
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
File: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft (raw, json)
Hash identifier: GdpoXXjUB6/MKk9mmCGMa0JNJ8r4T4fXPSCJcNkwoK8=
Subject key identifier: F3:FB:3A:A9:2E:86:E5:AC:4C:A6:EA:68:75:19:02:8D:63:8A:0D:4C
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial: 019CC59872EC71362B6FE2F1985CB92E9CB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
Manifest number: 152D
Signing time: Sat 07 Mar 2026 00:00:28 +0000
Manifest this update: Sat 07 Mar 2026 00:00:28 +0000
Manifest next update: Sun 08 Mar 2026 00:00:28 +0000
Files and hashes: 1: 9hVZarMZXXFecBErtuPkYLQrriE.roa (hash: KsiiLeHicnzuMLdpx8BniCnY9e3C72b9G03ZzbEor1A=)
2: 9m20uAAFdgNoVQH3076gaYQmYYU.roa (hash: ly6A2Lm/ZdDnqWIOLhpR56go+OLBASNK0cUewK9eTjc=)
3: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl (hash: xkHzLfmB4IV9Nc+YtUsREihvlJLuAqIiGTadPRnMtUQ=)
4: I2kYVGgTXf3beeheYP4NYqvlsqo.roa (hash: +1MdfvNf88UVk1eBDOjY75bUfmqtSM1iSrahOzZLtS8=)
5: QDsntjcOt3fxAoY-_3bsGRuRxHo.roa (hash: 8Wg5bkOdvAsky6YfIg1CDs57PHLp5vOyQI0z4fcD3vE=)
6: cOY-DC2HVK8oGsGuJBqrFqkU9C8.roa (hash: MwPd12qekQ7oRDjQ5MzO5S3l6bIuuruJk/odjgKUjg4=)
7: jKnv8Hl298ULyF7AoE6ZHcljJwE.roa (hash: TA8MQ/eJxiYGg6c5Dgiv14NsF16+iZvCNQxTM8OPxss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 00:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c5:98:72:ec:71:36:2b:6f:e2:f1:98:5c:b9:2e:9c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Validity
Not Before: Mar 7 00:00:28 2026 GMT
Not After : Mar 8 00:00:28 2026 GMT
Subject: CN=f3fb3aa92e86e5ac4ca6ea687519028d638a0d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b1:b0:e4:1c:ab:c0:2f:c0:a4:60:88:45:fe:
13:8c:62:6b:9f:63:f9:f7:66:8e:34:a0:2a:c7:34:
d9:b4:b2:06:22:94:9a:85:eb:0a:5a:cc:11:a8:d0:
4b:b3:6e:93:e7:14:e8:f0:de:41:76:f5:ed:b8:98:
f6:c4:d0:3a:ce:ed:bf:aa:0e:75:c9:37:72:ee:41:
bc:46:23:45:12:50:d1:e3:9c:e4:54:eb:9c:6d:2b:
53:41:0e:0a:37:33:4f:df:7d:93:dd:be:e0:21:fe:
eb:be:5e:a9:1f:16:33:0a:67:c6:fa:48:51:13:c3:
a8:52:43:26:85:d9:7c:0c:eb:fb:e3:15:0f:60:3a:
13:a6:89:69:a4:64:c7:9d:b7:d4:44:2c:eb:ca:e1:
16:bd:6f:1a:34:4e:f1:1e:90:97:14:e6:dd:6d:76:
96:12:4d:2b:70:97:d1:87:4d:e6:b4:c1:5d:ab:b9:
b9:b0:50:2e:5e:e0:0b:77:10:b5:0b:b8:24:98:a0:
a0:46:50:34:20:e3:ec:ec:df:0e:bd:f2:02:33:b3:
4a:db:54:1b:8c:c4:e3:14:34:24:88:73:57:f5:b7:
89:c6:15:a0:4a:ee:85:01:50:0b:b3:27:50:1b:3c:
bf:14:86:1a:ee:b5:2e:56:b4:59:5d:b2:89:7a:38:
