Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
File: haz7mtOlDOFTMc_066iLzAe3ooI.mft (raw, json)
Hash identifier: kiMoDX+RWDHPpweWc9Ax5992PuA8l3jF3DpDYkfeeTI=
Subject key identifier: 44:36:3B:55:A7:40:7B:25:69:1C:C9:AF:71:04:03:CD:A8:09:24:84
Authority key identifier: 85:AC:FB:9A:D3:A5:0C:E1:53:31:CF:F4:EB:A8:8B:CC:07:B7:A2:82
Certificate issuer: /CN=85acfb9ad3a50ce15331cff4eba88bcc07b7a282
Certificate serial: 019FADBFC0CBF2A0BC4E04F1A80FF036C84B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
Manifest number: 0958
Signing time: Wed 29 Jul 2026 12:00:52 +0000
Manifest this update: Wed 29 Jul 2026 12:00:52 +0000
Manifest next update: Thu 30 Jul 2026 12:00:52 +0000
Files and hashes: 1: LVJLyRNkzYXWrFPMXDuqL1cx3r0.roa (hash: /6VNNRjnmK1nx7DLPoyOKEbtFH+S0vHKlP1nyDqaMBk=)
2: haz7mtOlDOFTMc_066iLzAe3ooI.crl (hash: ChX5uw4CYxnBHnD1HV44q9slgMh0OMSyNf+3bYDti8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:bf:c0:cb:f2:a0:bc:4e:04:f1:a8:0f:f0:36:c8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85acfb9ad3a50ce15331cff4eba88bcc07b7a282
Validity
Not Before: Jul 29 12:00:52 2026 GMT
Not After : Jul 30 12:00:52 2026 GMT
Subject: CN=44363b55a7407b25691cc9af710403cda8092484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f8:3f:c6:18:d6:a6:f2:6e:08:c2:4a:ee:e4:
78:92:d1:af:cf:0f:37:6c:22:1f:0a:bc:ef:08:9c:
fc:36:69:0f:0a:54:16:ce:86:d8:d8:68:90:ae:4a:
1b:da:29:58:cf:77:c7:f8:1d:d7:b1:d5:a7:46:d8:
f2:f0:28:a0:d6:93:73:14:71:06:52:c5:d2:c0:56:
cc:a8:36:9c:0e:79:0b:a3:86:d8:8a:86:25:95:4a:
29:3a:b3:18:43:e6:5e:cb:8c:38:e8:e8:81:6c:8e:
4f:80:2b:30:cb:83:84:32:84:5a:36:2b:ec:74:08:
34:f0:b0:f2:08:bc:ec:3d:12:20:61:e3:73:f8:05:
19:5d:c4:7a:10:1b:0e:3e:96:66:49:a5:a3:ea:7b:
b8:3d:cd:ef:b1:77:0a:1e:37:b5:1d:35:db:2d:08:
1d:b4:ea:1d:01:d1:e8:36:1d:95:40:ed:61:db:bf:
cb:72:62:92:73:a3:18:1d:e9:f8:48:b8:8d:87:77:
d5:bd:5a:63:30:c4:7f:d0:9b:d4:c9:0b:e2:a7:70:
2f:d4:c5:48:00:5e:23:3c:0c:7d:cd:e4:32:bf:17:
f9:45:62:1e:17:2e:cb:7d:7a:20:ff:9c:f0:8b:4d:
0c:d3:a1:3c:dc:5f:11:89:19:e8:a2:65:56:d0:a5:
71:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:36:3B:55:A7:40:7B:25:69:1C:C9:AF:71:04:03:CD:A8:09:24:84
X509v3 Authority Key Identifier:
keyid:85:AC:FB:9A:D3:A5:0C:E1:53:31:CF:F4:EB:A8:8B:CC:07:B7:A2:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:65:83:22:20:d5:66:e3:fb:33:2b:e2:3d:98:70:7d:0a:57:
