Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
File: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft (raw, json)
Hash identifier: LhA+eH54s+4bMzsbfC3P8AfsrnwW3Qo0uUMe3uhK5xQ=
Subject key identifier: 65:A0:CD:40:B5:FE:8B:46:A9:81:9B:2D:7A:24:4D:D2:16:81:79:4B
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial: 019C9550DBA0CD5B3ABE177E03A3BDD1ADA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
Manifest number: 1513
Signing time: Wed 25 Feb 2026 15:00:30 +0000
Manifest this update: Wed 25 Feb 2026 15:00:30 +0000
Manifest next update: Thu 26 Feb 2026 15:00:30 +0000
Files and hashes: 1: 7tr02EpUIgM-HOku4hUZ5kLPFzU.roa (hash: KnxkjjUpMVBgQObR9BIU6ZkMGqLPWpaw72b9yunDWDA=)
2: 9hVZarMZXXFecBErtuPkYLQrriE.roa (hash: KsiiLeHicnzuMLdpx8BniCnY9e3C72b9G03ZzbEor1A=)
3: 9m20uAAFdgNoVQH3076gaYQmYYU.roa (hash: ly6A2Lm/ZdDnqWIOLhpR56go+OLBASNK0cUewK9eTjc=)
4: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl (hash: UyPgtAC6gEC5QfVwNhW3MbsnT3g0YWcUqDpk7uzgM4E=)
5: NGlmkCgm01T6khNRIi3SlPjUhn8.roa (hash: Ep6augckrz7DoH277AG4kWwV5ufRUKmF/zoXSa8Kack=)
6: OdQGWsy9c8XDU0zu8drNC-OWHho.roa (hash: pmkI9zAJgVjFylMbU79wV4Stohix0h2ULqEM+WHo6NU=)
7: QDsntjcOt3fxAoY-_3bsGRuRxHo.roa (hash: 8Wg5bkOdvAsky6YfIg1CDs57PHLp5vOyQI0z4fcD3vE=)
8: cOY-DC2HVK8oGsGuJBqrFqkU9C8.roa (hash: MwPd12qekQ7oRDjQ5MzO5S3l6bIuuruJk/odjgKUjg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Feb 2026 15:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:95:50:db:a0:cd:5b:3a:be:17:7e:03:a3:bd:d1:ad:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Validity
Not Before: Feb 25 15:00:30 2026 GMT
Not After : Feb 26 15:00:30 2026 GMT
Subject: CN=65a0cd40b5fe8b46a9819b2d7a244dd21681794b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:dd:e1:81:d6:47:00:51:6f:cb:29:34:ff:47:
16:0d:f9:83:f5:0e:64:3d:4a:26:e2:5a:b0:96:39:
26:74:4a:e1:f7:73:e3:37:94:81:69:69:37:66:50:
e2:d1:04:57:a9:28:a3:10:fb:89:b8:c2:c5:1c:5e:
b2:d8:9f:e2:09:8c:6b:db:1f:56:38:21:d9:04:7a:
ff:29:8b:6f:cf:e8:62:31:5c:0c:7c:ae:f2:c0:1f:
3d:b2:a0:f0:65:97:4b:f4:58:8b:6a:15:63:e4:6d:
5f:5a:ae:fc:8a:a3:40:93:7d:b2:d1:af:1c:01:12:
82:bf:a5:98:d6:c2:41:ff:02:61:ad:50:f2:0c:6e:
1b:eb:c5:84:45:14:51:e8:31:e1:f1:d0:ef:d9:e2:
d3:13:18:ec:23:1c:01:07:f0:0d:69:0d:12:b4:3b:
75:31:f1:68:5b:65:c9:f6:ae:a7:d1:84:52:3d:a1:
e4:f0:43:8c:b3:52:76:31:c5:be:d9:a7:00:db:93:
55:15:46:f4:82:70:fd:1c:83:68:3d:f0:91:88:04:
81:3b:9e:94:f9:1e:2b:0b:7b:25:b3:a7:b5:83:68:
6b:4d:fa:e7:e8:49:a7:1f:3c:d2:7b:87:1b:34:80:
