Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
File: haz7mtOlDOFTMc_066iLzAe3ooI.mft (raw, json)
Hash identifier: BxJALzNg4sMn1CcTH6QHUaJGFtCpBOwxsurKWA0CppU=
Subject key identifier: 57:41:41:2C:0A:ED:94:2B:23:40:9B:C3:CD:20:BB:5B:62:06:EF:FB
Authority key identifier: 85:AC:FB:9A:D3:A5:0C:E1:53:31:CF:F4:EB:A8:8B:CC:07:B7:A2:82
Certificate issuer: /CN=85acfb9ad3a50ce15331cff4eba88bcc07b7a282
Certificate serial: 019D382E7246B8FD83FCED1120AD8145C942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
Manifest number: 0812
Signing time: Sun 29 Mar 2026 06:01:01 +0000
Manifest this update: Sun 29 Mar 2026 06:01:01 +0000
Manifest next update: Mon 30 Mar 2026 06:01:01 +0000
Files and hashes: 1: LVJLyRNkzYXWrFPMXDuqL1cx3r0.roa (hash: /6VNNRjnmK1nx7DLPoyOKEbtFH+S0vHKlP1nyDqaMBk=)
2: haz7mtOlDOFTMc_066iLzAe3ooI.crl (hash: pXM2/0ZXKKeHwp+dsKsmPwnkA3wIaer/SptdqWjGk9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:72:46:b8:fd:83:fc:ed:11:20:ad:81:45:c9:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85acfb9ad3a50ce15331cff4eba88bcc07b7a282
Validity
Not Before: Mar 29 06:01:01 2026 GMT
Not After : Mar 30 06:01:01 2026 GMT
Subject: CN=5741412c0aed942b23409bc3cd20bb5b6206effb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:13:f0:f0:d3:53:26:80:22:e2:36:b9:0b:17:
cf:a3:46:fc:43:ab:97:1e:05:c7:ff:55:54:c2:71:
7a:9b:66:bb:40:ab:71:a4:cd:c6:bd:2d:85:73:36:
e2:e1:f1:d9:0d:2a:8f:ce:4c:78:83:49:b4:33:11:
9f:be:81:48:7e:e2:97:58:00:58:0e:a7:6d:db:a8:
a3:18:e4:12:55:9a:b3:52:58:00:c1:bd:44:44:32:
17:db:57:d7:77:73:c0:9c:aa:6e:27:59:6c:23:17:
c1:02:2f:7d:d3:fb:b6:33:59:e4:8c:dd:98:60:9f:
df:16:48:7d:b6:82:3c:f4:10:93:e6:c9:ea:d1:c5:
5d:16:1e:88:58:07:06:67:ac:22:16:c6:dc:41:5c:
83:f4:38:b3:db:e3:16:ed:10:91:cc:ef:6d:38:9b:
4d:eb:1b:6d:02:b7:1a:a5:9a:10:a1:c3:3f:f6:22:
51:17:9e:d6:ed:37:d8:e9:41:89:0c:3e:c9:c3:ff:
58:6e:d9:fb:22:51:c0:b9:b6:df:f4:2a:83:21:cf:
65:45:b4:45:cb:45:6c:9d:5b:45:5a:2f:58:91:e8:
2c:20:94:47:82:4d:5f:c4:fb:7e:00:83:22:4d:5f:
20:ca:a8:f4:3b:e8:06:52:b8:25:8b:a8:62:2d:f2:
bd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:41:41:2C:0A:ED:94:2B:23:40:9B:C3:CD:20:BB:5B:62:06:EF:FB
X509v3 Authority Key Identifier:
keyid:85:AC:FB:9A:D3:A5:0C:E1:53:31:CF:F4:EB:A8:8B:CC:07:B7:A2:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:de:61:d9:2f:9d:b6:e9:4a:60:7d:fd:67:71:a6:04:ca:f8:
b8:fb:92:5f:20:23:d2:d1:34:82:24:26:b3:00:89:52:ed:ea:
c5:16:b3:1f:1f:a8:ed:ae:69:be:28:e6:e2:db:17:a8:ba:15:
65:7e:5f:18:62:6f:cd:6f:87:12:a0:bf:06:67:5c:74:39:16:
0b:4d:ce:cf:41:68:b1:05:83:42:26:8f:91:91:86:ae:f2:2f:
2c:c6:39:35:bb:88:e0:4c:99:a6:05:c8:a9:28:40:fb:8b:01:
b2:7e:56:ea:8e:c8:72:e8:77:af:6c:6c:31:2d:cb:bc:98:2c:
0f:e8:60:7d:ec:2e:8d:7e:a6:95:98:97:6f:9f:fa:5b:12:3b:
0a:89:d8:72:62:ff:cd:be:36:b4:9f:3c:99:df:4e:29:da:7d:
b2:76:52:5f:62:e1:4c:78:f7:18:d3:1b:c0:d0:59:c4:b7:78:
82:07:87:31:48:bd:97:a0:66:c3:f8:fe:d7:45:73:bd:6f:1a:
1b:3a:11:99:52:a5:2d:e9:51:a2:df:eb:b4:cc:5b:9b:76:90:
52:61:91:03:93:82:77:b2:be:76:9f:f1:7a:b3:20:98:b8:24:
8c:31:25:61:c4:b3:d8:c6:20:be:31:da:ad:a7:0b:63:f7:a7:
de:56:a0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:50 2026 by rpki-client