Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
File: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft (raw, json)
Hash identifier: lcY06coeoINCp4YuFT5GMHLIIav2Bbz87+HBstmeSm4=
Subject key identifier: E3:67:EF:81:E1:D3:F3:8A:C8:05:81:62:3C:68:52:BF:FA:E5:8D:81
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial: 019DFE73357511C4F777355DD71457C318FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
Manifest number: 15D0
Signing time: Wed 06 May 2026 18:00:56 +0000
Manifest this update: Wed 06 May 2026 18:00:56 +0000
Manifest next update: Thu 07 May 2026 18:00:56 +0000
Files and hashes: 1: 4mHpvx9LkY6t4I-sMJMoaWx8VF0.roa (hash: TQ6l7XAp2vjcp5JOmsdpz5IqQGsnKehqiFiPx6igx/8=)
2: 9hVZarMZXXFecBErtuPkYLQrriE.roa (hash: KsiiLeHicnzuMLdpx8BniCnY9e3C72b9G03ZzbEor1A=)
3: 9m20uAAFdgNoVQH3076gaYQmYYU.roa (hash: ly6A2Lm/ZdDnqWIOLhpR56go+OLBASNK0cUewK9eTjc=)
4: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl (hash: t5fz8G9AgyMh58kyljdt5x+0/t6UZnqmdStFezuKXWk=)
5: I2kYVGgTXf3beeheYP4NYqvlsqo.roa (hash: +1MdfvNf88UVk1eBDOjY75bUfmqtSM1iSrahOzZLtS8=)
6: QDsntjcOt3fxAoY-_3bsGRuRxHo.roa (hash: 8Wg5bkOdvAsky6YfIg1CDs57PHLp5vOyQI0z4fcD3vE=)
7: cOY-DC2HVK8oGsGuJBqrFqkU9C8.roa (hash: MwPd12qekQ7oRDjQ5MzO5S3l6bIuuruJk/odjgKUjg4=)
8: vdZ7NAZKpOOWfxeuOtoKVqSmi9o.roa (hash: nGN4JdghU2JG9U+xki8YfeD2LkJmHUGqq8eet8nt3TI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 13:58:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fe:73:35:75:11:c4:f7:77:35:5d:d7:14:57:c3:18:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Validity
Not Before: May 6 18:00:56 2026 GMT
Not After : May 7 18:00:56 2026 GMT
Subject: CN=e367ef81e1d3f38ac80581623c6852bffae58d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d0:a4:4c:15:12:c2:33:c6:d0:80:86:f3:e6:
78:39:52:29:59:5b:99:1a:b3:15:cd:40:76:d3:bc:
d9:f5:18:c3:d1:08:c2:a1:4b:3a:87:9b:ab:f1:c6:
a2:43:70:30:a3:81:93:54:a9:8d:63:c0:7e:db:ce:
96:97:60:d3:c0:ce:5e:04:19:b8:0a:b4:b1:76:c3:
13:e8:c2:86:a6:29:ac:4b:97:ec:09:5d:bc:2e:70:
f9:00:70:47:12:f0:79:d8:2c:db:ef:3f:40:fa:ba:
ed:ad:c3:b3:de:0b:e5:88:bf:da:68:e4:dc:22:06:
b4:73:cf:6d:77:c2:91:8f:c7:83:c9:cb:e3:20:ab:
c5:22:ae:73:ff:83:8b:b6:44:34:d9:66:b1:6c:11:
3a:3b:aa:09:b5:35:26:ea:3c:c8:e3:91:61:6e:d4:
60:6d:d2:de:cf:4a:77:7a:ee:8c:c0:8e:d7:35:2c:
5b:cf:80:e7:e5:c4:91:68:24:cf:91:ad:c8:ce:82:
56:85:28:b6:e3:a7:8f:21:12:cf:f4:1d:64:26:2a:
4c:4b:ff:b4:b1:ba:5b:97:ab:65:67:f3:66:32:2a:
54:56:63:7f:54:61:7b:ab:e6:2a:63:72:0e:c1:fb:
97:fd:a2:31:18:87:26:37:c9:8b:32:82:50:49:49:
a1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:67:EF:81:E1:D3:F3:8A:C8:05:81:62:3C:68:52:BF:FA:E5:8D:81
X509v3 Authority Key Identifier:
keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:9d:43:5b:b3:50:e9:79:c3:11:b1:09:91:94:3a:d9:a1:8b:
e7:d1:7c:f6:c8:af:02:8f:33:a6:2f:aa:b5:59:57:8a:a4:cd:
44:ff:95:9d:09:9e:b7:37:60:c9:b4:6e:c4:f5:9e:76:03:8a:
cf:00:db:dc:91:8a:c0:26:41:e4:83:4e:99:eb:c9:66:ac:50:
77:73:ef:ce:60:aa:4a:90:3d:c4:eb:17:2b:7d:5a:61:af:cb:
7d:74:f3:c8:6b:64:c1:6b:17:43:bd:fd:b0:64:8f:b8:ad:2d:
0c:bc:ba:8d:d5:fe:d0:0e:71:19:8f:06:9b:2b:db:ed:9c:7e:
3d:53:4d:f2:f0:e6:d4:b7:b4:fb:81:d7:db:c7:5a:30:97:de:
04:e1:f8:d2:5e:ab:f5:ea:68:40:2a:73:5c:b6:77:f0:00:ae:
9a:5a:6f:cb:e3:d5:30:89:bb:b9:df:57:26:65:99:eb:89:e7:
76:37:d1:5f:80:dc:dc:ec:60:2d:d8:8f:98:a2:50:af:63:9e:
d8:b5:20:98:3d:80:21:a7:3f:68:e8:dd:c7:63:36:09:10:37:
6c:3e:5e:66:6a:54:08:7b:c4:cb:3d:ca:f1:b2:e5:24:fd:66:
a5:04:2d:16:39:0a:4a:e1:9a:5d:82:65:b9:36:c6:22:b1:af:
af:1f:11:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 22:41:33 2026 by rpki-client