Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
File: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft (raw, json)
Hash identifier: /LY6l+grWv5YMeJssvYC4XWcxG3PSWAXRvX9p3Jos2A=
Subject key identifier: 63:4C:12:53:E4:D0:4F:EE:12:F9:AE:0E:92:F1:B0:33:62:4A:EA:6E
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial: 019C7E2476BC31A59DE77E8F21A62F346CD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
Manifest number: 1507
Signing time: Sat 21 Feb 2026 03:00:44 +0000
Manifest this update: Sat 21 Feb 2026 03:00:44 +0000
Manifest next update: Sun 22 Feb 2026 03:00:44 +0000
Files and hashes: 1: 7tr02EpUIgM-HOku4hUZ5kLPFzU.roa (hash: KnxkjjUpMVBgQObR9BIU6ZkMGqLPWpaw72b9yunDWDA=)
2: 9hVZarMZXXFecBErtuPkYLQrriE.roa (hash: KsiiLeHicnzuMLdpx8BniCnY9e3C72b9G03ZzbEor1A=)
3: 9m20uAAFdgNoVQH3076gaYQmYYU.roa (hash: ly6A2Lm/ZdDnqWIOLhpR56go+OLBASNK0cUewK9eTjc=)
4: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl (hash: pq85y5HL90YCJZsOfP15BuUqRVkn0SJRsBa65Ci1kgY=)
5: NGlmkCgm01T6khNRIi3SlPjUhn8.roa (hash: Ep6augckrz7DoH277AG4kWwV5ufRUKmF/zoXSa8Kack=)
6: OdQGWsy9c8XDU0zu8drNC-OWHho.roa (hash: pmkI9zAJgVjFylMbU79wV4Stohix0h2ULqEM+WHo6NU=)
7: QDsntjcOt3fxAoY-_3bsGRuRxHo.roa (hash: 8Wg5bkOdvAsky6YfIg1CDs57PHLp5vOyQI0z4fcD3vE=)
8: cOY-DC2HVK8oGsGuJBqrFqkU9C8.roa (hash: MwPd12qekQ7oRDjQ5MzO5S3l6bIuuruJk/odjgKUjg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Feb 2026 00:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7e:24:76:bc:31:a5:9d:e7:7e:8f:21:a6:2f:34:6c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Validity
Not Before: Feb 21 03:00:44 2026 GMT
Not After : Feb 22 03:00:44 2026 GMT
Subject: CN=634c1253e4d04fee12f9ae0e92f1b033624aea6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:24:64:d6:4e:6e:12:dc:df:a2:78:41:96:09:
15:c5:87:d4:59:bc:6e:cc:6d:a4:83:9d:07:ec:2b:
c7:a9:ef:37:88:f1:d9:f5:38:d6:0e:ae:5e:50:d6:
63:31:21:3c:86:17:94:d0:c3:35:13:13:81:4e:2a:
99:e9:0b:f0:d1:f6:de:63:62:5f:51:5c:0f:42:21:
56:f3:ec:d6:17:8b:94:f4:95:6c:95:39:dc:de:cd:
69:63:cf:a9:8f:2d:98:9d:f9:4b:67:62:1d:26:ca:
57:fe:0e:0c:da:6f:74:43:e6:03:8b:81:43:d3:16:
30:54:a8:c5:7d:8f:51:e6:0e:70:b6:e8:cc:b0:5f:
6e:44:45:59:f1:d5:13:80:6b:ab:4e:9c:12:63:54:
69:60:5c:a8:2c:6d:cb:bb:53:67:09:34:cd:4d:0e:
bc:9d:b2:b1:ba:2b:4f:a2:d2:57:4b:34:01:c3:44:
89:37:e6:5f:53:bf:fa:6e:14:53:d5:45:a4:dd:94:
76:96:56:b2:21:86:c3:f2:70:c5:02:16:89:d1:93:
32:b4:3c:0b:cb:51:df:18:f7:6a:e0:d3:5a:03:30:
41:99:6d:71:7e:0a:03:a3:d1:6a:87:51:fe:f2:28:
bd:4e:dd:65:dd:e5:6b:93:1e:8e:18:ee:fb:80:8d:
37:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4C:12:53:E4:D0:4F:EE:12:F9:AE:0E:92:F1:B0:33:62:4A:EA:6E
X509v3 Authority Key Identifier:
keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b2:00:0b:8a:60:18:f3:c3:4e:a1:3e:69:5d:b4:7a:fe:48:
11:8d:0b:b6:6c:6d:24:64:57:d8:33:6c:2c:99:9a:09:e8:6f:
0a:70:cf:41:5e:79:8f:0c:6f:b4:fe:93:b9:54:88:87:15:ec:
72:25:fc:e7:66:85:31:80:b1:20:38:71:51:e3:69:94:c2:47:
be:4b:49:bb:8e:73:06:e1:52:88:3e:76:c6:50:01:33:d7:7a:
ef:ab:df:91:28:81:99:f6:f6:5d:11:ae:57:5f:37:92:41:46:
6e:d9:59:99:63:3e:f8:32:55:22:79:48:ab:33:b5:e0:b5:8f:
5f:9e:20:09:45:e3:ce:02:6d:09:7a:2a:e4:26:bb:a6:07:24:
07:a8:a1:31:c6:c2:d2:c7:0c:0f:b4:e3:db:c8:b3:b3:12:56:
55:da:49:6b:c5:f1:e9:44:70:b0:05:42:df:b8:c2:06:ea:48:
43:fd:73:10:73:8d:f1:1c:be:2a:0d:16:18:8f:07:ef:88:71:
53:7d:bd:61:24:04:22:56:ae:c0:18:09:9d:91:a3:cf:bd:32:
3f:00:c5:f6:d7:6d:5b:f3:a6:d1:d7:27:70:cc:60:db:1a:9f:
99:26:66:8b:0e:4d:fc:5e:3a:1f:91:20:90:58:ad:7e:69:c1:
4f:fb:77:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 08:09:41 2026 by rpki-client