Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
File: haqtxWj2ySj9dk1CHULHHPV5GVQ.mft (raw, json)
Hash identifier: wSOXALnlFMBcVxy9GXa/gw6uz3WlyYoNat0Rkjzrbz0=
Subject key identifier: 88:28:CD:2D:86:B9:FB:5A:14:C6:1A:DC:04:29:A2:79:87:2D:21:7C
Authority key identifier: 85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
Certificate issuer: /CN=85aaadc568f6c928fd764d421d42c71cf5791954
Certificate serial: 019E1DC7443A095A63A66909F70CDA773063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
Manifest number: 181D
Signing time: Tue 12 May 2026 20:00:58 +0000
Manifest this update: Tue 12 May 2026 20:00:58 +0000
Manifest next update: Wed 13 May 2026 20:00:58 +0000
Files and hashes: 1: AM5ErPXEiMWsS6Ae1m7Tslc6XbE.roa (hash: bjQPug2v0rNOIw/ni5VI2hHRrE9nXwVPApu1cIBClbQ=)
2: haqtxWj2ySj9dk1CHULHHPV5GVQ.crl (hash: PfNgBlQsjhtBXakBFn6EgLhJCQDLKk0UPZO0nnl+HLM=)
3: irA0JceEuEodl99Q_dZTTdY7HaA.roa (hash: VyxTOx+3wVfafkLhbAvwOmaRgP56DMjB9J1S/JOzUO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:44:3a:09:5a:63:a6:69:09:f7:0c:da:77:30:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85aaadc568f6c928fd764d421d42c71cf5791954
Validity
Not Before: May 12 20:00:58 2026 GMT
Not After : May 13 20:00:58 2026 GMT
Subject: CN=8828cd2d86b9fb5a14c61adc0429a279872d217c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fd:d1:5f:e1:91:4c:31:f7:57:da:ff:79:a0:
12:da:7a:3f:dc:46:69:2c:ef:9e:7f:b6:91:b0:54:
68:d9:c9:5e:04:b4:ed:12:75:37:09:ff:1a:a1:ca:
63:eb:fd:f9:70:e1:7a:1f:4c:21:43:69:2d:b5:c6:
94:30:8c:69:a6:cf:19:e0:5a:e8:40:40:1b:a1:69:
fd:81:73:f8:a3:72:4f:dd:f7:47:93:91:72:f5:46:
15:19:4e:24:81:39:65:27:84:62:b6:cf:ee:14:ec:
57:8e:2f:c6:2e:c4:46:81:a1:ac:06:36:65:82:dd:
14:74:03:4f:4c:17:80:48:32:86:4b:3e:d6:b2:f1:
93:f1:1a:f7:66:15:2d:83:4c:10:fe:72:6e:11:a9:
ee:49:03:4b:9e:08:63:91:af:62:a2:0d:68:6b:f3:
a8:41:ba:9b:6e:49:6f:ab:97:98:a6:e2:da:2d:e5:
cf:c9:ce:de:54:a2:8f:37:e6:8c:64:e3:7a:81:1a:
45:56:8a:c5:ad:5e:40:9e:ae:6f:a5:f4:e2:a3:bd:
2b:bc:69:88:cc:4f:91:96:55:72:82:97:1d:11:04:
73:1c:be:7b:49:73:65:11:ea:2e:61:b3:7e:f5:6c:
cf:18:36:cc:f1:fb:ca:0f:e9:42:60:dc:94:3b:ea:
3a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:28:CD:2D:86:B9:FB:5A:14:C6:1A:DC:04:29:A2:79:87:2D:21:7C
X509v3 Authority Key Identifier:
keyid:85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:3a:20:d5:30:81:76:19:02:1c:aa:69:92:d8:b2:dc:9b:b8:
50:8d:2b:94:a0:2a:30:d0:2a:39:20:1b:9f:31:ed:db:ac:83:
20:91:55:3c:e5:07:35:85:26:06:ae:44:68:d7:2f:e6:15:36:
4f:22:f8:af:6d:71:0d:ff:8c:f5:fc:be:05:07:82:80:6e:13:
fc:45:13:b3:86:c7:ad:0b:a5:85:d5:c9:1e:27:e4:a5:8d:63:
28:86:0b:c2:d2:18:7c:68:ed:32:24:d3:34:03:01:70:1c:e0:
d2:4c:e8:d1:d4:c4:d5:42:e0:06:6d:f4:17:0d:cc:ae:e6:1d:
d1:01:a4:b1:6a:ff:e3:55:41:27:b4:0e:2b:ce:37:82:12:91:
69:79:ed:22:7e:fb:54:58:58:71:fd:41:45:ed:db:28:49:21:
8d:44:0b:14:f8:54:99:4b:63:a7:12:ff:e1:d4:61:84:c5:e6:
54:c3:b7:12:f9:74:f8:2a:2b:14:ef:3a:a0:82:c6:02:b6:79:
64:e2:e9:c4:ff:f3:8e:bd:45:01:c3:c0:99:e2:26:5e:b3:16:
e5:59:67:7b:33:b0:2b:49:42:4b:cd:b4:6b:82:83:5b:b4:d2:
d5:47:5c:dd:04:70:12:31:f5:cf:50:a0:b3:55:02:2e:95:a6:
98:89:94:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:13:48 2026 by rpki-client