Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
File: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft (raw, json)
Hash identifier: xwAP2drjhw5QF3GjgsvqZxJpjEh/5HgaImyXUaXwrfA=
Subject key identifier: 72:8F:80:C1:A7:C8:DC:AA:4E:3F:56:3B:C8:13:0D:1C:8B:E7:3B:DB
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial: 019C78591C41D49C267CDFE1DF93F20D8821
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
Manifest number: 1504
Signing time: Fri 20 Feb 2026 00:00:31 +0000
Manifest this update: Fri 20 Feb 2026 00:00:31 +0000
Manifest next update: Sat 21 Feb 2026 00:00:31 +0000
Files and hashes: 1: 7tr02EpUIgM-HOku4hUZ5kLPFzU.roa (hash: KnxkjjUpMVBgQObR9BIU6ZkMGqLPWpaw72b9yunDWDA=)
2: 9hVZarMZXXFecBErtuPkYLQrriE.roa (hash: KsiiLeHicnzuMLdpx8BniCnY9e3C72b9G03ZzbEor1A=)
3: 9m20uAAFdgNoVQH3076gaYQmYYU.roa (hash: ly6A2Lm/ZdDnqWIOLhpR56go+OLBASNK0cUewK9eTjc=)
4: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl (hash: bPtxFx9FpPgclHkIvrNiOJb1zSh0tYKWWuEdo5VmOGw=)
5: NGlmkCgm01T6khNRIi3SlPjUhn8.roa (hash: Ep6augckrz7DoH277AG4kWwV5ufRUKmF/zoXSa8Kack=)
6: OdQGWsy9c8XDU0zu8drNC-OWHho.roa (hash: pmkI9zAJgVjFylMbU79wV4Stohix0h2ULqEM+WHo6NU=)
7: QDsntjcOt3fxAoY-_3bsGRuRxHo.roa (hash: 8Wg5bkOdvAsky6YfIg1CDs57PHLp5vOyQI0z4fcD3vE=)
8: cOY-DC2HVK8oGsGuJBqrFqkU9C8.roa (hash: MwPd12qekQ7oRDjQ5MzO5S3l6bIuuruJk/odjgKUjg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Feb 2026 00:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:78:59:1c:41:d4:9c:26:7c:df:e1:df:93:f2:0d:88:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Validity
Not Before: Feb 20 00:00:31 2026 GMT
Not After : Feb 21 00:00:31 2026 GMT
Subject: CN=728f80c1a7c8dcaa4e3f563bc8130d1c8be73bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a0:a2:f7:f6:fd:34:dc:b2:2b:51:a1:a2:9e:
92:ab:b3:6a:d0:77:7d:56:e6:76:86:0a:ca:b8:a6:
42:08:3e:74:0b:d1:8f:fe:a3:5e:bb:f1:2a:b5:38:
83:e5:03:6d:f2:0f:3e:34:75:ab:8b:a7:18:9e:e0:
7f:c7:59:52:aa:e1:b2:79:75:a7:4a:a1:e2:29:17:
98:70:08:ee:ef:52:2f:43:04:f7:b7:37:a4:20:40:
f8:00:b1:40:20:29:22:b9:58:04:b9:99:b2:44:b8:
ff:06:f6:3d:df:a0:bc:38:98:75:24:6b:3d:77:80:
6c:cf:6b:ff:b5:b4:93:7e:0c:fa:17:9b:2a:e0:b5:
60:18:d3:82:78:53:49:a7:47:af:70:87:12:d4:fb:
4c:9c:d7:53:f8:1a:24:5b:41:a0:72:f4:65:88:f4:
36:d8:29:9d:3b:ee:48:6a:b4:c1:62:e5:65:ee:3b:
33:a2:4a:7a:dc:0f:47:14:e2:50:27:57:71:9b:88:
ee:14:60:5e:78:61:88:17:a9:a5:1b:1e:a1:1d:29:
5d:d5:47:37:9e:63:01:c5:43:df:6a:92:8d:20:af:
42:10:5e:c8:b2:45:20:06:da:5f:0a:3d:b4:e6:00:
