Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
File: Ha5HTXlZfbddH01JkBtSVYu_avQ.mft (raw, json)
Hash identifier: 162EF4ldD+mZz+SGybR33A4CdYUEpWoMUf/LB7T3H8k=
Subject key identifier: 04:AC:0B:A4:AF:AB:EC:DB:03:4A:97:BA:A1:52:BA:BE:87:45:E3:01
Authority key identifier: 1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
Certificate issuer: /CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Certificate serial: 019CAD9068FBFB42ADC236A9B50EADE7BDE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
Manifest number: 1065
Signing time: Mon 02 Mar 2026 08:00:48 +0000
Manifest this update: Mon 02 Mar 2026 08:00:48 +0000
Manifest next update: Tue 03 Mar 2026 08:00:48 +0000
Files and hashes: 1: Ha5HTXlZfbddH01JkBtSVYu_avQ.crl (hash: 6DfqdnTdlbSyZGs9Dn+xe5QdnLdf8crLzNk7/jI2djU=)
2: k97xiEPNhhSgqvtrR_5TEOjiPrM.roa (hash: ZH1DGUuXgshBEvHt5egPH/VHWGjZYucZ8h4th9PhsLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:68:fb:fb:42:ad:c2:36:a9:b5:0e:ad:e7:bd:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Validity
Not Before: Mar 2 08:00:48 2026 GMT
Not After : Mar 3 08:00:48 2026 GMT
Subject: CN=04ac0ba4afabecdb034a97baa152babe8745e301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:30:f1:8d:86:7d:f2:75:35:87:d5:43:b1:dd:
d1:2e:51:0a:c8:8c:d2:64:af:09:13:46:4b:c0:f6:
64:42:d1:63:4f:09:00:7e:e2:cb:bc:18:a3:f5:db:
34:c6:bd:52:aa:f8:bf:9d:74:f4:57:e2:b7:82:53:
6b:81:2c:6e:fb:b3:3f:92:4f:9b:9b:89:8a:8a:5e:
7f:0d:6d:da:4d:2c:52:07:76:47:4d:6b:f0:97:2d:
91:bf:23:f8:23:84:97:b1:dd:66:bc:8c:fa:66:3d:
fe:e6:48:e6:4f:b2:25:f9:96:c6:6f:01:84:76:95:
75:2d:4a:55:16:7a:dd:1c:f4:cd:3d:5b:81:b5:70:
40:60:16:32:b7:af:47:2a:84:12:c4:49:17:d0:d8:
aa:a4:cb:cb:be:37:84:27:4c:6d:8b:60:41:d9:84:
3f:8c:ab:c8:63:7e:76:33:6e:1a:fc:83:8f:e6:39:
64:f8:21:d5:5f:26:f1:e5:f3:97:d2:6a:a2:f1:37:
44:f2:7b:b0:8a:15:8d:25:03:9d:e1:b7:39:28:b6:
5b:4b:54:9d:3f:8b:ef:de:fc:97:e4:fd:70:b4:7e:
7e:98:ca:3c:72:5f:51:09:c5:06:e1:46:b5:b8:12:
32:ee:67:68:a8:5c:32:5c:81:5d:33:3c:2e:ed:de:
62:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AC:0B:A4:AF:AB:EC:DB:03:4A:97:BA:A1:52:BA:BE:87:45:E3:01
X509v3 Authority Key Identifier:
keyid:1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c1:a3:31:8f:f7:a6:65:62:f4:63:6e:2a:1e:22:e0:0d:1f:
75:2b:dd:8b:a7:96:95:5b:8d:3e:80:bb:85:73:95:fb:ee:0e:
ba:cc:44:34:df:bf:ef:6b:5c:a9:e1:a9:3b:bf:12:a2:91:34:
37:6f:c8:d7:e4:e5:1f:fc:d7:8d:bd:df:d7:dc:3a:1f:8b:00:
ee:21:be:e5:93:e9:a6:dd:78:49:a4:78:17:ae:1e:7c:60:be:
4e:de:74:94:fd:3e:4c:29:1d:22:8f:24:bd:e2:57:0b:1f:ef:
0d:38:8f:76:44:e2:71:1b:32:82:98:07:56:67:d8:77:d3:a7:
12:24:3e:f8:67:93:05:f1:65:06:88:74:c0:9d:e6:a4:2c:34:
98:af:e0:dc:a0:46:53:ed:53:65:dc:65:3f:44:f2:42:b0:df:
f4:30:37:03:94:b6:63:87:8c:b1:98:ab:f8:fa:28:1f:cd:39:
31:00:cb:a1:08:38:27:b4:15:0e:d4:3c:f6:5a:03:9a:0d:ce:
a1:aa:2f:87:98:d1:a7:e5:e3:2e:43:db:3a:4d:4a:b2:55:38:
a0:af:92:e3:d6:e8:45:37:f9:3f:88:3b:03:b2:b7:93:cc:4e:
74:c5:6c:06:c5:0d:23:8b:f5:f5:80:80:52:4f:b9:a2:3e:27:
ca:8e:06:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:18:31 2026 by rpki-client