1f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FB:3A:A9:2E:86:E5:AC:4C:A6:EA:68:75:19:02:8D:63:8A:0D:4C
X509v3 Authority Key Identifier:
keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:4c:58:64:b2:9a:d2:38:b0:aa:4e:65:cb:41:24:18:88:46:
09:ae:ea:08:3f:e6:19:ab:6f:41:9a:e7:6f:33:48:a1:f8:55:
04:37:85:66:2d:fb:b3:f0:26:1e:72:20:d8:77:8e:99:47:f5:
f1:4b:6c:5a:e2:dc:c8:f7:c1:07:3e:5b:8a:0d:09:17:af:08:
82:19:6e:22:c9:3a:c6:7e:d2:b3:e0:44:d2:72:4f:d7:5e:22:
89:f9:a2:10:59:66:23:cd:7b:ef:cf:cc:97:eb:ca:a5:94:ef:
69:81:a4:21:8e:50:1b:de:13:aa:4b:30:e5:a8:bd:65:0b:0a:
56:37:49:46:23:fc:12:bb:53:9e:0b:89:70:c6:6a:92:3e:5c:
6b:8b:86:3d:40:d0:7a:9c:04:27:c2:de:69:05:cb:ca:b7:ec:
b0:40:b1:c8:ef:6f:a6:e1:17:c7:3a:a3:b9:b4:b1:44:76:73:
37:7b:94:69:23:92:45:a9:13:57:cb:93:27:29:cc:13:17:3f:
90:90:60:a3:dc:5d:ba:d7:19:83:97:79:3d:b7:54:8b:e0:cd:
aa:32:b8:d4:22:3b:8d:33:14:05:10:93:8e:8c:ba:cf:87:b2:
6a:6f:95:69:7f:94:a9:7f:a5:ab:6d:a9:10:55:28:3f:db:7f:
6c:ed:b4:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzFmHLscTYrb+LxmFy5Lpy2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMDZhODJiYjExNWQ3MzkzZTM5ZmQ1OGI3M2JiZjIwZjZj
ZDBiMWYwHhcNMjYwMzA3MDAwMDI4WhcNMjYwMzA4MDAwMDI4WjAzMTEwLwYDVQQD
EyhmM2ZiM2FhOTJlODZlNWFjNGNhNmVhNjg3NTE5MDI4ZDYzOGEwZDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8rGw5ByrwC/ApGCIRf4TjGJrn2P5
92aONKAqxzTZtLIGIpSahesKWswRqNBLs26T5xTo8N5BdvXtuJj2xNA6zu2/qg51
yTdy7kG8RiNFElDR45zkVOucbStTQQ4KNzNP332T3b7gIf7rvl6pHxYzCmfG+khR
E8OoUkMmhdl8DOv74xUPYDoTpolppGTHnbfURCzryuEWvW8aNE7xHpCXFObdbXaW
Ek0rcJfRh03mtMFdq7m5sFAuXuALdxC1C7gkmKCgRlA0IOPs7N8OvfICM7NK21Qb
jMTjFDQkiHNX9beJxhWgSu6FAVALsydQGzy/FIYa7rUuVrRZXbKJejgfRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPP7OqkuhuWsTKbqaHUZAo1jig1MMB8GA1UdIwQY
MBaAFBwGqCuxFdc5Pjn9WLc7vyD2zQsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUt
NzI2MDU3YTFmMmE0LzEvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUtNzI2MDU3YTFmMmE0
LzEvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEExYZLKa
0jiwqk5ly0EkGIhGCa7qCD/mGatvQZrnbzNIofhVBDeFZi37s/AmHnIg2HeOmUf1
8UtsWuLcyPfBBz5big0JF68IghluIsk6xn7Ss+BE0nJP114iifmiEFlmI81778/M
l+vKpZTvaYGkIY5QG94Tqksw5ai9ZQsKVjdJRiP8ErtTnguJcMZqkj5ca4uGPUDQ
epwEJ8LeaQXLyrfssECxyO9vpuEXxzqjubSxRHZzN3uUaSOSRakTV8uTJynMExc/
kJBgo9xdutcZg5d5PbdUi+DNqjK41CI7jTMUBRCTjoy6z4eyam+VaX+UqX+lq22p
EFUoP9t/bO20vg==
-----END CERTIFICATE-----
Generated at Sat Mar 7 07:08:51 2026 by rpki-client