
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
File: haz7mtOlDOFTMc_066iLzAe3ooI.mft (raw, json)
Hash identifier: ev56obWYSes4QmqU3F4Ppsbwzjq+fu0HMVQJ4Qrio7Q=
Subject key identifier: 79:48:59:1B:F6:D2:4C:FD:D9:74:BC:A9:20:47:0B:95:D7:D7:E8:7C
Authority key identifier: 85:AC:FB:9A:D3:A5:0C:E1:53:31:CF:F4:EB:A8:8B:CC:07:B7:A2:82
Certificate issuer: /CN=85acfb9ad3a50ce15331cff4eba88bcc07b7a282
Certificate serial: 01A06EDEE83F39DB4E36A9009BCD2DF47E66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
Manifest number: 09BC
Signing time: Sat 05 Sep 2026 00:01:37 +0000
Manifest this update: Sat 05 Sep 2026 00:01:37 +0000
Manifest next update: Sun 06 Sep 2026 00:01:37 +0000
Files and hashes: 1: LVJLyRNkzYXWrFPMXDuqL1cx3r0.roa (hash: /6VNNRjnmK1nx7DLPoyOKEbtFH+S0vHKlP1nyDqaMBk=)
2: haz7mtOlDOFTMc_066iLzAe3ooI.crl (hash: aXpwZeEXIrDmgmA35boZ2TnA4tgpoDBgDOSgVWItu4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:de:e8:3f:39:db:4e:36:a9:00:9b:cd:2d:f4:7e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85acfb9ad3a50ce15331cff4eba88bcc07b7a282
Validity
Not Before: Sep 5 00:01:37 2026 GMT
Not After : Sep 6 00:01:37 2026 GMT
Subject: CN=7948591bf6d24cfdd974bca920470b95d7d7e87c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c6:bd:9f:f5:c9:7e:45:01:a9:f7:4b:33:b6:
0d:c5:d4:6e:6e:0a:80:3e:89:3d:5a:2f:51:15:c1:
5d:30:d6:d6:d5:cd:82:60:2f:a8:a0:46:73:d9:96:
81:a5:02:8f:7b:dd:47:2a:21:e4:49:9b:54:b4:8a:
89:48:f2:fd:ef:5e:10:f2:c2:79:3c:77:35:1f:ef:
65:d4:cf:ea:9f:41:5b:5a:d2:3e:5a:2c:3e:35:4a:
7b:44:dd:05:52:00:97:aa:61:80:b3:1a:3a:4b:2f:
cd:48:8b:6e:f4:b0:65:6a:5b:65:e4:69:9e:ce:a6:
42:b8:43:54:5a:47:bc:98:73:7a:9c:e6:4b:0c:8d:
ee:b7:77:fe:dc:e0:fb:ac:8d:aa:49:49:d5:e1:0a:
97:ac:43:fd:59:5b:73:cf:bc:6d:f1:bd:30:26:4f:
37:51:41:e9:43:7a:c4:0f:c1:a2:fd:87:51:cc:5e:
4c:a9:16:6e:d3:ef:55:43:66:87:1c:e9:57:87:3c:
da:82:2c:63:4b:66:fe:e9:c2:10:6f:af:93:2b:6a:
c0:d3:d2:e2:a1:6a:17:c6:9f:39:40:1b:3f:18:5a:
5b:ba:b2:25:76:4e:fe:3a:16:74:42:74:3b:57:cd:
06:db:c3:5b:24:d0:47:1b:61:e0:1a:e1:8f:fb:a6:
3a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:48:59:1B:F6:D2:4C:FD:D9:74:BC:A9:20:47:0B:95:D7:D7:E8:7C
X509v3 Authority Key Identifier:
keyid:85:AC:FB:9A:D3:A5:0C:E1:53:31:CF:F4:EB:A8:8B:CC:07:B7:A2:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:8b:2c:28:7f:74:00:73:82:be:22:fa:d6:98:2d:e5:3c:a5:
38:5b:30:81:b4:79:55:06:f0:e4:09:da:9b:28:d9:ca:c0:28:
27:8f:40:bf:60:7d:c9:63:45:55:89:36:15:9c:30:45:4b:36:
3a:43:90:8b:c1:cb:5f:7d:c0:02:1b:aa:6d:ad:f3:93:cc:be:
6a:13:fe:8d:9b:6a:65:2a:22:15:30:d8:8d:1a:3d:4c:b4:af:
5e:1a:17:d8:b7:95:79:24:66:78:13:2c:02:ef:99:3d:56:69:
68:eb:7c:0d:44:12:44:95:d0:e1:df:3a:b4:65:55:54:bc:6a:
b4:58:d7:7c:12:df:0e:31:29:e4:ff:af:88:46:ec:b8:2f:de:
74:fe:fc:19:fa:a2:58:47:05:3d:2d:1c:67:ba:33:14:86:10:
0b:e4:f0:68:e8:87:52:d4:b2:b7:d6:f4:8d:f9:6c:af:fd:f9:
11:29:de:72:89:7b:f2:b8:ae:b1:4a:60:ac:aa:1e:f3:3a:1a:
2e:d3:05:ac:0a:cb:11:dd:4c:1e:1a:72:e9:aa:9d:66:67:d6:
25:35:d5:a8:63:4e:54:70:a2:58:bb:3b:12:da:4e:bf:47:4a:
3c:c2:64:a6:46:d1:41:33:fa:07:e2:20:36:63:12:f2:82:0f:
e6:52:81:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:10:58 2026 by rpki-client