50:62:f2:16:82:4f:da:1b:d4:a1:53:11:9c:24:45:
50:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A0:CD:40:B5:FE:8B:46:A9:81:9B:2D:7A:24:4D:D2:16:81:79:4B
X509v3 Authority Key Identifier:
keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:93:12:38:b0:46:d8:14:b1:d8:b6:bc:0f:c1:cf:64:65:cc:
37:bb:44:88:4e:c4:cc:3c:71:34:62:c8:e9:e8:27:a5:46:8b:
f2:06:5b:9b:3d:de:96:0e:45:df:0c:07:9c:db:99:ba:95:81:
4d:0f:4a:c5:74:b3:d8:1d:6b:7a:10:0d:03:39:1b:a1:f4:83:
4f:1c:e9:a6:52:63:6b:d0:f0:97:e3:78:fa:94:03:2e:58:19:
fe:44:19:14:f8:ba:e2:bb:f4:55:0a:6d:54:f7:97:83:48:32:
70:b2:ee:02:e8:ca:66:49:b2:64:7b:5a:a2:c1:94:54:4a:7c:
eb:bc:61:4d:24:91:8e:00:db:50:e4:39:80:b6:a1:7a:a4:11:
c2:27:9f:10:c4:f4:f8:01:32:0b:79:e6:06:86:55:d1:c7:3b:
c5:3e:f1:63:1c:8e:3c:34:52:fa:c4:14:a6:d1:98:35:9a:5d:
35:55:58:cf:4b:d1:12:2d:19:87:c4:f0:27:27:89:60:42:2d:
33:d3:19:1d:82:70:b6:5a:1e:8d:27:d5:43:9f:68:58:b7:75:
8a:22:2f:af:eb:5e:6e:b2:ca:c6:43:39:84:3b:49:8a:a2:54:
1e:07:94:5c:4e:50:72:e8:cf:b0:5a:5e:df:9c:e0:57:e0:ba:
28:83:53:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyVUNugzVs6vhd+A6O90a2kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMDZhODJiYjExNWQ3MzkzZTM5ZmQ1OGI3M2JiZjIwZjZj
ZDBiMWYwHhcNMjYwMjI1MTUwMDMwWhcNMjYwMjI2MTUwMDMwWjAzMTEwLwYDVQQD
Eyg2NWEwY2Q0MGI1ZmU4YjQ2YTk4MTliMmQ3YTI0NGRkMjE2ODE3OTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0t3hgdZHAFFvyyk0/0cWDfmD9Q5k
PUom4lqwljkmdErh93PjN5SBaWk3ZlDi0QRXqSijEPuJuMLFHF6y2J/iCYxr2x9W
OCHZBHr/KYtvz+hiMVwMfK7ywB89sqDwZZdL9FiLahVj5G1fWq78iqNAk32y0a8c
ARKCv6WY1sJB/wJhrVDyDG4b68WERRRR6DHh8dDv2eLTExjsIxwBB/ANaQ0StDt1
MfFoW2XJ9q6n0YRSPaHk8EOMs1J2McW+2acA25NVFUb0gnD9HINoPfCRiASBO56U
+R4rC3sls6e1g2hrTfrn6EmnHzzSe4cbNIBQYvIWgk/aG9ShUxGcJEVQJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGWgzUC1/otGqYGbLXokTdIWgXlLMB8GA1UdIwQY
MBaAFBwGqCuxFdc5Pjn9WLc7vyD2zQsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUt
NzI2MDU3YTFmMmE0LzEvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUtNzI2MDU3YTFmMmE0
LzEvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABJMSOLBG
2BSx2La8D8HPZGXMN7tEiE7EzDxxNGLI6egnpUaL8gZbmz3elg5F3wwHnNuZupWB
TQ9KxXSz2B1rehANAzkbofSDTxzpplJja9Dwl+N4+pQDLlgZ/kQZFPi64rv0VQpt
VPeXg0gycLLuAujKZkmyZHtaosGUVEp867xhTSSRjgDbUOQ5gLaheqQRwiefEMT0
+AEyC3nmBoZV0cc7xT7xYxyOPDRS+sQUptGYNZpdNVVYz0vREi0Zh8TwJyeJYEIt
M9MZHYJwtloejSfVQ59oWLd1iiIvr+tebrLKxkM5hDtJiqJUHgeUXE5QcujPsFpe
35zgV+C6KINTSw==
-----END CERTIFICATE-----
Generated at Wed Feb 25 23:13:07 2026 by rpki-client