg2EGWU0muHyssilrxeeQBjKbvk.roa (hash: wy9mHmoh2oNmnAMgYgnKyL3/vaCOlR30B/2LCFJDYyc=)
5: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl (hash: UKLtjkKtGDUUx2IDEosweJkLMPWw5f16HMNvyKgfwR4=)
6: I2kYVGgTXf3beeheYP4NYqvlsqo.roa (hash: +1MdfvNf88UVk1eBDOjY75bUfmqtSM1iSrahOzZLtS8=)
7: OOgM0-iyUugGKM1AErBHV3ak228.roa (hash: CzxOqgB3SowyUJL8kJyxpZhbGu+OOlEvXGgaW+6e45A=)
8: QDsntjcOt3fxAoY-_3bsGRuRxHo.roa (hash: 8Wg5bkOdvAsky6YfIg1CDs57PHLp5vOyQI0z4fcD3vE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Jun 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0f:9a:fb:a7:da:ff:2a:de:1f:18:2f:0f:2c:8e:0b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Validity
Not Before: Jun 28 19:00:42 2026 GMT
Not After : Jun 29 19:00:42 2026 GMT
Subject: CN=a772e85313aa8ddacf320f96fa5e4b20844cfb43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fe:5e:7f:01:2b:7f:ee:2b:41:d3:47:23:d9:
ed:40:b5:f8:4b:9d:a1:80:70:73:37:8d:f2:f0:2f:
1f:4a:42:52:91:75:ba:e9:ea:dc:8c:a9:1b:6f:b2:
64:35:ca:02:dd:85:3b:94:74:42:77:b8:42:7b:66:
5a:8f:c1:10:02:f9:84:fd:af:93:7a:dd:dd:a2:da:
27:37:17:fa:50:1a:f9:9a:07:42:ba:7e:82:74:d3:
a3:2a:23:b2:ea:b5:90:07:17:9b:52:31:7d:1d:bd:
98:05:14:52:09:3b:34:c7:83:d2:d1:37:05:cc:ef:
89:e3:36:95:eb:d1:cc:62:1a:e6:14:9d:d1:de:cd:
80:19:e6:06:bc:73:62:bc:5d:f1:da:b1:89:e3:db:
24:c9:7d:c8:20:52:60:35:5e:c0:c5:e8:72:6c:d1:
1d:84:c0:8f:e0:0c:a1:60:56:96:d1:ac:c9:7a:58:
36:05:8d:9d:6f:b8:9b:f7:58:79:5b:07:55:48:6a:
fd:4b:aa:bc:19:c5:4f:22:21:f6:ac:b3:86:68:a9:
74:c9:fe:57:3d:d4:0f:fa:40:4d:46:44:08:a7:63:
70:10:1c:60:82:60:70:da:c3:83:a0:e9:a3:ef:56:
9d:be:36:f2:33:23:2a:c5:74:c8:70:49:00:d4:ca:
44:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:72:E8:53:13:AA:8D:DA:CF:32:0F:96:FA:5E:4B:20:84:4C:FB:43
X509v3 Authority Key Identifier:
keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:28:b6:35:26:8d:00:f4:ec:7f:db:18:10:96:ad:e6:7a:3e:
c0:64:dd:54:23:5b:09:8e:e8:bb:a4:bf:aa:7d:a5:24:8f:9a:
21:45:fd:04:9a:b4:5c:b0:e9:70:84:54:52:bd:42:6c:a3:45:
ce:0b:87:01:05:0a:ba:58:da:e9:dc:79:40:ca:57:1b:76:25:
7c:82:50:e8:b2:0a:db:86:b1:73:a6:b3:9a:16:6c:01:41:e3:
99:37:88:dd:ba:7e:af:0c:4a:ed:6a:9d:63:81:b0:2d:8c:bb:
37:6b:03:39:93:0a:0b:bf:70:00:a8:3c:05:14:3c:35:0d:a6:
26:28:ed:1c:42:c2:36:a4:9b:07:c8:15:0b:f0:e3:15:41:e6:
70:c1:19:64:a6:59:58:6b:d9:fc:90:96:47:34:a4:11:51:76:
dd:c5:6b:a7:f5:64:91:70:88:74:2e:39:06:c6:2a:fb:66:dd:
1e:ab:a7:c0:4d:e2:a1:d5:bf:fc:cc:79:64:98:86:38:a3:f0:
e0:99:fc:5a:fc:ff:16:7a:7a:11:b0:23:05:6a:fd:4f:f4:51:
82:8a:93:ab:aa:f7:4f:70:2e:53:5e:6e:ca:1e:b3:8e:90:53:
31:19:32:c1:ae:64:46:ee:05:60:d8:0f:07:2e:a2:2e:94:82:
e6:cd:55:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Pmvun2v8q3h8YLw8sjgsaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMDZhODJiYjExNWQ3MzkzZTM5ZmQ1OGI3M2JiZjIwZjZj
ZDBiMWYwHhcNMjYwNjI4MTkwMDQyWhcNMjYwNjI5MTkwMDQyWjAzMTEwLwYDVQQD
EyhhNzcyZTg1MzEzYWE4ZGRhY2YzMjBmOTZmYTVlNGIyMDg0NGNmYjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv5efwErf+4rQdNHI9ntQLX4S52h
gHBzN43y8C8fSkJSkXW66ercjKkbb7JkNcoC3YU7lHRCd7hCe2Zaj8EQAvmE/a+T
et3dotonNxf6UBr5mgdCun6CdNOjKiOy6rWQBxebUjF9Hb2YBRRSCTs0x4PS0TcF
zO+J4zaV69HMYhrmFJ3R3s2AGeYGvHNivF3x2rGJ49skyX3IIFJgNV7AxehybNEd
hMCP4AyhYFaW0azJelg2BY2db7ib91h5WwdVSGr9S6q8GcVPIiH2rLOGaKl0yf5X
PdQP+kBNRkQIp2NwEBxggmBw2sODoOmj71advjbyMyMqxXTIcEkA1MpEVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdy6FMTqo3azzIPlvpeSyCETPtDMB8GA1UdIwQY
MBaAFBwGqCuxFdc5Pjn9WLc7vyD2zQsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUt
NzI2MDU3YTFmMmE0LzEvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUtNzI2MDU3YTFmMmE0
LzEvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPSi2NSaN
APTsf9sYEJat5no+wGTdVCNbCY7ou6S/qn2lJI+aIUX9BJq0XLDpcIRUUr1CbKNF
zguHAQUKulja6dx5QMpXG3YlfIJQ6LIK24axc6azmhZsAUHjmTeI3bp+rwxK7Wqd
Y4GwLYy7N2sDOZMKC79wAKg8BRQ8NQ2mJijtHELCNqSbB8gVC/DjFUHmcMEZZKZZ
WGvZ/JCWRzSkEVF23cVrp/VkkXCIdC45BsYq+2bdHqunwE3iodW//Mx5ZJiGOKPw
4Jn8Wvz/Fnp6EbAjBWr9T/RRgoqTq6r3T3AuU15uyh6zjpBTMRkywa5kRu4FYNgP
By6iLpSC5s1VYQ==
-----END CERTIFICATE-----
Generated at Mon Jun 29 01:00:30 2026 by rpki-client