Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
File: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft (raw, json)
Hash identifier: O/MH3OI34RdaWZRkrsz79qt/1WDWKRA4uelFQQrvQLA=
Subject key identifier: 82:96:FB:02:2B:4C:BE:41:FF:D0:03:6D:34:46:53:59:50:CE:B7:D4
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial: 019D205CCCF0F4067A45E6B41C6EF17E7C42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
Manifest number: 155C
Signing time: Tue 24 Mar 2026 15:00:45 +0000
Manifest this update: Tue 24 Mar 2026 15:00:45 +0000
Manifest next update: Wed 25 Mar 2026 15:00:45 +0000
Files and hashes: 1: 9hVZarMZXXFecBErtuPkYLQrriE.roa (hash: KsiiLeHicnzuMLdpx8BniCnY9e3C72b9G03ZzbEor1A=)
2: 9m20uAAFdgNoVQH3076gaYQmYYU.roa (hash: ly6A2Lm/ZdDnqWIOLhpR56go+OLBASNK0cUewK9eTjc=)
3: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl (hash: cTmBjA5fwhvTaCMNp/xKUuJzB9PZZsDh3JEk88mm2ns=)
4: I2kYVGgTXf3beeheYP4NYqvlsqo.roa (hash: +1MdfvNf88UVk1eBDOjY75bUfmqtSM1iSrahOzZLtS8=)
5: QDsntjcOt3fxAoY-_3bsGRuRxHo.roa (hash: 8Wg5bkOdvAsky6YfIg1CDs57PHLp5vOyQI0z4fcD3vE=)
6: cOY-DC2HVK8oGsGuJBqrFqkU9C8.roa (hash: MwPd12qekQ7oRDjQ5MzO5S3l6bIuuruJk/odjgKUjg4=)
7: jKnv8Hl298ULyF7AoE6ZHcljJwE.roa (hash: TA8MQ/eJxiYGg6c5Dgiv14NsF16+iZvCNQxTM8OPxss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 15:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:20:5c:cc:f0:f4:06:7a:45:e6:b4:1c:6e:f1:7e:7c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Validity
Not Before: Mar 24 15:00:45 2026 GMT
Not After : Mar 25 15:00:45 2026 GMT
Subject: CN=8296fb022b4cbe41ffd0036d3446535950ceb7d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e3:20:f1:48:34:68:9b:a2:bc:21:bc:92:1c:
16:71:3d:64:d0:78:05:96:d8:ea:c8:01:47:d6:e5:
d5:73:e7:d9:17:aa:8b:dc:af:57:ed:d0:cf:f1:b6:
33:6f:cb:43:aa:69:a3:3f:03:48:42:57:54:99:ed:
83:6a:bb:77:50:fd:f2:7e:6f:31:00:50:52:d4:b1:
3f:e7:5b:47:7e:c2:5b:80:b5:48:41:be:bf:ae:7d:
cd:2a:e1:4c:a0:1d:e0:09:26:28:35:68:92:9a:39:
13:6e:23:da:24:75:ba:59:96:c3:c4:dd:86:ed:8b:
34:4c:53:f8:7c:14:1c:78:ac:dd:be:2a:1f:de:3d:
ed:b2:20:06:85:f8:d1:46:e0:10:a2:fd:5b:83:6d:
ae:54:db:d0:b4:99:2d:8b:28:c4:46:dc:62:f4:e6:
29:70:2e:fc:71:38:b9:d8:75:d8:63:55:ae:1d:8f:
50:14:c1:6d:c7:aa:44:54:d6:05:92:4a:b0:8d:cf:
52:d5:f6:28:13:6e:15:41:0a:2a:f5:75:fa:8d:92:
3e:1b:00:2c:e3:2a:21:e4:6e:f0:85:d8:6a:ca:75:
68:f8:f3:c4:fb:30:8d:b4:9a:9e:91:8d:04:96:1a:
50:63:9a:f3:0c:d1:af:43:3c:ef:80:aa:c9:9f:15:
95:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:96:FB:02:2B:4C:BE:41:FF:D0:03:6D:34:46:53:59:50:CE:B7:D4
X509v3 Authority Key Identifier:
keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:1e:f5:29:be:a3:3c:7a:42:d5:57:92:37:fc:d2:1f:ba:94:
2e:44:99:3b:a9:94:7b:c3:f8:0e:a9:b7:08:14:72:0c:5e:c0:
33:b1:bf:f1:01:9a:39:62:54:13:ab:31:cf:88:09:15:73:83:
78:0b:4f:52:c0:23:77:c3:1e:eb:43:9f:af:f6:93:32:7c:49:
8d:29:ec:38:f3:c6:7c:88:f7:69:cc:6c:cf:08:92:3d:8b:56:
e5:58:99:27:8e:15:98:c8:e5:eb:94:0d:5a:fe:d2:40:11:6a:
7f:f9:42:e3:cc:53:51:53:40:98:22:09:45:15:e1:5a:07:07:
00:5d:9b:f8:22:74:cf:55:36:14:7f:9e:53:84:89:98:99:cb:
50:41:be:0b:7c:a6:ca:47:23:3a:05:9d:8c:f7:06:f4:76:31:
07:df:25:e0:0e:f6:92:01:6e:d0:92:40:17:8f:ce:69:ff:8f:
50:10:5b:a9:4e:e0:ea:7b:21:a8:d2:e4:02:56:18:ed:6b:7f:
96:d2:5f:67:f9:8d:3c:fc:71:73:d6:73:07:9c:26:82:c1:a2:
2b:fb:7a:ac:7b:7b:4b:6e:b5:e9:e3:88:1b:20:8b:80:42:70:
a4:69:83:05:5e:44:ff:23:49:99:a1:2d:8a:40:46:07:b0:28:
b5:26:da:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 22:14:10 2026 by rpki-client