Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.mft
File: ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.mft (raw, json)
Hash identifier: aG/aF5qCAj4n94YqxUQ4g6Q6/ejcUCo/C8oEA24lYLc=
Subject key identifier: 9C:E5:01:34:21:8C:DD:2B:6D:37:8B:CA:B9:7E:7E:86:80:BA:95:1A
Authority key identifier: 89:AF:87:69:33:97:03:DA:3B:0C:B5:E8:31:02:3D:3B:F6:3F:02:2E
Certificate issuer: /CN=89af8769339703da3b0cb5e831023d3bf63f022e
Certificate serial: 019CAD5A43541AA639754F1F5B5CDCBCB463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.mft
Manifest number: 10F1
Signing time: Mon 02 Mar 2026 07:01:39 +0000
Manifest this update: Mon 02 Mar 2026 07:01:39 +0000
Manifest next update: Tue 03 Mar 2026 07:01:39 +0000
Files and hashes: 1: 7TJ8GqKMB7ONKpmIttAKlfVjIPI.roa (hash: YqU7Dk9vgRbL9GHaPYk9nyjuTWJnjnKlb/odLn25dDg=)
2: ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.crl (hash: AyMc8QQdgsQVpcppiBxJDXaTrAHY0VKJXIqejqpc1mI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:43:54:1a:a6:39:75:4f:1f:5b:5c:dc:bc:b4:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89af8769339703da3b0cb5e831023d3bf63f022e
Validity
Not Before: Mar 2 07:01:39 2026 GMT
Not After : Mar 3 07:01:39 2026 GMT
Subject: CN=9ce50134218cdd2b6d378bcab97e7e8680ba951a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:af:ee:7f:57:0a:af:0a:b0:d0:3f:1a:ea:ec:
69:65:3c:58:3c:c3:3a:ab:eb:08:1f:7e:d7:9e:34:
82:53:17:d8:f5:26:9a:a0:0f:85:3d:ab:09:c2:61:
2f:44:a0:f2:86:3b:1d:69:b8:5c:e4:43:70:b3:bb:
a0:c1:ef:e6:2e:62:09:8c:a8:31:0a:6d:70:8c:6e:
e7:e7:d9:e2:eb:32:58:62:eb:d2:5b:0d:ab:8a:d8:
73:14:db:1b:6a:b9:d9:dd:9b:df:7c:a4:7c:a1:ba:
08:fc:17:53:d1:47:b9:c2:15:7e:3d:ef:7e:3c:31:
78:5d:ab:67:97:00:e7:20:3b:c7:00:7f:88:73:a5:
b0:ee:a5:7b:c0:1a:65:8a:40:99:ab:36:ed:fa:16:
49:98:a2:49:4c:96:a7:3d:85:a7:53:d1:8f:15:98:
be:c9:50:51:3f:38:ac:3b:73:01:71:f3:53:8c:ee:
54:2a:4c:fd:e9:aa:71:88:43:02:a4:ea:fb:42:24:
0e:91:b0:20:f7:b5:bd:d6:18:30:e3:ee:5d:42:87:
17:ff:b9:4b:33:d5:d0:39:f7:4c:8a:af:5d:b8:3c:
b2:a4:ac:6e:f4:20:f9:ee:e1:bc:4b:8b:48:10:51:
38:ae:d2:15:05:b7:34:d2:7f:f8:6b:5a:1d:21:9f:
c9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E5:01:34:21:8C:DD:2B:6D:37:8B:CA:B9:7E:7E:86:80:BA:95:1A
X509v3 Authority Key Identifier:
keyid:89:AF:87:69:33:97:03:DA:3B:0C:B5:E8:31:02:3D:3B:F6:3F:02:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:f9:84:b8:53:e2:11:14:11:08:5d:5e:00:a4:02:10:d4:d5:
f4:7c:01:9f:86:de:e2:8e:9b:a2:9e:94:1c:76:6f:61:0c:da:
18:18:a4:12:f0:3c:bf:d2:6e:71:e5:82:67:11:84:04:a9:d0:
fb:ca:f5:2c:93:89:90:98:d0:91:5e:99:30:ec:e1:88:b5:00:
04:bf:35:47:14:01:11:80:69:bb:e1:27:53:aa:48:c3:54:3b:
e9:9b:7c:12:2e:2b:76:db:4b:9b:0d:33:22:73:f2:f9:e6:e4:
96:2f:8d:df:a4:38:5a:c0:ca:44:35:08:26:ed:2c:53:79:58:
00:6e:b3:24:f5:ef:2a:f7:e0:4f:9a:49:ab:55:fa:d4:80:eb:
5c:f4:80:42:9a:66:71:85:df:84:89:b5:b2:66:9c:81:e2:7f:
77:62:f7:24:40:56:ee:33:72:3b:e7:d5:53:aa:3b:42:58:54:
f8:cc:6f:98:ed:6c:8d:88:d7:69:82:c3:4f:52:a7:bb:3d:b3:
0f:2c:d9:7d:85:e6:be:28:f6:c9:5b:f8:57:9a:00:5e:0e:e1:
bb:f3:4b:e3:d6:64:87:d6:6d:2e:2a:df:5e:89:b5:33:55:91:
fc:c1:8c:01:73:97:da:95:63:5b:49:71:dc:63:6b:2f:34:a6:
fd:0f:2d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:26:22 2026 by rpki-client