Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
File: haqtxWj2ySj9dk1CHULHHPV5GVQ.mft (raw, json)
Hash identifier: tEG0rKJ/rFXu1aCkUkpklj1YCyJKdO3NcjlBOZB2PE4=
Subject key identifier: 86:90:78:26:09:8D:4B:B3:3D:CC:0B:B2:A2:47:99:5A:25:E2:65:FD
Authority key identifier: 85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
Certificate issuer: /CN=85aaadc568f6c928fd764d421d42c71cf5791954
Certificate serial: 019FAD88DCDCD2449AA2D64F5E76515198CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
Manifest number: 18EC
Signing time: Wed 29 Jul 2026 11:00:55 +0000
Manifest this update: Wed 29 Jul 2026 11:00:55 +0000
Manifest next update: Thu 30 Jul 2026 11:00:55 +0000
Files and hashes: 1: AM5ErPXEiMWsS6Ae1m7Tslc6XbE.roa (hash: bjQPug2v0rNOIw/ni5VI2hHRrE9nXwVPApu1cIBClbQ=)
2: haqtxWj2ySj9dk1CHULHHPV5GVQ.crl (hash: njV2eag3xzbZUeFULfFaWWF3i8NtlKJSYyxtz47EE9o=)
3: irA0JceEuEodl99Q_dZTTdY7HaA.roa (hash: VyxTOx+3wVfafkLhbAvwOmaRgP56DMjB9J1S/JOzUO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:88:dc:dc:d2:44:9a:a2:d6:4f:5e:76:51:51:98:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85aaadc568f6c928fd764d421d42c71cf5791954
Validity
Not Before: Jul 29 11:00:55 2026 GMT
Not After : Jul 30 11:00:55 2026 GMT
Subject: CN=86907826098d4bb33dcc0bb2a247995a25e265fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:55:ae:d3:f4:bd:3b:84:51:78:2f:d7:24:89:
64:bf:eb:8e:b3:ab:13:1a:e3:68:90:c6:53:66:fd:
64:95:16:48:c4:45:85:3d:11:c0:d6:63:3e:a0:cb:
bc:d3:8f:42:7b:de:c5:b3:3a:04:ac:59:46:97:bd:
1b:20:85:03:5b:54:88:08:60:59:3f:d1:70:66:13:
93:d2:95:85:a3:01:ed:05:e5:b3:4e:e0:d4:75:56:
77:d7:7b:ab:30:f0:f5:03:4d:18:db:96:9b:f9:16:
68:88:b1:b9:42:3d:df:7f:9b:93:7c:13:02:4f:01:
23:a0:26:99:75:a0:8a:f2:1f:e9:0d:f5:84:b4:7b:
53:09:4f:c6:84:21:6d:41:9b:51:b0:7c:67:00:83:
69:54:d5:ba:2a:51:af:b6:03:58:ca:35:49:c1:5b:
dc:5c:20:41:96:61:da:bc:26:00:fb:95:7a:fd:c6:
cb:98:96:f5:80:bf:cb:b6:13:7c:0b:35:fa:5b:87:
ca:9c:52:46:a3:4a:69:36:da:80:86:e5:25:f0:6e:
ee:db:4d:fd:db:aa:1b:ea:c3:9c:31:2c:a2:c3:68:
71:78:a9:f2:03:38:a1:af:9a:29:22:c4:c8:79:dc:
70:fd:73:fe:ce:ba:db:e0:36:48:49:03:b4:cc:62:
95:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:90:78:26:09:8D:4B:B3:3D:CC:0B:B2:A2:47:99:5A:25:E2:65:FD
X509v3 Authority Key Identifier:
keyid:85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:28:f3:98:41:e2:09:83:c0:56:9e:55:3e:24:5f:80:9e:12:
01:1c:e1:f7:a7:a0:45:bd:75:b9:f5:cd:a7:ff:b4:f4:7a:cd:
7d:08:e4:72:02:a7:ee:74:db:57:06:e2:ca:c4:27:5e:e7:f3:
24:39:c0:8e:96:24:46:90:de:d6:4a:70:b7:9a:bc:03:83:a7:
d6:d4:57:64:74:1d:9f:a7:da:d7:25:97:36:8d:ca:d7:95:90:
87:93:4a:a6:99:67:9c:6b:a4:a8:c2:c1:a2:90:06:92:20:0d:
b7:d5:0a:18:6d:b8:a8:17:77:2b:76:d2:b3:ea:84:83:20:60:
9d:c6:cc:51:6e:81:07:ad:9e:f8:60:56:4d:14:ae:5b:db:ec:
bd:3e:7f:29:45:f9:6a:0d:fa:63:ba:95:37:24:61:8b:fa:d3:
0e:26:54:ae:06:45:3b:ba:3e:c7:d0:7c:ce:7e:40:fd:66:49:
df:9c:ec:bf:39:bb:2a:26:05:6a:23:79:85:2d:52:0c:ce:7a:
80:2e:de:50:99:87:6a:94:f6:32:90:2d:da:ed:57:99:ec:bc:
21:f7:4b:ca:10:df:02:7f:26:4c:c2:cb:14:86:4e:d7:78:ca:
6f:c8:8d:07:69:21:55:4e:85:83:ce:9e:81:c8:60:cf:42:26:
f2:4d:73:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:31:10 2026 by rpki-client