9c:5d:24:20:7e:70:36:d6:3f:3f:ac:3b:65:2e:11:
28:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:8F:80:C1:A7:C8:DC:AA:4E:3F:56:3B:C8:13:0D:1C:8B:E7:3B:DB
X509v3 Authority Key Identifier:
keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:69:0f:ae:25:3e:95:f2:61:82:dd:7e:fc:1c:46:46:91:fd:
ad:42:53:ab:d9:ac:c5:34:a7:33:12:e3:78:e9:96:68:56:ea:
34:d0:8f:e0:a3:36:38:56:7b:11:4f:58:37:0d:26:db:a2:1d:
78:96:e5:3b:5c:92:ce:57:04:7a:0a:5b:66:e7:81:98:8b:6f:
2f:46:cc:7c:14:36:03:ac:b6:af:19:91:16:90:e9:77:be:2f:
0b:cb:a2:5e:4f:42:c5:c2:33:d7:90:a9:7e:f7:f4:f8:bc:6f:
91:67:5c:f1:57:3b:5b:e8:fc:93:04:da:91:d2:97:3d:73:4c:
ae:ac:ba:de:fe:9a:46:7c:03:e0:18:e8:e1:b7:c3:0a:31:ea:
15:ce:ed:22:4e:3a:ec:a4:95:a2:1a:24:79:4c:f2:4e:e1:37:
35:f4:3e:ca:ca:cc:e1:5f:7c:f7:ef:86:3b:02:7f:04:46:a7:
dd:90:ca:f3:de:e5:d8:4e:80:ba:5c:7b:9b:1a:1d:ad:6b:c8:
cb:4b:4a:67:84:97:4f:7c:71:d2:51:c8:d0:65:a7:2c:87:9f:
34:c3:98:03:0e:74:d3:fa:31:7d:32:ad:da:db:82:8b:b7:d3:
5d:8e:44:4a:6f:d6:05:47:8a:da:cc:e3:8d:c7:3a:3d:61:df:
75:e6:71:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZx4WRxB1JwmfN/h35PyDYghMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMDZhODJiYjExNWQ3MzkzZTM5ZmQ1OGI3M2JiZjIwZjZj
ZDBiMWYwHhcNMjYwMjIwMDAwMDMxWhcNMjYwMjIxMDAwMDMxWjAzMTEwLwYDVQQD
Eyg3MjhmODBjMWE3YzhkY2FhNGUzZjU2M2JjODEzMGQxYzhiZTczYmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKCi9/b9NNyyK1Ghop6Sq7Nq0Hd9
VuZ2hgrKuKZCCD50C9GP/qNeu/EqtTiD5QNt8g8+NHWri6cYnuB/x1lSquGyeXWn
SqHiKReYcAju71IvQwT3tzekIED4ALFAICkiuVgEuZmyRLj/BvY936C8OJh1JGs9
d4Bsz2v/tbSTfgz6F5sq4LVgGNOCeFNJp0evcIcS1PtMnNdT+BokW0GgcvRliPQ2
2CmdO+5IarTBYuVl7jszokp63A9HFOJQJ1dxm4juFGBeeGGIF6mlGx6hHSld1Uc3
nmMBxUPfapKNIK9CEF7IskUgBtpfCj205gCcXSQgfnA21j8/rDtlLhEoBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKPgMGnyNyqTj9WO8gTDRyL5zvbMB8GA1UdIwQY
MBaAFBwGqCuxFdc5Pjn9WLc7vyD2zQsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUt
NzI2MDU3YTFmMmE0LzEvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUtNzI2MDU3YTFmMmE0
LzEvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfmkPriU+
lfJhgt1+/BxGRpH9rUJTq9msxTSnMxLjeOmWaFbqNNCP4KM2OFZ7EU9YNw0m26Id
eJblO1ySzlcEegpbZueBmItvL0bMfBQ2A6y2rxmRFpDpd74vC8uiXk9CxcIz15Cp
fvf0+LxvkWdc8Vc7W+j8kwTakdKXPXNMrqy63v6aRnwD4Bjo4bfDCjHqFc7tIk46
7KSVohokeUzyTuE3NfQ+ysrM4V989++GOwJ/BEan3ZDK897l2E6Aulx7mxodrWvI
y0tKZ4SXT3xx0lHI0GWnLIefNMOYAw500/oxfTKt2tuCi7fTXY5ESm/WBUeK2szj
jcc6PWHfdeZxlQ==
-----END CERTIFICATE-----
Generated at Fri Feb 20 07:42:37 2026 by rpki-client