06:48:12:e3:4c:3c:af:f5:17:eb:b3:90:30:ea:8b:d8:bb:50:
a3:d9:bc:a1:9e:a9:50:ee:d6:31:f2:89:8f:d7:3e:2a:34:a9:
e2:1c:f5:e5:f8:57:0a:96:4d:83:b2:65:41:db:4d:0f:ae:e4:
56:10:b0:6f:de:b7:e7:1a:bd:ea:3b:2b:6f:a5:6f:e5:3d:8a:
ad:7d:37:4d:19:e3:89:8a:73:7b:07:91:0f:38:9b:c2:fa:97:
11:93:c5:b2:79:bf:63:4b:cd:db:3e:64:2a:8a:12:02:c2:1b:
05:f4:86:d2:0c:59:26:26:d7:60:61:e9:a3:27:f5:01:74:61:
ef:7a:a4:1d:fd:77:90:a3:f4:74:3d:a9:7c:c7:fb:d9:30:45:
38:e5:a1:5d:9c:ea:fe:56:16:ea:15:cd:7c:f5:81:72:c1:fc:
40:96:41:ac:37:75:ba:34:dc:e2:be:d7:a4:8d:08:df:d4:93:
73:6e:ce:51:4b:43:57:33:b6:3d:29:9c:4f:94:d2:01:b6:14:
8f:26:4b:28:32:d0:a4:c2:f7:a4:6e:b4:9e:d0:9a:b6:8a:9d:
37:22:bc:d4:98:c9:85:6c:14:37:e2:be:29:94:ba:64:b3:f3:
8e:b1:f3:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tv8DL8qC8TgTxqA/wNshLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1YWNmYjlhZDNhNTBjZTE1MzMxY2ZmNGViYTg4YmNjMDdi
N2EyODIwHhcNMjYwNzI5MTIwMDUyWhcNMjYwNzMwMTIwMDUyWjAzMTEwLwYDVQQD
Eyg0NDM2M2I1NWE3NDA3YjI1NjkxY2M5YWY3MTA0MDNjZGE4MDkyNDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPg/xhjWpvJuCMJK7uR4ktGvzw83
bCIfCrzvCJz8NmkPClQWzobY2GiQrkob2ilYz3fH+B3XsdWnRtjy8Cig1pNzFHEG
UsXSwFbMqDacDnkLo4bYioYllUopOrMYQ+Zey4w46OiBbI5PgCswy4OEMoRaNivs
dAg08LDyCLzsPRIgYeNz+AUZXcR6EBsOPpZmSaWj6nu4Pc3vsXcKHje1HTXbLQgd
tOodAdHoNh2VQO1h27/LcmKSc6MYHen4SLiNh3fVvVpjMMR/0JvUyQvip3Av1MVI
AF4jPAx9zeQyvxf5RWIeFy7LfXog/5zwi00M06E83F8RiRnoomVW0KVxuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQ2O1WnQHslaRzJr3EEA82oCSSEMB8GA1UdIwQY
MBaAFIWs+5rTpQzhUzHP9Ouoi8wHt6KCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGF6N210T2xET0ZUTWNfMDY2aUx6QWUzb29JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wYmVkNTItYjdjYy00MTRhLTljODgt
NmQ3N2YwNjVhMmMzLzEvaGF6N210T2xET0ZUTWNfMDY2aUx6QWUzb29JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8wYmVkNTItYjdjYy00MTRhLTljODgtNmQ3N2YwNjVhMmMz
LzEvaGF6N210T2xET0ZUTWNfMDY2aUx6QWUzb29JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOGWDIiDV
ZuP7MyviPZhwfQpXBkgS40w8r/UX67OQMOqL2LtQo9m8oZ6pUO7WMfKJj9c+KjSp
4hz15fhXCpZNg7JlQdtND67kVhCwb9635xq96jsrb6Vv5T2KrX03TRnjiYpzeweR
DzibwvqXEZPFsnm/Y0vN2z5kKooSAsIbBfSG0gxZJibXYGHpoyf1AXRh73qkHf13
kKP0dD2pfMf72TBFOOWhXZzq/lYW6hXNfPWBcsH8QJZBrDd1ujTc4r7XpI0I39ST
c27OUUtDVzO2PSmcT5TSAbYUjyZLKDLQpML3pG60ntCatoqdNyK81JjJhWwUN+K+
KZS6ZLPzjrHzZg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 17:22:49 2026 by rpki-client