Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
File: haqtxWj2ySj9dk1CHULHHPV5GVQ.mft (raw, json)
Hash identifier: cEpiqezpH80r84IKQJWoTH11WpHObnZubTC15W4sUGE=
Subject key identifier: 42:C9:B9:04:2E:E1:23:3B:82:21:65:2F:E5:B7:4C:2F:7D:F1:E4:C4
Authority key identifier: 85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
Certificate issuer: /CN=85aaadc568f6c928fd764d421d42c71cf5791954
Certificate serial: 019CAAFD5BAD4730BB2283A48F8E7AAE8421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
Manifest number: 175C
Signing time: Sun 01 Mar 2026 20:00:56 +0000
Manifest this update: Sun 01 Mar 2026 20:00:56 +0000
Manifest next update: Mon 02 Mar 2026 20:00:56 +0000
Files and hashes: 1: AM5ErPXEiMWsS6Ae1m7Tslc6XbE.roa (hash: bjQPug2v0rNOIw/ni5VI2hHRrE9nXwVPApu1cIBClbQ=)
2: haqtxWj2ySj9dk1CHULHHPV5GVQ.crl (hash: Q/54kFZybxqVD5ysvUxTAJWdygt+G7eqNOE7qlVThG0=)
3: unIU6ua6HUnZMkaiiyaVGW282c4.roa (hash: FaAM7DvIIw5oZC8J0pDY2WDx4oPP9+5oos8AGvZZxug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:5b:ad:47:30:bb:22:83:a4:8f:8e:7a:ae:84:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85aaadc568f6c928fd764d421d42c71cf5791954
Validity
Not Before: Mar 1 20:00:56 2026 GMT
Not After : Mar 2 20:00:56 2026 GMT
Subject: CN=42c9b9042ee1233b8221652fe5b74c2f7df1e4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:29:bd:fa:99:b9:3a:9b:c7:7a:92:e0:b3:27:
d8:f0:1e:2b:37:92:44:a0:54:4c:b6:d7:1d:4a:69:
2c:e6:f7:81:f7:95:a4:02:55:ad:17:ea:de:90:e1:
54:1d:7b:db:7a:1a:f3:bf:2d:f6:bd:ca:da:7e:3b:
dd:d3:33:55:79:c1:be:de:a5:a6:25:ef:7c:4e:1d:
b6:fc:58:eb:90:9a:f2:ab:17:37:83:e1:14:07:47:
4c:e9:35:56:07:7d:c6:dc:79:8f:50:b2:38:13:69:
81:70:e6:ec:2f:d2:69:78:bc:42:da:b8:2c:0f:2e:
b3:7c:b4:85:6d:a1:bc:3a:42:bd:07:6d:45:87:ce:
a5:af:4e:1a:86:f5:ac:da:e8:f1:60:1d:ad:ae:bc:
6a:86:af:9a:75:a5:41:66:4d:24:86:bc:cf:54:a2:
65:67:5c:d9:0e:7a:d6:23:2b:72:6f:6b:2b:56:c1:
b2:cf:08:7f:8f:08:0c:4d:e9:df:1d:36:12:6f:3f:
db:37:04:88:d9:31:4c:e4:af:cd:bf:79:ac:cd:a9:
5e:38:63:6e:1c:a7:2b:60:da:a2:ad:d3:aa:f8:95:
d3:e7:33:b5:81:77:46:be:5f:e4:27:cb:92:64:4b:
85:92:3f:be:56:9f:40:f4:31:83:0e:ef:3c:fe:f7:
b7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C9:B9:04:2E:E1:23:3B:82:21:65:2F:E5:B7:4C:2F:7D:F1:E4:C4
X509v3 Authority Key Identifier:
keyid:85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:c9:09:ed:7e:49:35:eb:cf:f1:ca:a7:4f:dc:76:10:29:da:
f8:27:1f:85:a3:1c:ca:9c:8c:2c:63:34:b0:3e:32:2a:3a:e1:
68:2f:3c:90:10:b6:05:53:bc:a3:d2:5f:22:4a:2c:bf:33:59:
b1:2e:f9:d3:e0:03:59:ad:5e:66:a9:22:c7:a9:01:97:54:19:
f8:c8:4c:0b:37:9a:e1:3e:9f:52:a5:24:ae:25:77:50:e4:5c:
35:09:45:23:30:e9:80:ad:81:42:95:e2:42:6f:25:e0:db:45:
15:9e:0d:04:06:02:36:eb:2f:0e:16:e6:fc:4c:25:b4:8b:50:
c0:9e:a6:a0:3a:95:ed:42:ea:3f:8a:1a:83:30:d9:cd:b8:13:
6c:40:25:22:73:4a:91:eb:aa:fe:45:f5:ef:e5:f8:eb:a7:24:
4a:4a:b9:8f:81:80:c1:66:24:d0:92:23:a4:8a:47:e2:69:e0:
96:f5:b5:11:04:fc:59:fc:35:ed:c8:cd:13:65:ba:b0:a3:0a:
5e:e9:0b:21:8c:63:49:04:1e:82:f3:0b:5d:52:6f:5a:4f:18:
12:ad:c6:39:ba:18:e1:3c:00:73:b5:2b:4f:de:0f:ed:66:f2:
06:f5:87:58:b2:56:cf:3d:f6:5b:d2:4f:a3:0c:85:90:7c:03:
9f:97:7a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:56:25 2026 by rpki-client