Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
File: haqtxWj2ySj9dk1CHULHHPV5GVQ.mft (raw, json)
Hash identifier: wstnEqJA1sItseuABsL09ZyrbRDIOWcR+mZmuUcJHnI=
Subject key identifier: 93:72:37:90:23:3D:0A:16:95:F4:45:13:84:3A:26:A4:67:1F:1E:0B
Authority key identifier: 85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
Certificate issuer: /CN=85aaadc568f6c928fd764d421d42c71cf5791954
Certificate serial: 019D9A752B51C551F8FDAE93CA6D93195B01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
Manifest number: 17D9
Signing time: Fri 17 Apr 2026 08:01:03 +0000
Manifest this update: Fri 17 Apr 2026 08:01:03 +0000
Manifest next update: Sat 18 Apr 2026 08:01:03 +0000
Files and hashes: 1: AM5ErPXEiMWsS6Ae1m7Tslc6XbE.roa (hash: bjQPug2v0rNOIw/ni5VI2hHRrE9nXwVPApu1cIBClbQ=)
2: haqtxWj2ySj9dk1CHULHHPV5GVQ.crl (hash: 8yBpgBtHPZ/jZqhqi9zAtuppM9PWBCXUptUHpv6R2Kg=)
3: irA0JceEuEodl99Q_dZTTdY7HaA.roa (hash: VyxTOx+3wVfafkLhbAvwOmaRgP56DMjB9J1S/JOzUO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:2b:51:c5:51:f8:fd:ae:93:ca:6d:93:19:5b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85aaadc568f6c928fd764d421d42c71cf5791954
Validity
Not Before: Apr 17 08:01:03 2026 GMT
Not After : Apr 18 08:01:03 2026 GMT
Subject: CN=93723790233d0a1695f44513843a26a4671f1e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8e:38:6d:16:a7:82:43:b5:25:0f:c6:b4:55:
37:fe:26:bb:58:2a:42:67:72:75:ab:3a:94:66:a0:
0d:e1:80:c9:81:5d:3a:e0:ac:5d:31:fe:ab:49:f4:
10:dc:d8:9d:12:2d:a3:00:95:cb:65:59:65:44:23:
a8:77:3d:4f:c7:ae:cb:66:7d:8c:a1:85:48:6b:4e:
b0:f2:97:cf:ee:52:24:49:d9:ff:c2:37:a1:4b:df:
5c:fa:8a:e2:74:9b:39:a4:37:a1:d8:6d:86:ad:1e:
7a:f4:83:4d:54:d7:2d:73:72:dd:f1:f0:8e:86:71:
93:53:a2:60:f2:59:2f:39:05:d1:44:94:9f:f3:05:
89:34:ab:f7:37:08:94:d7:7e:cc:7c:06:64:af:4c:
57:f8:3a:9e:75:f8:bb:62:66:c3:ba:42:8b:fe:f7:
c0:cf:ce:2f:c9:46:2e:ea:c4:a7:f5:8b:f3:38:73:
25:01:c2:0d:04:82:f1:4c:33:50:89:a4:db:ff:ca:
63:60:ec:62:c6:4a:db:43:71:41:51:44:a3:eb:98:
00:0a:64:23:36:02:ec:87:0e:6b:fc:5f:c7:07:51:
7d:6b:7c:91:ea:e1:d0:1b:ac:c7:cf:05:32:eb:d9:
0e:5f:62:a9:27:c3:df:c0:08:7e:97:6c:78:7c:96:
42:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:72:37:90:23:3D:0A:16:95:F4:45:13:84:3A:26:A4:67:1F:1E:0B
X509v3 Authority Key Identifier:
keyid:85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:89:bf:a9:f4:1f:bc:16:dc:25:1f:9c:4b:21:50:5b:d7:96:
64:2a:8e:33:d9:42:d5:53:d7:94:da:22:29:c7:f2:24:2b:8e:
39:20:f1:d7:5c:e8:7c:0c:d6:c1:42:03:95:23:78:30:b7:e3:
de:08:7b:48:23:3a:d9:be:6d:40:55:98:8f:38:34:a5:8b:fc:
78:19:42:fb:8c:6c:dc:1a:16:3f:42:48:15:22:e3:92:b8:21:
e5:fe:5f:d0:af:94:81:d4:36:59:37:13:2b:fa:37:7d:61:f3:
41:30:6e:e2:aa:25:54:a0:73:65:99:e5:53:2e:52:51:29:ab:
ec:60:20:bd:ae:57:5c:e6:c2:8e:c5:20:06:a6:fb:f9:58:73:
42:3f:c4:9b:36:7a:16:03:9c:ec:23:c5:86:a7:e5:27:50:1f:
88:06:db:5e:15:9a:46:6b:23:72:08:70:2e:02:6c:4f:0c:73:
5c:b1:52:e1:f9:c5:22:9d:99:2a:5f:6e:7a:9a:6d:3d:19:51:
dd:1a:6c:09:26:55:24:5a:81:41:ca:cb:1d:8d:fa:78:78:81:
3a:62:76:55:85:b9:6e:14:54:58:31:91:78:8f:c7:07:76:f7:
fd:7e:c0:2f:55:4a:59:6e:28:0e:95:75:7d:c5:b5:1f:6c:14:
f4:0c:30:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:59:06 2026 by rpki-client