Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
File: haqtxWj2ySj9dk1CHULHHPV5GVQ.mft (raw, json)
Hash identifier: RovyvtkYZSqPB93EFm22jX5JdfyLNig80CXlm9zNjDo=
Subject key identifier: CE:B7:C5:20:C0:56:DE:53:C1:91:1C:ED:40:B0:FD:40:30:7E:D1:6C
Authority key identifier: 85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
Certificate issuer: /CN=85aaadc568f6c928fd764d421d42c71cf5791954
Certificate serial: 01A0E43E707E0DEAF45A9848C3DBA3BDD89E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
Manifest number: 198E
Signing time: Sun 27 Sep 2026 19:01:32 +0000
Manifest this update: Sun 27 Sep 2026 19:01:32 +0000
Manifest next update: Mon 28 Sep 2026 19:01:32 +0000
Files and hashes: 1: AM5ErPXEiMWsS6Ae1m7Tslc6XbE.roa (hash: bjQPug2v0rNOIw/ni5VI2hHRrE9nXwVPApu1cIBClbQ=)
2: haqtxWj2ySj9dk1CHULHHPV5GVQ.crl (hash: DQnYuWyAYxtmTUbOkE2ueM2+LSyFdTY33kC+KeOOuo8=)
3: tiWeCWTzhrIvsgFDw__Go4NFrmk.roa (hash: wWl6ZsQZ/uGjyr/V5rf2Mytz3uYLDMd0O1QEO33zRQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:3e:70:7e:0d:ea:f4:5a:98:48:c3:db:a3:bd:d8:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85aaadc568f6c928fd764d421d42c71cf5791954
Validity
Not Before: Sep 27 19:01:32 2026 GMT
Not After : Sep 28 19:01:32 2026 GMT
Subject: CN=ceb7c520c056de53c1911ced40b0fd40307ed16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:9c:10:d5:20:f3:bd:4b:86:e0:16:c4:5d:03:
75:6a:a8:4f:aa:82:66:be:cb:d3:e1:65:5a:53:17:
ea:e5:f4:4a:68:66:00:30:75:83:dd:8a:98:7e:34:
7f:d8:f3:16:18:13:67:15:34:e5:f4:26:69:9b:81:
bd:8c:4d:da:71:1f:35:51:98:93:a0:7f:f2:46:19:
e2:7f:c6:ea:c8:9a:8f:3c:e5:ed:dd:a5:2a:ee:25:
67:08:f2:ef:7d:59:32:be:4c:8b:eb:96:41:51:29:
90:23:61:8f:d8:af:35:ff:2e:82:da:62:d2:6c:d8:
86:a5:db:43:41:d7:d0:6f:80:f9:43:53:11:96:d8:
2c:51:34:79:a4:d0:00:c0:2e:53:f0:31:4e:6a:49:
7e:3c:f7:4b:76:60:b1:59:26:8d:44:a2:97:fe:51:
9e:1a:1c:b7:66:d3:52:63:09:fb:a5:9a:97:ab:d6:
f9:23:b2:a8:84:0a:e9:c9:57:10:3f:08:2c:85:93:
21:73:5b:bc:fe:b2:73:77:0a:c4:59:1c:9a:c9:35:
66:f7:24:61:53:5e:73:03:6a:da:04:a3:47:20:b8:
7a:ab:e8:17:6e:3f:9e:19:47:13:eb:1a:7e:9a:19:
6c:14:53:e4:ca:85:71:aa:6e:7d:ab:f8:d4:ae:3d:
5a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B7:C5:20:C0:56:DE:53:C1:91:1C:ED:40:B0:FD:40:30:7E:D1:6C
X509v3 Authority Key Identifier:
keyid:85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:87:db:73:86:22:a3:2b:58:a0:fa:d8:26:24:4e:4a:08:d9:
36:e5:ab:b8:1c:08:2a:69:ea:5d:55:57:e7:8f:f8:a0:42:ce:
e3:ca:db:10:ce:ed:1c:4b:19:30:fe:8f:62:9d:04:26:43:6e:
05:0b:c8:ae:7e:a8:6e:f5:70:bd:c8:65:5c:79:81:6f:e3:c1:
a8:4b:78:ac:f8:56:7e:27:61:37:e5:30:89:10:9e:b7:8f:e6:
59:3d:ef:e9:fe:82:ce:26:67:13:c3:d6:6f:15:a1:11:51:6a:
03:51:4b:3c:ca:5d:6d:bc:e9:58:f3:43:57:21:7e:31:8a:65:
c1:b7:fc:a9:11:c8:6f:77:40:f0:49:57:82:ea:70:73:48:8e:
51:1f:be:f0:29:3e:bb:e9:34:d5:fb:a9:27:b6:c2:ca:1f:0f:
36:7c:28:71:83:31:ca:36:21:ad:b9:d2:9d:6a:2f:c3:d7:d3:
42:c4:42:3b:09:fd:3f:ec:df:6d:ef:74:ac:22:0a:a1:9d:c1:
a8:9f:c6:7c:a9:21:46:3b:84:49:e9:01:b6:c3:76:b0:39:0a:
ac:1f:35:35:63:dd:be:36:02:a0:12:34:1d:ba:23:ad:e9:57:
55:62:dd:a0:ae:ae:58:72:d4:b5:85:68:e7:59:83:1a:b7:05:
ce:81:ca:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:11:31 2026 by rpki-client