Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
File: haqtxWj2ySj9dk1CHULHHPV5GVQ.mft (raw, json)
Hash identifier: 9R95R6LhjbWQPytNIbtG9vbKabf/dVDRpdpkenid5i8=
Subject key identifier: B8:E8:DD:07:4C:7F:76:8D:F4:BE:9A:E8:D2:E4:54:7F:B2:EF:5C:E3
Authority key identifier: 85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
Certificate issuer: /CN=85aaadc568f6c928fd764d421d42c71cf5791954
Certificate serial: 01A0C3D6D601D715EC5483A47F2B01C999EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
Manifest number: 197D
Signing time: Mon 21 Sep 2026 12:00:31 +0000
Manifest this update: Mon 21 Sep 2026 12:00:31 +0000
Manifest next update: Tue 22 Sep 2026 12:00:31 +0000
Files and hashes: 1: AM5ErPXEiMWsS6Ae1m7Tslc6XbE.roa (hash: bjQPug2v0rNOIw/ni5VI2hHRrE9nXwVPApu1cIBClbQ=)
2: haqtxWj2ySj9dk1CHULHHPV5GVQ.crl (hash: rvk4mhbF/1eFAAew4wEpjazRTzMUjvCBUwrOwCcNy8g=)
3: x85HhXDdK_S_B_1TyEgGIu-iBaU.roa (hash: NwFDd4jlTrwT9j2WB98f+hEAsx2o3sG2DrPxRU3nr38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d6:d6:01:d7:15:ec:54:83:a4:7f:2b:01:c9:99:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85aaadc568f6c928fd764d421d42c71cf5791954
Validity
Not Before: Sep 21 12:00:31 2026 GMT
Not After : Sep 22 12:00:31 2026 GMT
Subject: CN=b8e8dd074c7f768df4be9ae8d2e4547fb2ef5ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:52:47:cd:85:f6:20:85:c5:b2:ae:9c:33:3d:
2b:e8:f4:fe:81:ec:78:57:32:6d:ff:9c:1e:4d:72:
eb:06:9b:d5:a2:c9:e6:3f:7d:7c:17:c5:fa:8a:46:
25:00:a6:b1:98:9d:81:89:8b:b8:03:b6:dd:2e:31:
54:5b:5e:60:40:40:29:a3:bc:f7:42:70:3c:71:a3:
40:91:19:3d:02:63:39:3a:be:dc:ac:62:44:de:02:
48:e8:1d:d6:bb:1b:93:b7:9d:ad:41:06:e7:79:70:
bd:ca:ff:9c:84:3f:60:09:37:f1:37:75:89:a2:6a:
c2:ab:ae:ce:f7:68:c7:a5:36:18:65:eb:5d:f9:e8:
84:e1:0f:f4:0a:ad:3b:6b:b4:fb:15:4b:ea:36:e7:
ca:7a:d9:b6:26:b7:3b:bd:0d:6e:8f:b1:bc:c5:1b:
f3:66:4c:b8:d2:f9:28:9c:6e:3e:e0:11:4a:f9:7e:
45:ae:56:46:d2:f3:b2:f1:a2:0b:18:2a:90:4d:89:
ee:43:02:3d:11:7f:ab:99:3c:10:72:b7:cc:f8:26:
58:b4:e3:02:ff:8b:7c:54:4e:dc:38:97:81:ea:02:
af:cf:ba:07:63:d6:0c:34:e9:c5:a4:fe:f1:ec:f9:
0e:10:f7:66:0c:6b:a1:65:1a:99:5a:43:a9:bf:31:
4f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E8:DD:07:4C:7F:76:8D:F4:BE:9A:E8:D2:E4:54:7F:B2:EF:5C:E3
X509v3 Authority Key Identifier:
keyid:85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:93:4a:15:52:be:9b:09:46:62:10:a0:46:e9:bc:1a:dc:ff:
50:9a:61:e9:a0:e3:34:34:04:23:47:b4:46:91:c4:06:3d:76:
e8:10:b6:e5:a0:2c:8a:b7:0a:00:90:52:ac:34:f3:b2:42:27:
52:53:a4:79:7d:1d:4a:92:3b:72:0b:ac:02:f2:9d:27:4e:7c:
08:64:25:fc:d7:44:85:7e:e4:76:60:98:74:79:fa:5b:94:7b:
56:99:5e:61:e7:1b:78:40:76:07:e3:4c:08:41:7b:ce:74:85:
24:42:67:12:07:b1:f7:18:f2:a2:ec:80:0d:22:1b:7f:83:a5:
5e:6e:0c:d6:fb:00:a5:a1:67:2f:eb:8a:76:1f:1a:c2:52:85:
8e:95:83:eb:4d:3e:c3:f6:1e:79:1e:04:e5:e8:69:bd:2e:62:
9d:5a:00:84:fd:91:5a:da:97:de:f5:3d:22:b4:d4:4f:b2:bf:
4a:b1:3f:62:1f:e2:58:20:31:47:83:d8:9f:21:12:ca:57:f1:
ab:d2:2d:2f:92:4f:df:45:05:6c:42:bf:42:5c:46:0f:a7:77:
77:46:c9:db:b8:26:72:3a:eb:38:49:04:92:5a:b0:b5:06:26:
02:57:50:14:16:e8:a6:a3:df:f3:6c:79:1c:bb:ee:06:2c:c5:
b1:c4:e8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:00:20 2026 by rpki-client