Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
File: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft (raw, json)
Hash identifier: PfSeR+/C/1d6xuaq+AmooeXttQNyNKBB3bkuYrpm/vI=
Subject key identifier: 4D:4A:92:D0:D7:8A:19:E9:A0:94:7B:9F:BF:5E:80:1C:7D:B5:04:88
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial: 019CBFCD4D346F0DDB7BE7EE018D94D7B177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
Manifest number: 152A
Signing time: Thu 05 Mar 2026 21:00:28 +0000
Manifest this update: Thu 05 Mar 2026 21:00:28 +0000
Manifest next update: Fri 06 Mar 2026 21:00:28 +0000
Files and hashes: 1: 9hVZarMZXXFecBErtuPkYLQrriE.roa (hash: KsiiLeHicnzuMLdpx8BniCnY9e3C72b9G03ZzbEor1A=)
2: 9m20uAAFdgNoVQH3076gaYQmYYU.roa (hash: ly6A2Lm/ZdDnqWIOLhpR56go+OLBASNK0cUewK9eTjc=)
3: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl (hash: +Qv4CSIs+MIvbwC6ksKbbFs9KpDh2JHiW8twe+jQUnw=)
4: I2kYVGgTXf3beeheYP4NYqvlsqo.roa (hash: +1MdfvNf88UVk1eBDOjY75bUfmqtSM1iSrahOzZLtS8=)
5: QDsntjcOt3fxAoY-_3bsGRuRxHo.roa (hash: 8Wg5bkOdvAsky6YfIg1CDs57PHLp5vOyQI0z4fcD3vE=)
6: cOY-DC2HVK8oGsGuJBqrFqkU9C8.roa (hash: MwPd12qekQ7oRDjQ5MzO5S3l6bIuuruJk/odjgKUjg4=)
7: jKnv8Hl298ULyF7AoE6ZHcljJwE.roa (hash: TA8MQ/eJxiYGg6c5Dgiv14NsF16+iZvCNQxTM8OPxss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bf:cd:4d:34:6f:0d:db:7b:e7:ee:01:8d:94:d7:b1:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Validity
Not Before: Mar 5 21:00:28 2026 GMT
Not After : Mar 6 21:00:28 2026 GMT
Subject: CN=4d4a92d0d78a19e9a0947b9fbf5e801c7db50488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:99:ca:c5:20:e0:e0:82:db:b3:17:d6:7e:98:
ab:d5:cd:17:84:4f:d7:78:58:82:52:6d:25:8d:b5:
3c:fd:5e:f2:6a:d7:32:03:36:31:64:eb:9e:d5:9b:
52:f1:3a:45:80:bb:26:53:e7:27:9e:9e:0d:c8:c4:
07:e2:c2:f2:75:1b:4d:f1:a6:84:65:d6:3d:e8:25:
21:a6:35:a3:59:40:0c:86:cb:ed:e6:e1:c4:1a:09:
37:31:a6:ea:2e:73:6d:32:a0:de:2f:39:3a:f9:be:
f0:29:04:20:6d:3f:46:b3:2b:cf:b6:4f:12:34:53:
0e:7b:d9:fd:22:38:f9:57:d5:c1:4a:ed:48:df:00:
5c:70:62:d4:5a:c5:75:f5:ed:63:8f:6f:b4:85:05:
11:ef:03:d1:70:47:60:1d:01:bb:d2:be:1e:17:bd:
20:f3:0d:83:96:57:3c:dc:09:1a:09:24:64:1b:86:
75:a1:2c:85:49:80:97:cc:9c:16:76:88:d2:78:b6:
fa:63:75:00:26:1b:e3:ab:b4:b9:1e:72:7c:a1:a4:
21:43:9c:be:74:80:9b:6d:7e:98:fb:0c:1b:9e:dc:
2f:57:0e:25:2b:f8:00:86:7b:bb:31:c1:43:5f:ca:
04:0a:cc:6c:a3:31:ac:69:6c:1d:40:c0:13:9c:ea:
46:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4A:92:D0:D7:8A:19:E9:A0:94:7B:9F:BF:5E:80:1C:7D:B5:04:88
X509v3 Authority Key Identifier:
keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:1a:db:4c:5d:6c:15:d7:45:07:39:f3:94:e5:2d:3f:45:07:
22:3d:8e:4c:7d:85:79:fc:0a:a3:d8:ab:e5:9e:1b:ad:8a:bf:
f2:fa:64:6d:57:09:38:ae:e2:8c:3c:9f:9f:64:ff:c1:9c:d7:
d2:a5:26:fc:79:bf:f1:94:c0:84:d8:92:ea:f8:39:e2:d2:ee:
d3:66:f0:29:d1:6d:d5:76:1d:82:ce:77:c2:b5:32:b8:12:ab:
79:e6:aa:d9:67:45:cf:89:61:a7:3f:05:f7:12:08:f2:0f:ff:
19:fe:29:e6:55:23:3e:a3:7e:93:65:39:7b:be:e3:6d:72:10:
83:be:1e:96:db:fc:0f:40:a3:c4:4a:03:6d:db:2c:d9:7d:d7:
7e:e1:33:33:15:ab:53:30:2d:6a:2f:13:0c:25:1f:90:94:bf:
bf:1f:85:98:63:65:c8:57:3c:3e:70:0e:5b:ae:f8:b5:08:4c:
63:27:62:bb:76:62:7d:8a:65:ca:84:60:e5:5d:dd:17:d1:21:
25:85:f4:c8:2f:ed:a7:8a:4d:10:89:06:23:d3:96:03:a6:33:
db:87:e4:f3:51:25:92:1a:19:dc:06:db:66:be:85:56:f2:9e:
41:ac:77:70:79:e4:03:91:e4:d0:58:b5:24:ff:ed:57:23:98:
11:36:72:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 06:39:08 2026 by rpki-client