Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
File: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft (raw, json)
Hash identifier: uO0rtOdqAz/DY4oytm4zQS9QUCv+T3edJlbM19q/kj8=
Subject key identifier: 9A:91:19:E7:17:93:DE:54:A4:49:33:E8:C4:FA:30:E0:F2:B2:A6:31
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial: 019DF8A7D9813FBF150BC3D5D59496D03AF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
Manifest number: 15CD
Signing time: Tue 05 May 2026 15:00:42 +0000
Manifest this update: Tue 05 May 2026 15:00:42 +0000
Manifest next update: Wed 06 May 2026 15:00:42 +0000
Files and hashes: 1: 4mHpvx9LkY6t4I-sMJMoaWx8VF0.roa (hash: TQ6l7XAp2vjcp5JOmsdpz5IqQGsnKehqiFiPx6igx/8=)
2: 9hVZarMZXXFecBErtuPkYLQrriE.roa (hash: KsiiLeHicnzuMLdpx8BniCnY9e3C72b9G03ZzbEor1A=)
3: 9m20uAAFdgNoVQH3076gaYQmYYU.roa (hash: ly6A2Lm/ZdDnqWIOLhpR56go+OLBASNK0cUewK9eTjc=)
4: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl (hash: LCxdIVrZn9wRy7fgB7Exu1woMRH6VawiaTG/c7k5r0Q=)
5: I2kYVGgTXf3beeheYP4NYqvlsqo.roa (hash: +1MdfvNf88UVk1eBDOjY75bUfmqtSM1iSrahOzZLtS8=)
6: QDsntjcOt3fxAoY-_3bsGRuRxHo.roa (hash: 8Wg5bkOdvAsky6YfIg1CDs57PHLp5vOyQI0z4fcD3vE=)
7: cOY-DC2HVK8oGsGuJBqrFqkU9C8.roa (hash: MwPd12qekQ7oRDjQ5MzO5S3l6bIuuruJk/odjgKUjg4=)
8: vdZ7NAZKpOOWfxeuOtoKVqSmi9o.roa (hash: nGN4JdghU2JG9U+xki8YfeD2LkJmHUGqq8eet8nt3TI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 13:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f8:a7:d9:81:3f:bf:15:0b:c3:d5:d5:94:96:d0:3a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Validity
Not Before: May 5 15:00:42 2026 GMT
Not After : May 6 15:00:42 2026 GMT
Subject: CN=9a9119e71793de54a44933e8c4fa30e0f2b2a631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3b:2e:e8:93:e3:f7:b4:a5:df:77:ca:02:c0:
77:4c:f2:37:00:a2:59:50:44:8f:f5:b2:4c:b9:f7:
44:f5:ff:6f:33:ae:ae:5f:75:67:56:4e:e9:8d:f3:
ea:f3:96:83:e9:d4:07:f8:4d:90:84:94:98:00:40:
0b:94:3a:6a:88:62:50:49:7a:28:46:c8:bf:ed:63:
52:9b:c8:55:d9:66:f2:bc:fc:e0:af:47:53:76:53:
c7:c8:72:b1:f3:d0:a4:7b:ab:04:9f:ae:b9:cf:99:
35:3a:77:79:9a:e6:d8:f1:e0:19:b2:ab:d0:01:c5:
7f:00:ca:bd:51:cb:d3:f4:f6:2c:2e:51:1e:43:e8:
a4:c4:f3:13:19:d5:56:09:b3:a2:7c:70:f8:cc:98:
b5:7b:5e:db:48:f1:f9:58:48:a4:06:c2:91:01:d6:
9e:5c:ec:d7:85:42:af:b2:55:d0:d4:9c:da:f8:3a:
67:7e:4e:af:f3:ad:cb:6b:85:8e:07:37:61:fa:b4:
3d:b7:f3:d3:86:d0:de:bb:0a:6c:eb:8e:47:c7:87:
6a:76:96:e9:44:e9:86:ee:ea:97:f5:2f:98:11:c7:
d8:a4:bc:e8:46:6f:e9:21:71:d0:83:0a:0b:05:67:
8d:1b:45:39:73:4d:83:c9:79:b5:84:34:a1:f1:3d:
7a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:91:19:E7:17:93:DE:54:A4:49:33:E8:C4:FA:30:E0:F2:B2:A6:31
X509v3 Authority Key Identifier:
keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:2b:cb:44:c2:96:14:59:57:bb:5b:7d:d5:5b:e6:c4:fd:82:
f4:87:e7:4a:54:79:51:a4:2a:70:6c:b8:0a:eb:6f:c2:34:55:
18:dc:41:2d:6a:8c:48:aa:1d:88:4d:cf:b1:2a:7c:ee:66:70:
31:9f:a8:dd:51:7d:29:11:38:10:6e:13:39:5d:e3:79:99:c3:
22:a9:7f:77:a3:36:ce:81:c3:00:90:d6:c4:e6:44:84:86:a5:
00:a2:67:f8:23:b4:4d:33:2b:54:32:9c:ff:0c:ea:22:a7:ca:
5d:7e:06:69:85:9a:72:86:b1:bd:7d:d8:43:71:6b:d3:b8:a6:
6b:57:d7:af:d2:6a:ac:09:5a:57:97:e7:c1:e8:61:95:82:6d:
71:fb:7e:74:df:9a:5a:16:cf:49:06:ba:20:ab:9a:69:ff:ea:
2a:4e:7e:7f:61:24:a5:fc:5a:91:4a:03:85:88:1f:81:b5:f4:
f9:e3:2c:ee:20:28:5a:4a:93:58:dc:71:e1:e8:88:1c:d7:ca:
f0:eb:0a:fb:3a:2d:02:9e:4b:96:ed:3a:94:69:96:f5:2e:01:
0f:27:56:43:c1:02:7b:48:6c:bc:8d:31:e6:35:48:3b:e6:56:
4e:8e:d6:12:2c:aa:8b:51:2d:98:f4:9d:1b:d4:13:0b:db:bd:
1e:b6:15:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 22:53:29 2026 by rpki-client