Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
File: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft (raw, json)
Hash identifier: rImrQ4IUSI0wBGx/ttxBT9SmUeiuhHKD3QKXovZ/4t0=
Subject key identifier: 01:72:39:30:B8:D2:CB:9B:33:10:43:12:47:53:DA:C0:3E:43:6E:5B
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial: 019CA4C3EB47EE832F4DEB5F1C0D071DF920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
Manifest number: 151B
Signing time: Sat 28 Feb 2026 15:00:29 +0000
Manifest this update: Sat 28 Feb 2026 15:00:29 +0000
Manifest next update: Sun 01 Mar 2026 15:00:29 +0000
Files and hashes: 1: 7tr02EpUIgM-HOku4hUZ5kLPFzU.roa (hash: KnxkjjUpMVBgQObR9BIU6ZkMGqLPWpaw72b9yunDWDA=)
2: 9hVZarMZXXFecBErtuPkYLQrriE.roa (hash: KsiiLeHicnzuMLdpx8BniCnY9e3C72b9G03ZzbEor1A=)
3: 9m20uAAFdgNoVQH3076gaYQmYYU.roa (hash: ly6A2Lm/ZdDnqWIOLhpR56go+OLBASNK0cUewK9eTjc=)
4: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl (hash: etV03ECysqOycJJxDlAuyuWR3rXdCPZl/risWLOsi7A=)
5: NGlmkCgm01T6khNRIi3SlPjUhn8.roa (hash: Ep6augckrz7DoH277AG4kWwV5ufRUKmF/zoXSa8Kack=)
6: OdQGWsy9c8XDU0zu8drNC-OWHho.roa (hash: pmkI9zAJgVjFylMbU79wV4Stohix0h2ULqEM+WHo6NU=)
7: QDsntjcOt3fxAoY-_3bsGRuRxHo.roa (hash: 8Wg5bkOdvAsky6YfIg1CDs57PHLp5vOyQI0z4fcD3vE=)
8: cOY-DC2HVK8oGsGuJBqrFqkU9C8.roa (hash: MwPd12qekQ7oRDjQ5MzO5S3l6bIuuruJk/odjgKUjg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Mar 2026 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a4:c3:eb:47:ee:83:2f:4d:eb:5f:1c:0d:07:1d:f9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Validity
Not Before: Feb 28 15:00:29 2026 GMT
Not After : Mar 1 15:00:29 2026 GMT
Subject: CN=01723930b8d2cb9b331043124753dac03e436e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bc:b7:a8:1e:95:2a:45:12:a7:c9:79:c8:9f:
53:28:2d:82:18:a8:8e:29:16:a1:43:ba:c1:a5:55:
cb:d7:98:13:46:f2:ab:5b:f7:5f:07:09:af:f6:85:
38:01:8a:26:1b:7f:a5:2a:96:d7:e4:3c:2c:b6:2a:
72:4b:87:10:07:f4:84:f9:9f:e7:dd:7a:56:ef:00:
59:49:50:63:ae:3d:03:24:df:87:29:d9:06:cf:e9:
08:87:9f:6b:76:39:1a:30:92:c7:d8:ec:e1:9d:08:
dc:ec:5a:6f:89:48:7e:7d:b1:fb:2c:3a:a7:3d:a0:
bc:2a:d5:69:c4:a0:a5:19:29:1b:e5:b7:95:30:d6:
e9:e4:6c:ef:1f:af:fb:34:2f:29:35:f3:28:ba:89:
0f:e0:83:a4:9c:e5:1e:b4:68:ee:f0:a4:a0:28:d2:
89:fd:ef:e7:49:51:bd:31:29:c2:79:26:75:95:b2:
68:20:ee:59:c2:52:f8:de:f1:95:54:49:a4:7c:89:
bd:c2:fa:96:7e:f0:42:e1:05:4f:e2:c4:71:1c:97:
5a:44:17:8c:f1:53:7f:1b:17:c3:dd:f8:6a:f5:45:
a5:cc:28:15:43:f0:ae:f0:1e:e1:d0:ed:69:16:31:
c9:cd:c5:61:8a:a5:4d:5f:cc:63:ec:f2:19:66:88:
52:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:72:39:30:B8:D2:CB:9B:33:10:43:12:47:53:DA:C0:3E:43:6E:5B
X509v3 Authority Key Identifier:
keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b6:0d:ca:05:04:fe:69:c8:15:52:e5:0f:fd:ae:71:61:10:
70:91:65:20:93:a5:4c:8a:68:b9:7b:54:a9:c1:ec:08:fe:e3:
f9:9e:78:1d:e7:7a:4f:fd:f3:e3:49:c5:1b:a2:1e:ea:e0:ca:
14:ff:26:7f:36:c8:4c:19:15:db:67:a0:8e:e0:c0:3b:9e:49:
a7:ee:f1:02:38:13:9b:0a:8a:9a:d7:ab:19:3a:13:36:40:80:
bf:43:af:fd:5e:b4:7b:49:3c:62:df:a8:c2:b7:ca:be:88:8b:
1e:1f:e1:d3:26:2b:54:d5:24:82:d2:51:9d:6a:37:37:c6:71:
9d:9b:89:e2:c9:5e:f4:13:e4:8a:26:d0:ba:10:3f:ce:c6:a2:
ea:d7:0e:29:8e:55:13:5d:13:07:95:ae:6d:e3:6c:8a:52:cf:
38:68:be:df:c4:be:f0:d6:ef:68:64:09:ee:20:5b:f8:e2:e2:
78:ca:8e:e1:c7:80:0e:d1:5f:d5:77:08:6f:13:32:3c:df:ca:
70:0f:2c:9a:b2:86:c5:f4:39:ed:c2:be:2e:9a:de:54:2c:69:
46:af:75:48:0d:b6:8c:5d:c6:ae:43:c0:34:6d:c0:3f:91:16:
73:77:b3:b5:f7:cc:dd:7c:44:f0:2e:f9:47:d1:70:c7:74:53:
5f:79:7f:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZykw+tH7oMvTetfHA0HHfkgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMDZhODJiYjExNWQ3MzkzZTM5ZmQ1OGI3M2JiZjIwZjZj
ZDBiMWYwHhcNMjYwMjI4MTUwMDI5WhcNMjYwMzAxMTUwMDI5WjAzMTEwLwYDVQQD
EygwMTcyMzkzMGI4ZDJjYjliMzMxMDQzMTI0NzUzZGFjMDNlNDM2ZTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7y3qB6VKkUSp8l5yJ9TKC2CGKiO
KRahQ7rBpVXL15gTRvKrW/dfBwmv9oU4AYomG3+lKpbX5DwstipyS4cQB/SE+Z/n
3XpW7wBZSVBjrj0DJN+HKdkGz+kIh59rdjkaMJLH2OzhnQjc7FpviUh+fbH7LDqn
PaC8KtVpxKClGSkb5beVMNbp5GzvH6/7NC8pNfMouokP4IOknOUetGju8KSgKNKJ
/e/nSVG9MSnCeSZ1lbJoIO5ZwlL43vGVVEmkfIm9wvqWfvBC4QVP4sRxHJdaRBeM
8VN/GxfD3fhq9UWlzCgVQ/Cu8B7h0O1pFjHJzcVhiqVNX8xj7PIZZohStwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFyOTC40subMxBDEkdT2sA+Q25bMB8GA1UdIwQY
MBaAFBwGqCuxFdc5Pjn9WLc7vyD2zQsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUt
NzI2MDU3YTFmMmE0LzEvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUtNzI2MDU3YTFmMmE0
LzEvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI7YNygUE
/mnIFVLlD/2ucWEQcJFlIJOlTIpouXtUqcHsCP7j+Z54Hed6T/3z40nFG6Ie6uDK
FP8mfzbITBkV22egjuDAO55Jp+7xAjgTmwqKmterGToTNkCAv0Ov/V60e0k8Yt+o
wrfKvoiLHh/h0yYrVNUkgtJRnWo3N8ZxnZuJ4sle9BPkiibQuhA/zsai6tcOKY5V
E10TB5WubeNsilLPOGi+38S+8NbvaGQJ7iBb+OLieMqO4ceADtFf1XcIbxMyPN/K
cA8smrKGxfQ57cK+LpreVCxpRq91SA22jF3GrkPANG3AP5EWc3eztffM3XxE8C75
R9Fwx3RTX3l/lQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 00:30:31 2026 by rpki-client