Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
File: haqtxWj2ySj9dk1CHULHHPV5GVQ.mft (raw, json)
Hash identifier: YVOpYPocBgUZE3IJFbdctdoIeDgMR51F/v8Uxfe6tLc=
Subject key identifier: 40:95:2C:50:66:23:6B:D5:90:96:FA:11:B1:28:B8:84:40:67:A9:DF
Authority key identifier: 85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
Certificate issuer: /CN=85aaadc568f6c928fd764d421d42c71cf5791954
Certificate serial: 019F927F0F593436586AD931001347016C3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
Manifest number: 18DE
Signing time: Fri 24 Jul 2026 05:00:28 +0000
Manifest this update: Fri 24 Jul 2026 05:00:28 +0000
Manifest next update: Sat 25 Jul 2026 05:00:28 +0000
Files and hashes: 1: AM5ErPXEiMWsS6Ae1m7Tslc6XbE.roa (hash: bjQPug2v0rNOIw/ni5VI2hHRrE9nXwVPApu1cIBClbQ=)
2: haqtxWj2ySj9dk1CHULHHPV5GVQ.crl (hash: yWtJuM8i3ckzSTD02gidJoEM2PzKjQg/8q/HwP5Hlao=)
3: irA0JceEuEodl99Q_dZTTdY7HaA.roa (hash: VyxTOx+3wVfafkLhbAvwOmaRgP56DMjB9J1S/JOzUO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:0f:59:34:36:58:6a:d9:31:00:13:47:01:6c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85aaadc568f6c928fd764d421d42c71cf5791954
Validity
Not Before: Jul 24 05:00:28 2026 GMT
Not After : Jul 25 05:00:28 2026 GMT
Subject: CN=40952c5066236bd59096fa11b128b8844067a9df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:55:35:5f:20:a9:45:8b:d5:99:53:70:de:e5:
d7:d8:b3:7b:2a:ce:48:49:bb:82:a3:4d:e6:35:27:
66:6e:c2:b8:7d:12:01:ff:48:0e:2c:03:8a:5d:88:
9e:a7:dc:95:59:c2:5f:df:fb:ab:87:ec:c0:cb:6d:
7d:e4:a6:19:20:57:74:04:29:a2:37:a3:3f:81:cc:
f7:97:49:b7:11:69:a7:6c:95:35:40:cc:e9:ac:de:
af:e1:c7:b5:90:37:b6:2a:55:e3:4b:f8:14:f8:e8:
37:04:49:22:69:55:00:62:d0:09:62:c0:dd:c1:b3:
a6:a6:44:1a:a0:9f:44:75:80:f1:ed:41:e8:fa:e7:
0e:d0:59:ad:17:8e:9b:4f:36:4d:96:89:98:48:70:
79:d5:e5:54:71:2f:4f:16:e2:a7:fc:b5:ca:b1:5f:
3f:1a:58:d5:ae:30:30:1a:f1:3c:ab:1f:24:dd:ff:
47:e4:81:52:9e:ee:ee:4e:54:ed:4e:27:d1:57:e6:
ed:60:26:58:bb:5e:2a:27:13:36:15:16:cb:06:9c:
f5:09:1c:f9:0b:c1:f9:9f:01:2c:59:7a:8d:df:0b:
c0:f5:e3:cc:e7:28:ab:b4:7f:e0:94:99:d7:35:b9:
0b:33:0e:33:a2:c5:52:9b:e1:16:37:db:d3:ba:d7:
e3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:95:2C:50:66:23:6B:D5:90:96:FA:11:B1:28:B8:84:40:67:A9:DF
X509v3 Authority Key Identifier:
keyid:85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:da:96:1f:c1:66:43:c6:06:e6:bc:bd:09:29:2b:f5:15:4f:
17:44:3d:1c:6f:73:55:f0:ea:30:2b:1a:0e:85:c6:26:7d:61:
91:c1:3c:4b:11:0f:d9:0d:95:f9:78:