Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
File: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft (raw, json)
Hash identifier: opgwM/us3JuIb8DLW7mfPUA0KHkPx2qjf6aqf7wZSRE=
Subject key identifier: C4:55:69:D2:DE:37:27:3E:C5:5E:EC:DE:FD:38:2A:27:03:80:90:32
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial: 019C8012D979E5956F6F08A807484A28C0D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
Manifest number: 1508
Signing time: Sat 21 Feb 2026 12:00:44 +0000
Manifest this update: Sat 21 Feb 2026 12:00:44 +0000
Manifest next update: Sun 22 Feb 2026 12:00:44 +0000
Files and hashes: 1: 7tr02EpUIgM-HOku4hUZ5kLPFzU.roa (hash: KnxkjjUpMVBgQObR9BIU6ZkMGqLPWpaw72b9yunDWDA=)
2: 9hVZarMZXXFecBErtuPkYLQrriE.roa (hash: KsiiLeHicnzuMLdpx8BniCnY9e3C72b9G03ZzbEor1A=)
3: 9m20uAAFdgNoVQH3076gaYQmYYU.roa (hash: ly6A2Lm/ZdDnqWIOLhpR56go+OLBASNK0cUewK9eTjc=)
4: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl (hash: xHiYewiGuEKarLw9oZ4UxKSYtZRZ1KjE9vPrrwykC/w=)
5: NGlmkCgm01T6khNRIi3SlPjUhn8.roa (hash: Ep6augckrz7DoH277AG4kWwV5ufRUKmF/zoXSa8Kack=)
6: OdQGWsy9c8XDU0zu8drNC-OWHho.roa (hash: pmkI9zAJgVjFylMbU79wV4Stohix0h2ULqEM+WHo6NU=)
7: QDsntjcOt3fxAoY-_3bsGRuRxHo.roa (hash: 8Wg5bkOdvAsky6YfIg1CDs57PHLp5vOyQI0z4fcD3vE=)
8: cOY-DC2HVK8oGsGuJBqrFqkU9C8.roa (hash: MwPd12qekQ7oRDjQ5MzO5S3l6bIuuruJk/odjgKUjg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Feb 2026 12:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:80:12:d9:79:e5:95:6f:6f:08:a8:07:48:4a:28:c0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Validity
Not Before: Feb 21 12:00:44 2026 GMT
Not After : Feb 22 12:00:44 2026 GMT
Subject: CN=c45569d2de37273ec55eecdefd382a2703809032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fe:6b:71:c2:32:ef:f2:5d:2d:f8:71:a3:83:
7d:8a:7d:cd:29:a1:f3:43:0d:4e:ca:c6:03:32:0e:
0e:7c:f8:29:12:9a:3b:c6:21:f4:e9:e6:aa:d3:40:
0c:b2:5d:44:3f:9e:00:cd:49:26:22:c3:e6:67:9c:
6e:22:fa:6c:f9:e6:45:2b:63:e7:ad:ef:a2:fc:00:
62:a6:f0:7f:f3:d8:c9:75:00:86:de:cd:82:d2:d1:
ff:4d:fd:ac:5b:ec:7f:3d:b5:fe:dd:f6:e1:95:e4:
91:e6:77:ef:e7:44:cc:28:73:be:76:77:3a:2e:fc:
86:82:ac:81:48:81:7b:1f:67:3f:75:9b:c0:b3:29:
1c:bb:3e:8a:9b:b3:b3:8c:7c:9d:f3:0e:da:d7:4e:
15:9b:b8:f5:18:57:93:eb:ae:07:5f:dc:84:05:69:
d4:7e:98:ea:0d:32:d3:bd:e7:cb:47:43:96:41:1f:
d2:d0:27:f1:7f:67:1e:74:a9:c1:7b:e8:4f:9e:1b:
a1:f7:03:92:e4:09:0e:db:79:91:f7:59:62:f2:a3:
ce:80:18:31:55:0c:1b:24:42:5f:11:fd:22:05:56:
90:a5:29:d7:25:2f:1d:d2:7c:e9:ff:e3:74:fe:d9:
