Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
File: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft (raw, json)
Hash identifier: 4dhCIy3pFyUlRFBh83+PVfu8Rs6d7zVvcEec4YVh5Iw=
Subject key identifier: 50:33:56:F7:9E:E6:EF:8E:E4:1A:42:26:35:BB:36:A8:30:1F:79:FF
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial: 019E16DA79B515CD0A8305D2C2FBD60EE21E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
Manifest number: 15DD
Signing time: Mon 11 May 2026 11:44:37 +0000
Manifest this update: Mon 11 May 2026 11:44:37 +0000
Manifest next update: Tue 12 May 2026 11:44:37 +0000
Files and hashes: 1: 4mHpvx9LkY6t4I-sMJMoaWx8VF0.roa (hash: TQ6l7XAp2vjcp5JOmsdpz5IqQGsnKehqiFiPx6igx/8=)
2: 9hVZarMZXXFecBErtuPkYLQrriE.roa (hash: KsiiLeHicnzuMLdpx8BniCnY9e3C72b9G03ZzbEor1A=)
3: 9m20uAAFdgNoVQH3076gaYQmYYU.roa (hash: ly6A2Lm/ZdDnqWIOLhpR56go+OLBASNK0cUewK9eTjc=)
4: Eg2EGWU0muHyssilrxeeQBjKbvk.roa (hash: wy9mHmoh2oNmnAMgYgnKyL3/vaCOlR30B/2LCFJDYyc=)
5: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl (hash: 8LrBHk+GTUSVg2v/OyeFMfpXivGcnC40FN05sUbY1Ns=)
6: I2kYVGgTXf3beeheYP4NYqvlsqo.roa (hash: +1MdfvNf88UVk1eBDOjY75bUfmqtSM1iSrahOzZLtS8=)
7: OOgM0-iyUugGKM1AErBHV3ak228.roa (hash: CzxOqgB3SowyUJL8kJyxpZhbGu+OOlEvXGgaW+6e45A=)
8: QDsntjcOt3fxAoY-_3bsGRuRxHo.roa (hash: 8Wg5bkOdvAsky6YfIg1CDs57PHLp5vOyQI0z4fcD3vE=)
9: vdZ7NAZKpOOWfxeuOtoKVqSmi9o.roa (hash: nGN4JdghU2JG9U+xki8YfeD2LkJmHUGqq8eet8nt3TI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 May 2026 11:44:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:16:da:79:b5:15:cd:0a:83:05:d2:c2:fb:d6:0e:e2:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Validity
Not Before: May 11 11:44:37 2026 GMT
Not After : May 12 11:44:37 2026 GMT
Subject: CN=503356f79ee6ef8ee41a422635bb36a8301f79ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:21:74:e4:44:f1:af:9e:e3:0e:90:dd:04:aa:
e8:94:bc:37:bb:95:0e:dc:76:15:82:9c:c8:16:d5:
17:de:bb:02:9b:a6:47:07:af:01:f6:50:22:eb:23:
56:b1:91:e9:53:59:d2:d9:cd:e6:a1:0a:d0:18:11:
05:29:89:a4:6b:73:86:ae:78:29:cc:cc:cb:20:64:
59:b1:17:41:de:f6:af:71:26:c1:c7:ef:47:65:88:
58:ad:98:a6:62:de:8b:fe:a7:92:14:53:d9:d6:d6:
de:6d:ed:00:39:ce:cb:c2:e8:ee:35:a2:ee:cf:94:
07:08:25:ab:8a:46:3c:05:30:66:63:79:76:54:da:
92:99:13:94:ab:ea:01:f2:c1:7b:0f:94:91:43:01:
01:9b:49:39:1c:7b:5f:0a:b7:0c:91:4c:51:29:93:
1a:25:96:9c:65:0c:a2:0f:70:e6:c8:99:4d:e2:b8:
e7:cb:76:c6:bd:6b:24:23:eb:54:27:a2:5e:23:bb:
a7:8a:98:ae:d3:78:03:b5:17:31:da:69:47:a7:3b:
30:f4:3f:59:c3:47:60:83:4f:e9:4f:14:8e:61:ce:
43:a7:8b:07:cf:89:92:c5:40:94:fd:3d:5e:e3:cb:
0b:50:11:1e:95:07:bb:2d:bb:4e:a3:0b:97:8d:fa:
54:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:33:56:F7:9E:E6:EF:8E:E4:1A:42:26:35:BB:36:A8:30:1F:79:FF
X509v3 Authority Key Identifier:
keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a6:f5:f5:ff:d7:22:39:76:78:bb:76:2d:3d:34:09:23:41:
67:b5:b9:b2:05:97:a5:16:e8:85:82:9e:95:98:1b:80:87:97:
94:70:9c:38:9a:7f:64:8b:ef:de:94:6d:53:8d:b1:d0:fe:0a:
75:86:af:58:ce:65:24:9b:07:3c:82:05:19:35:fb:5d:f1:f1:
a7:c1:b2:76:3c:29:fd:37:b7:6f:f6:ed:20:bd:10:dd:64:0b:
85:57:d7:d0:5c:94:2a:48:08:fa:62:e1:27:53:3e:70:4e:38:
84:e0:96:6f:e7:c7:09:19:2c:59:35:8d:c3:82:7b:14:d7:df:
86:08:f8:b0:69:76:7c:e9:01:d2:ff:b1:50:87:72:52:7b:4b:
09:51:e8:7a:d3:fd:00:c3:e9:45:82:b6:3c:cd:b2:6f:7a:7c:
c0:87:cf:bb:7f:f0:a2:e7:63:6c:4a:e6:0e:5f:d1:74:32:45:
92:07:d2:61:52:7f:dc:18:cc:94:85:ad:35:79:53:22:ac:13:
19:93:74:92:24:9e:10:76:a0:fc:ff:ac:ec:b0:b8:67:c9:e4:
4a:10:cc:bc:57:e3:dd:20:00:04:67:01:5f:66:33:f1:14:69:
f6:d7:64:00:76:99:d9:10:29:b7:e8:a2:c8:ad:9a:0d:3f:d1:
1a:17:fe:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 11 16:00:48 2026 by rpki-client