Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
File: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft (raw, json)
Hash identifier: Y/F8GHSqskFV2ADshvkb9APqWUc7lbwU3CR8VWfytj4=
Subject key identifier: 08:14:4B:BA:C3:A7:79:DE:78:94:4D:5B:E4:48:90:38:BC:64:4A:DA
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial: 019C85DDFF1185146FADA854669F984A71C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
Manifest number: 150B
Signing time: Sun 22 Feb 2026 15:00:44 +0000
Manifest this update: Sun 22 Feb 2026 15:00:44 +0000
Manifest next update: Mon 23 Feb 2026 15:00:44 +0000
Files and hashes: 1: 7tr02EpUIgM-HOku4hUZ5kLPFzU.roa (hash: KnxkjjUpMVBgQObR9BIU6ZkMGqLPWpaw72b9yunDWDA=)
2: 9hVZarMZXXFecBErtuPkYLQrriE.roa (hash: KsiiLeHicnzuMLdpx8BniCnY9e3C72b9G03ZzbEor1A=)
3: 9m20uAAFdgNoVQH3076gaYQmYYU.roa (hash: ly6A2Lm/ZdDnqWIOLhpR56go+OLBASNK0cUewK9eTjc=)
4: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl (hash: ChvmZsbtOidggzrH/IVBK9VA+O3JVZHm8r0ztLYs65M=)
5: NGlmkCgm01T6khNRIi3SlPjUhn8.roa (hash: Ep6augckrz7DoH277AG4kWwV5ufRUKmF/zoXSa8Kack=)
6: OdQGWsy9c8XDU0zu8drNC-OWHho.roa (hash: pmkI9zAJgVjFylMbU79wV4Stohix0h2ULqEM+WHo6NU=)
7: QDsntjcOt3fxAoY-_3bsGRuRxHo.roa (hash: 8Wg5bkOdvAsky6YfIg1CDs57PHLp5vOyQI0z4fcD3vE=)
8: cOY-DC2HVK8oGsGuJBqrFqkU9C8.roa (hash: MwPd12qekQ7oRDjQ5MzO5S3l6bIuuruJk/odjgKUjg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:85:dd:ff:11:85:14:6f:ad:a8:54:66:9f:98:4a:71:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Validity
Not Before: Feb 22 15:00:44 2026 GMT
Not After : Feb 23 15:00:44 2026 GMT
Subject: CN=08144bbac3a779de78944d5be4489038bc644ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c9:43:55:45:f8:ce:50:fc:5c:ce:b6:53:32:
8d:5e:e9:8b:66:48:c6:40:d6:6b:7e:a5:a9:a5:7f:
64:31:1f:7b:b0:22:14:65:63:d6:28:31:cc:1c:38:
93:16:b0:1c:d4:1c:53:7b:e3:a1:01:a2:4c:91:63:
36:f1:11:a0:3b:b4:82:f8:25:82:c0:7c:a9:56:ca:
21:b0:b6:77:09:c9:08:56:64:04:1b:39:2a:f3:a2:
a0:d0:7e:93:b5:6b:b5:bb:66:ee:d5:de:d0:d6:51:
bf:a0:93:ef:99:24:fd:9c:83:5b:ef:dd:f1:48:42:
e0:86:8f:3b:03:23:82:1e:e4:dc:13:39:ff:93:99:
b5:bb:3f:0d:a2:d9:93:1f:c3:7a:02:cd:8d:02:03:
92:8c:6d:13:77:9b:41:9c:f4:b1:47:45:c6:0e:84:
c2:3e:24:34:4f:35:80:87:10:eb:4c:7c:29:63:ce:
f8:1c:14:0b:4d:37:e4:24:47:da:64:ee:49:92:cf:
87:97:16:90:c6:1e:00:e2:2e:cf:75:66:63:57:69:
d0:77:0c:fc:24:8a:e9:80:a4:63:97:8a:1a:92:70:
cf:1a:10:09:b1:cf:0c:79:40:28:b2:5c:d1:c9:9c:
25:5d:89:55:cc:07:82:25:8c:ac:96:86:35:dd:11:
c5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:14:4B:BA:C3:A7:79:DE:78:94:4D:5B:E4:48:90:38:BC:64:4A:DA
X509v3 Authority Key Identifier:
keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f5:ca:81:31:37:11:86:df:62:ac:33:fe:01:ef:d6:64:29:
5c:27:fa:23:fa:8f:2e:9b:14:a7:67:bc:92:6f:8e:06:68:67:
d1:dc:2d:f1:ab:ac:33:ec:53:39:bd:be:60:08:5b:cc:7c:7c:
de:9e:fb:0d:00:b0:7d:15:dd:17:e5:ce:a5:b3:53:4c:40:0a:
ac:6a:7e:8c:1a:f2:58:08:d9:6c:02:92:75:48:c7:46:f2:4e:
7e:07:05:c7:2e:5d:f1:f3:2b:f3:b2:88:53:18:94:cf:6d:35:
bf:a5:38:5e:77:e3:45:0a:df:c7:21:7c:bc:68:6f:dd:49:4a:
0a:54:55:5e:f3:4e:78:e2:63:e0:3a:85:b0:43:21:e1:37:b5:
82:81:17:62:05:92:35:65:4b:f3:02:35:1f:a6:89:bd:22:0c:
cd:ea:81:7a:d4:1d:da:82:42:a4:ae:59:47:7b:78:66:e3:41:
3e:27:47:7f:9a:dd:39:01:08:bf:5f:ac:34:ff:79:69:5e:9f:
fb:63:7c:33:24:33:6b:4c:2b:d7:42:ba:37:6a:66:f9:b4:e7:
99:b4:e1:de:73:fe:2a:4a:81:21:35:32:d0:c4:a6:60:67:cb:
17:12:ae:50:81:b5:fe:10:41:c7:4c:19:30:04:0c:ef:0b:0d:
b6:92:62:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 20:48:08 2026 by rpki-client