Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
File: haz7mtOlDOFTMc_066iLzAe3ooI.mft (raw, json)
Hash identifier: tFyNI2BkO0e7QZjOF18bw2pBKyHUUIUkPygUaUBcwZc=
Subject key identifier: 43:F7:7C:C8:FE:4F:19:08:27:85:BE:10:65:E4:7E:F1:FD:37:4B:7D
Authority key identifier: 85:AC:FB:9A:D3:A5:0C:E1:53:31:CF:F4:EB:A8:8B:CC:07:B7:A2:82
Certificate issuer: /CN=85acfb9ad3a50ce15331cff4eba88bcc07b7a282
Certificate serial: 019E333C88305A40FF6F22CA0F241E7BB77F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
Manifest number: 0894
Signing time: Sun 17 May 2026 00:01:05 +0000
Manifest this update: Sun 17 May 2026 00:01:05 +0000
Manifest next update: Mon 18 May 2026 00:01:05 +0000
Files and hashes: 1: LVJLyRNkzYXWrFPMXDuqL1cx3r0.roa (hash: /6VNNRjnmK1nx7DLPoyOKEbtFH+S0vHKlP1nyDqaMBk=)
2: haz7mtOlDOFTMc_066iLzAe3ooI.crl (hash: kXALfSMQCmMJ12TvcCMXH9eyzyppsNxVpcNsOdv280k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:33:3c:88:30:5a:40:ff:6f:22:ca:0f:24:1e:7b:b7:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85acfb9ad3a50ce15331cff4eba88bcc07b7a282
Validity
Not Before: May 17 00:01:05 2026 GMT
Not After : May 18 00:01:05 2026 GMT
Subject: CN=43f77cc8fe4f19082785be1065e47ef1fd374b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:00:15:d8:bb:c9:7c:9e:03:75:6a:84:5e:41:
23:30:a1:db:ce:56:14:68:9e:5a:15:5a:f3:b3:a6:
5a:b8:7d:ea:17:e9:44:5f:35:ff:be:f6:41:7b:5b:
fb:a0:bb:6a:17:41:ec:b4:1d:1b:3a:ee:63:c1:d5:
ca:f7:70:a8:0f:52:ba:7f:7d:15:6e:ff:4d:63:a0:
7c:e5:2d:5a:a6:f6:b6:e5:ad:a2:9a:61:49:44:49:
b0:7c:24:3e:85:f5:b6:59:47:7f:c7:72:c6:f4:15:
5b:c0:97:1e:8d:7d:4d:1c:f8:22:4c:9c:8e:41:7e:
12:86:4f:37:a3:ab:f8:ff:c4:db:10:75:35:0e:aa:
c2:20:b7:28:76:8f:1e:d3:1c:b6:62:2f:d4:7b:f1:
6d:5b:fc:5b:05:e4:31:b5:cc:02:ae:7d:2b:80:77:
d5:c1:05:57:69:93:0a:df:64:c7:ec:67:c5:23:f4:
b5:e4:a1:c9:f3:ea:7b:36:d3:b7:94:a9:a8:47:b1:
90:81:4d:ab:41:28:d2:13:94:a5:cf:2e:0e:45:b0:
d4:06:ec:f4:f8:4f:30:b1:e0:32:d2:a9:1a:f5:e9:
0d:3c:99:c9:1b:ed:34:9d:61:82:c6:cf:53:da:ca:
94:1f:a0:20:5a:8a:c9:35:44:5f:c2:ec:63:e9:c5:
11:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F7:7C:C8:FE:4F:19:08:27:85:BE:10:65:E4:7E:F1:FD:37:4B:7D
X509v3 Authority Key Identifier:
keyid:85:AC:FB:9A:D3:A5:0C:E1:53:31:CF:F4:EB:A8:8B:CC:07:B7:A2:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c8:cc:c9:15:bb:d7:14:ef:fd:e4:09:d5:cd:36:13:0a:41:
34:b3:86:8e:a7:d3:ef:e8:3e:7f:34:4d:a6:8b:0c:63:a2:22:
b7:b6:63:23:55:ab:bb:a6:2c:fa:6e:16:55:57:ca:78:6c:5f:
d9:94:b7:19:5c:8b:4a:d3:3e:09:8b:4b:e9:22:8d:07:54:70:
4d:b8:27:8e:ce:1c:ec:68:27:38:50:cf:e3:a0:42:65:36:fe:
ab:b0:52:f6:8d:ec:f7:71:8a:4e:c3:e3:79:99:fd:14:32:d4:
ba:46:8d:1e:fd:d2:3f:3c:8a:29:e7:79:90:58:c9:8e:4e:14:
d5:28:18:1d:70:b1:84:f8:ae:0f:1c:11:46:5a:c9:87:2b:f2:
7d:09:60:c9:4c:a7:86:2f:7e:85:5d:05:0f:8a:39:12:cf:a0:
6a:46:4b:95:42:e4:48:d2:a4:10:c6:fb:bf:0a:3c:e1:cc:0d:
a0:e6:48:80:00:03:30:cf:13:b5:7e:8e:59:13:5a:d6:c0:b4:
6f:f5:3f:68:74:3a:e6:c9:71:17:77:2e:63:6d:ef:32:f0:6b:
cf:ef:fd:39:a5:c2:a8:8c:cb:27:f1:53:22:68:ae:bc:9f:c7:
93:a3:db:4b:0d:30:c3:53:56:64:89:ff:a3:c6:25:f7:92:c7:
fd:d6:af:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 02:06:22 2026 by rpki-client