Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
File: haz7mtOlDOFTMc_066iLzAe3ooI.mft (raw, json)
Hash identifier: qttcL8MXM6ABtS1QLXNxl34rh358DOAa8E8+SShu2OA=
Subject key identifier: 4A:DC:D0:03:47:A6:91:A4:63:12:30:8D:DC:AC:91:89:EB:87:91:DF
Authority key identifier: 85:AC:FB:9A:D3:A5:0C:E1:53:31:CF:F4:EB:A8:8B:CC:07:B7:A2:82
Certificate issuer: /CN=85acfb9ad3a50ce15331cff4eba88bcc07b7a282
Certificate serial: 01A0D15C0F3BFC5C56D081862AE4D711CDCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
Manifest number: 09EF
Signing time: Thu 24 Sep 2026 03:01:06 +0000
Manifest this update: Thu 24 Sep 2026 03:01:06 +0000
Manifest next update: Fri 25 Sep 2026 03:01:06 +0000
Files and hashes: 1: LVJLyRNkzYXWrFPMXDuqL1cx3r0.roa (hash: /6VNNRjnmK1nx7DLPoyOKEbtFH+S0vHKlP1nyDqaMBk=)
2: haz7mtOlDOFTMc_066iLzAe3ooI.crl (hash: AQ4oB6FhE3NyMwgeGhhw1nG3maqJQbJsNMIkxVIb2bM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5c:0f:3b:fc:5c:56:d0:81:86:2a:e4:d7:11:cd:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85acfb9ad3a50ce15331cff4eba88bcc07b7a282
Validity
Not Before: Sep 24 03:01:06 2026 GMT
Not After : Sep 25 03:01:06 2026 GMT
Subject: CN=4adcd00347a691a46312308ddcac9189eb8791df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0c:9c:13:f1:f5:c3:90:88:b7:91:36:b8:b3:
24:19:04:61:0e:a8:6a:3a:8a:8d:2b:8d:23:f0:73:
2c:03:81:c5:14:c7:c1:4a:ac:34:9a:57:46:1e:7d:
f4:87:c6:29:b1:5d:88:58:15:b6:5f:42:b0:bb:e6:
08:78:ce:c2:dd:de:c7:a3:88:80:3e:11:cf:8a:69:
f2:8a:3d:37:1b:8d:81:ad:23:c4:d7:09:b9:31:23:
a9:5d:ba:e5:a3:8b:96:a2:22:c1:e3:cf:37:f7:ae:
c2:3f:67:05:55:78:32:10:b0:59:a3:ac:c1:52:a2:
88:a9:af:77:0d:fd:ee:a4:f6:56:f6:2a:32:74:11:
c3:90:43:9d:a6:dd:c5:f5:ca:cd:00:94:f2:22:b1:
e9:b9:9b:7f:2f:b6:0e:e7:4e:8f:2d:77:d8:71:76:
87:ca:ce:5b:fd:6e:2f:3b:78:25:a0:c8:6f:ca:83:
28:87:bc:51:dc:35:6c:90:92:ba:b7:82:2e:6e:79:
a4:65:39:48:58:d2:b9:08:52:1e:10:55:28:13:54:
c5:f5:45:f4:8e:24:62:37:e9:0b:cd:c4:a8:e2:0a:
fa:b8:7f:47:41:37:18:92:e1:d6:3a:ce:33:61:63:
85:61:14:1c:69:b4:f0:a3:a5:e4:62:75:e7:98:12:
8b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DC:D0:03:47:A6:91:A4:63:12:30:8D:DC:AC:91:89:EB:87:91:DF
X509v3 Authority Key Identifier:
keyid:85:AC:FB:9A:D3:A5:0C:E1:53:31:CF:F4:EB:A8:8B:CC:07:B7:A2:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:58:bc:4b:06:99:2c:2b:ac:71:c8:36:eb:83:1d:7a:7d:3c:
87:c1:f8:eb:87:95:b7:1e:22:49:83:ed:17:68:57:5b:c5:a1:
d4:22:18:7e:84:c4:bd:a6:67:e8:0b:6d:74:aa:56:4e:94:f2:
a2:27:3f:da:aa:42:b5:88:9d:e4:0c:3d:fe:2d:5e:4d:a7:47:
42:92:19:c8:3e:9e:64:26:0f:f1:cb:65:34:be:b5:26:d1:3d:
39:ca:58:79:a0:e2:77:e6:00:05:5b:34:be:ad:30:17:a9:46:
a2:d3:41:d9:3c:c8:8f:38:ba:1c:58:2f:ea:a2:2a:72:ec:38:
e7:1c:06:fc:bf:1f:3c:92:98:10:a6:12:de:cc:04:1b:90:6d:
66:66:79:5d:2e:fe:e8:31:a8:50:f4:5d:1c:58:8c:05:fb:84:
36:af:e0:4a:60:76:ba:0c:77:5b:2a:8c:b9:c4:bc:e8:84:95:
2c:11:a3:f4:0d:ef:67:e1:f2:8f:0a:72:8c:b4:e7:2c:1c:f8:
5a:a8:48:95:c4:c9:1a:66:7a:a5:ea:41:bc:44:e5:a3:aa:b0:
b3:db:a0:f4:59:e8:e3:cf:55:74:18:b2:b6:b0:70:04:53:c7:
81:6b:c3:af:c8:9d:a6:3f:cf:77:5c:d2:d7:8f:f1:90:34:b2:
4a:b1:49:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:36:52 2026 by rpki-client