Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
File: haqtxWj2ySj9dk1CHULHHPV5GVQ.mft (raw, json)
Hash identifier: uhK7Jql4VB36vXSp1bhlwwS+Xp17xwoOIep+F1SJEiI=
Subject key identifier: 13:34:8C:0A:F0:EA:71:1D:BD:02:3B:8A:1E:73:60:55:40:8C:E8:E3
Authority key identifier: 85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
Certificate issuer: /CN=85aaadc568f6c928fd764d421d42c71cf5791954
Certificate serial: 019EBFFF82F85685122D86151F49A804D952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
Manifest number: 1871
Signing time: Sat 13 Jun 2026 08:00:53 +0000
Manifest this update: Sat 13 Jun 2026 08:00:53 +0000
Manifest next update: Sun 14 Jun 2026 08:00:53 +0000
Files and hashes: 1: AM5ErPXEiMWsS6Ae1m7Tslc6XbE.roa (hash: bjQPug2v0rNOIw/ni5VI2hHRrE9nXwVPApu1cIBClbQ=)
2: haqtxWj2ySj9dk1CHULHHPV5GVQ.crl (hash: Q/A3dAE77kTu6G4x9khA+GaUJFHstsNMjelTl4CpOC4=)
3: irA0JceEuEodl99Q_dZTTdY7HaA.roa (hash: VyxTOx+3wVfafkLhbAvwOmaRgP56DMjB9J1S/JOzUO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:82:f8:56:85:12:2d:86:15:1f:49:a8:04:d9:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85aaadc568f6c928fd764d421d42c71cf5791954
Validity
Not Before: Jun 13 08:00:53 2026 GMT
Not After : Jun 14 08:00:53 2026 GMT
Subject: CN=13348c0af0ea711dbd023b8a1e736055408ce8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e3:d0:dd:b1:1a:09:b8:8c:59:74:8a:ec:84:
5e:ef:be:d3:c8:d3:85:e1:a8:3d:5d:6b:28:1e:96:
3f:9c:a7:f4:99:8f:7b:15:54:fe:d5:4a:c0:c8:fb:
9d:86:d0:f1:92:0e:bb:d8:fd:63:e2:a7:1c:9a:d2:
78:b8:4e:ee:39:be:99:1e:74:3b:5a:84:10:cf:56:
af:c8:56:6a:56:3e:85:62:09:6d:39:eb:26:08:d9:
7a:62:1c:0f:5e:5c:cf:f8:6e:35:99:7d:e9:3b:fa:
9a:b9:7a:2b:fb:e4:6f:f1:80:02:30:2e:04:c2:d6:
8a:61:85:d0:b4:b4:fa:d5:3c:af:dd:15:c1:5d:ff:
9f:91:97:67:b4:4d:55:cc:b5:c5:1d:b9:44:d5:0e:
56:5d:0e:e7:64:58:56:c9:a7:1b:21:20:8f:69:11:
47:b8:7e:cf:55:07:7c:cb:44:db:b5:87:80:15:2a:
47:34:25:ce:80:e4:e2:53:87:34:d0:c7:76:1f:41:
0d:d5:11:7f:c2:e1:31:fc:56:7f:a9:da:ef:e5:7d:
d5:82:eb:18:64:20:57:b0:bc:7b:aa:ef:7c:87:bd:
92:9d:45:46:6d:df:69:33:4a:d0:23:89:a7:96:43:
f7:55:57:5f:71:ed:32:48:a0:4c:09:cc:68:d8:16:
29:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:34:8C:0A:F0:EA:71:1D:BD:02:3B:8A:1E:73:60:55:40:8C:E8:E3
X509v3 Authority Key Identifier:
keyid:85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:ef:bc:bb:3c:8b:05:40:55:9c:f4:d5:b2:46:d5:40:95:e7:
4a:c6:f8:f7:8e:5f:7b:28:27:62:4c:0c:e4:fb:ff:7b:1a:7f:
30:dc:8d:14:75:63:cd:7f:30:78:92:c8:d4:11:08:0e:6f:e6:
87:8a:e9:8d:5b:d2:38:fc:43:c8:a4:09:5a:61:a0:e3:db:4f:
fc:c7:2e:d2:71:53:a2:79:65:2c:b8:eb:e7:b3:7a:d2:86:c8:
99:6c:58:45:b0:ad:21:e9:60:bf:32:e4:1c:ff:fa:a5:e9:3d:
f8:6c:dd:8c:90:8f:1b:b3:37:0f:15:05:2d:6a:18:08:77:98:
27:fa:c9:aa:9d:e4:ee:f4:50:7d:a7:e3:70:c1:8e:62:d3:24:
c4:03:ab:d2:9f:88:7b:1a:ff:08:fe:01:db:08:05:89:8b:e7:
7e:05:68:59:f0:6e:2e:f6:bf:1f:74:bd:f7:34:14:23:9e:30:
0f:ba:d9:04:2e:ad:f6:bb:e2:5a:90:b6:f2:62:12:fa:30:e8:
b5:55:d5:42:f9:6f:97:52:91:34:39:f7:bb:ab:f5:62:73:ba:
22:72:5c:42:49:71:b6:00:30:32:cb:9c:d7:77:72:a9:b8:2f:
41:27:54:91:04:65:47:83:56:c5:bc:e8:67:36:05:09:a8:bc:
57:d3:b6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:21:11 2026 by rpki-client