ee:8d:07:d7:da:0b:e7:ba:15:9d:64:23:50:7d:8d:
ed:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:55:69:D2:DE:37:27:3E:C5:5E:EC:DE:FD:38:2A:27:03:80:90:32
X509v3 Authority Key Identifier:
keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:86:89:ca:d0:f9:88:22:4a:ca:ee:fd:25:c7:9c:00:49:74:
28:b2:62:b0:4e:60:b7:57:94:c5:98:f6:76:8f:76:33:b6:4e:
33:cc:f8:7b:f4:e2:0a:83:65:84:3d:92:f5:fb:5b:97:53:7c:
f7:92:ea:34:f9:99:97:13:dd:6a:78:f8:25:01:10:b6:bc:a8:
7a:69:9e:49:aa:2b:b5:ce:6c:12:04:68:7d:4f:74:3d:dd:44:
b9:3a:c1:e2:e2:12:6d:ad:82:dc:26:b7:88:f3:97:8e:3a:6f:
9a:25:e1:31:1e:4a:6d:78:70:9e:09:56:42:c4:e3:b6:87:ff:
c3:fa:0d:1d:81:7b:a5:55:cc:d6:79:64:cc:92:aa:84:dc:bc:
9c:ab:46:6c:4f:f7:e8:bf:b9:0d:85:df:88:f7:94:db:69:8d:
31:59:bc:c6:b8:b4:a8:71:06:ce:73:0b:af:a1:aa:b1:5d:c6:
5d:9b:9b:63:3f:92:3c:d5:09:5b:40:32:3f:9e:77:6f:00:69:
28:e8:f8:3c:52:ce:c5:54:da:80:0e:1b:e2:b1:e1:52:5e:be:
8a:fe:6f:ca:b0:fb:c0:d5:b7:f3:f2:f6:d3:cd:30:60:ef:fc:
63:a9:ea:e3:d4:ae:a5:7a:b7:12:8a:39:57:a7:9b:ce:e9:b9:
99:1e:e3:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyAEtl55ZVvbwioB0hKKMDWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMDZhODJiYjExNWQ3MzkzZTM5ZmQ1OGI3M2JiZjIwZjZj
ZDBiMWYwHhcNMjYwMjIxMTIwMDQ0WhcNMjYwMjIyMTIwMDQ0WjAzMTEwLwYDVQQD
EyhjNDU1NjlkMmRlMzcyNzNlYzU1ZWVjZGVmZDM4MmEyNzAzODA5MDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzf5rccIy7/JdLfhxo4N9in3NKaHz
Qw1OysYDMg4OfPgpEpo7xiH06eaq00AMsl1EP54AzUkmIsPmZ5xuIvps+eZFK2Pn
re+i/ABipvB/89jJdQCG3s2C0tH/Tf2sW+x/PbX+3fbhleSR5nfv50TMKHO+dnc6
LvyGgqyBSIF7H2c/dZvAsykcuz6Km7OzjHyd8w7a104Vm7j1GFeT664HX9yEBWnU
fpjqDTLTvefLR0OWQR/S0Cfxf2cedKnBe+hPnhuh9wOS5AkO23mR91li8qPOgBgx
VQwbJEJfEf0iBVaQpSnXJS8d0nzp/+N0/tnujQfX2gvnuhWdZCNQfY3tuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRVadLeNyc+xV7s3v04KicDgJAyMB8GA1UdIwQY
MBaAFBwGqCuxFdc5Pjn9WLc7vyD2zQsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUt
NzI2MDU3YTFmMmE0LzEvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUtNzI2MDU3YTFmMmE0
LzEvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALIaJytD5
iCJKyu79JcecAEl0KLJisE5gt1eUxZj2do92M7ZOM8z4e/TiCoNlhD2S9ftbl1N8
95LqNPmZlxPdanj4JQEQtryoemmeSaortc5sEgRofU90Pd1EuTrB4uISba2C3Ca3
iPOXjjpvmiXhMR5KbXhwnglWQsTjtof/w/oNHYF7pVXM1nlkzJKqhNy8nKtGbE/3
6L+5DYXfiPeU22mNMVm8xri0qHEGznMLr6GqsV3GXZubYz+SPNUJW0AyP553bwBp
KOj4PFLOxVTagA4b4rHhUl6+iv5vyrD7wNW38/L2080wYO/8Y6nq49SupXq3Eoo5
V6ebzum5mR7jlA==
-----END CERTIFICATE-----
Generated at Sat Feb 21 20:35:40 2026 by rpki-client