Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
File: haz7mtOlDOFTMc_066iLzAe3ooI.mft (raw, json)
Hash identifier: kExz/eBDLKORWax3DTyweG/DoYNBRybYCVmVfjrexfM=
Subject key identifier: F2:DF:AC:0D:6B:97:37:61:60:03:DA:D5:54:52:9F:E4:6B:6A:AE:65
Authority key identifier: 85:AC:FB:9A:D3:A5:0C:E1:53:31:CF:F4:EB:A8:8B:CC:07:B7:A2:82
Certificate issuer: /CN=85acfb9ad3a50ce15331cff4eba88bcc07b7a282
Certificate serial: 01A16BDABBD223A19588545099EF2A77F704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
Manifest number: 0A3F
Signing time: Sat 24 Oct 2026 03:00:59 +0000
Manifest this update: Sat 24 Oct 2026 03:00:59 +0000
Manifest next update: Sun 25 Oct 2026 03:00:59 +0000
Files and hashes: 1: LVJLyRNkzYXWrFPMXDuqL1cx3r0.roa (hash: /6VNNRjnmK1nx7DLPoyOKEbtFH+S0vHKlP1nyDqaMBk=)
2: haz7mtOlDOFTMc_066iLzAe3ooI.crl (hash: TF1gTLoXjLgbTqzp5JnpggjQHzH23BWPfmnSJF3mlzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6b:da:bb:d2:23:a1:95:88:54:50:99:ef:2a:77:f7:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85acfb9ad3a50ce15331cff4eba88bcc07b7a282
Validity
Not Before: Oct 24 03:00:59 2026 GMT
Not After : Oct 25 03:00:59 2026 GMT
Subject: CN=f2dfac0d6b9737616003dad554529fe46b6aae65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6d:c2:fc:7e:6e:82:d9:f0:ad:dc:7b:e2:86:
d4:78:fa:87:f4:f9:2f:d3:27:ed:79:af:ea:a7:e1:
3d:91:88:6c:87:bd:49:17:9b:ae:49:20:c4:fc:a1:
6e:a2:c1:9b:f2:e2:d6:85:27:64:ae:83:ca:a5:cf:
db:e7:87:ea:0d:93:5b:2b:d7:fe:a5:00:c7:a3:45:
d4:f4:3c:5a:c2:36:f6:3e:cf:f8:dc:d8:31:57:4e:
9a:b4:7f:eb:77:62:7e:6e:54:a0:b0:e3:18:3d:0f:
a2:28:b0:33:ed:92:7f:d0:54:43:a2:f8:73:49:d2:
b5:a3:dc:ba:aa:e7:c0:6f:43:e3:36:72:f7:03:fe:
c0:98:18:6b:75:a2:98:67:9e:1d:ad:ca:97:69:24:
05:32:c6:7c:30:ac:45:da:17:5c:32:c6:e7:e7:6e:
02:4a:65:ce:5c:7f:aa:2f:e5:03:dc:bf:5e:85:65:
9d:5c:4c:37:d4:76:bd:9b:09:ff:db:50:f8:5a:38:
9b:77:a2:30:9a:a5:12:db:fb:09:49:f7:4e:0a:fb:
1f:39:2d:54:55:88:e9:1f:da:08:e5:7b:c0:e1:6b:
3c:e0:7f:cf:d1:52:c5:54:4d:e6:91:be:df:eb:9b:
79:46:57:83:85:e8:93:b1:4b:66:2c:d9:62:e8:af:
e9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DF:AC:0D:6B:97:37:61:60:03:DA:D5:54:52:9F:E4:6B:6A:AE:65
X509v3 Authority Key Identifier:
keyid:85:AC:FB:9A:D3:A5:0C:E1:53:31:CF:F4:EB:A8:8B:CC:07:B7:A2:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a6:9a:39:d5:0f:79:c7:82:6e:9e:a7:08:ee:1a:ee:8a:d4:
57:ab:aa:e8:67:6b:92:a6:c4:92:e2:ad:48:dc:d7:4d:8e:bd:
7b:e8:8a:44:53:0e:53:d6:9a:0e:fb:58:eb:3d:a9:99:6c:2f:
c6:18:71:dd:dc:6d:aa:23:74:23:da:bf:b0:6f:91:4e:13:d9:
87:fc:ba:8a:df:c2:d5:cd:11:ba:44:14:21:51:9c:81:59:99:
ea:d2:aa:a0:7c:b4:87:14:4a:f3:1b:3e:ed:96:d2:8e:57:60:
fa:a9:cb:d6:f9:df:3b:39:a3:e9:ad:61:e1:d3:b5:f4:49:db:
45:8f:e0:7b:35:6f:8b:fe:0f:33:e2:f2:ae:11:59:e6:0e:73:
95:ba:c5:6f:e1:92:d7:3a:c0:cf:e9:d3:d1:94:28:8c:f1:f0:
2e:44:22:59:7c:e9:1e:b3:3d:80:09:46:a5:b0:21:ed:77:1a:
04:ea:a5:70:4c:aa:4e:3a:85:51:6e:86:4a:07:72:e6:88:9d:
6e:9e:02:85:8a:48:18:cc:2a:cc:1f:12:c3:a6:26:16:8f:21:
54:fa:e4:31:46:bf:b8:ce:a0:42:2e:c2:42:02:e9:70:39:b7:
ce:01:67:fe:ad:cb:df:25:3a:e6:61:e1:5a:5c:6e:c6:f7:e9:
ff:1e:77:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 13:39:28 2026 by rpki-client