Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.mft
File: ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.mft (raw, json)
Hash identifier: uiOSxocVYNmxJJ41XpdLAExnlY1Cpl/dMMlxTYe4ORo=
Subject key identifier: 64:96:01:E6:6A:81:FB:62:A1:77:13:42:AE:48:B1:C3:26:FA:EA:C6
Authority key identifier: 89:AF:87:69:33:97:03:DA:3B:0C:B5:E8:31:02:3D:3B:F6:3F:02:2E
Certificate issuer: /CN=89af8769339703da3b0cb5e831023d3bf63f022e
Certificate serial: 019D98F45DA88C061771256B0AB6E6973141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.mft
Manifest number: 116B
Signing time: Fri 17 Apr 2026 01:00:44 +0000
Manifest this update: Fri 17 Apr 2026 01:00:44 +0000
Manifest next update: Sat 18 Apr 2026 01:00:44 +0000
Files and hashes: 1: 7TJ8GqKMB7ONKpmIttAKlfVjIPI.roa (hash: YqU7Dk9vgRbL9GHaPYk9nyjuTWJnjnKlb/odLn25dDg=)
2: ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.crl (hash: bUCDrGY8b5dQMnNdLL6+R7iIlYlCG+DSZxuYX6NYiOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:5d:a8:8c:06:17:71:25:6b:0a:b6:e6:97:31:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89af8769339703da3b0cb5e831023d3bf63f022e
Validity
Not Before: Apr 17 01:00:44 2026 GMT
Not After : Apr 18 01:00:44 2026 GMT
Subject: CN=649601e66a81fb62a1771342ae48b1c326faeac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:66:89:b0:c7:cc:c8:df:cb:1c:81:96:66:cd:
8c:78:6a:a6:84:9d:76:0f:c9:02:d3:e6:1c:2f:29:
a5:eb:0a:ae:13:d6:09:db:01:6a:40:1c:9f:28:38:
88:b3:33:d7:5b:b3:d2:bc:28:52:dd:9c:49:0e:56:
1e:fd:1d:30:36:f9:11:31:6b:52:54:b4:ee:8c:85:
b1:74:d4:1a:bb:d2:1a:d6:5f:80:33:52:c6:ff:85:
6c:ef:66:8b:e8:27:52:e1:56:b1:c0:ae:dd:9e:40:
b6:4b:d6:7c:6b:a6:1b:8d:a5:f6:1c:7c:7b:34:64:
31:73:a7:40:03:c2:cd:80:dd:5f:d8:37:80:1a:9b:
d9:3a:38:0d:02:ac:b7:c6:59:b1:97:a0:ba:f7:9e:
7d:43:15:23:af:6b:21:61:b9:d6:5f:da:50:fb:c6:
d2:b4:3f:8e:6b:08:c4:2c:e8:24:2a:3c:99:95:90:
ac:32:2d:5f:10:af:31:d7:12:2f:25:98:bc:43:fe:
59:67:c7:8a:70:23:5b:6c:ff:b3:2a:30:98:ce:76:
b3:1f:3f:85:fc:19:c5:94:04:a6:cb:5c:c0:ff:6d:
88:59:b6:89:91:1a:a4:bd:ec:c3:64:08:3c:94:1a:
9a:3c:77:11:93:a4:7b:36:f0:a9:d4:86:49:61:c5:
12:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:96:01:E6:6A:81:FB:62:A1:77:13:42:AE:48:B1:C3:26:FA:EA:C6
X509v3 Authority Key Identifier:
keyid:89:AF:87:69:33:97:03:DA:3B:0C:B5:E8:31:02:3D:3B:F6:3F:02:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:28:19:02:52:5c:0c:29:64:14:da:86:c6:a0:97:8b:f4:e4:
1f:b2:65:f2:a1:80:17:4c:1d:09:65:9f:f3:90:7c:a3:5e:ce:
f4:44:d5:45:dd:08:55:1a:61:7b:f9:58:d2:fc:5f:5d:db:46:
4c:d3:b6:17:b1:0e:f1:b5:6c:8a:e9:55:6d:ec:ff:5d:e7:7f:
3f:25:8e:4b:75:80:ac:99:52:3e:fc:4e:c9:f5:67:13:88:d5:
37:11:fc:99:2b:a8:82:14:13:3e:5f:4d:7c:45:8f:e0:a1:c0:
11:44:c7:5f:d0:70:81:51:a0:73:3d:5d:9d:39:7f:de:6e:1c:
cc:41:d1:a2:fe:55:b1:4d:56:c3:54:71:08:17:7f:e7:70:b8:
5e:97:af:3a:1b:34:37:b6:fb:ac:f6:0e:ee:a3:1a:53:10:6e:
07:f3:db:75:82:cd:12:99:ae:e3:8c:8d:fa:eb:53:b1:8e:cd:
38:c9:5d:46:37:12:58:c7:e5:08:d0:6b:62:ad:ba:dd:43:94:
25:07:5a:83:d0:ff:8d:78:fd:7c:b5:4d:25:b0:fa:24:93:e3:
2c:d7:95:11:1f:6b:28:f1:71:a8:cf:80:3f:87:18:eb:e7:17:
86:1d:3b:6d:8a:9c:c3:d8:fa:4b:9d:35:9c:14:81:08:e8:c5:
3e:40:0c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:47:52 2026 by rpki-client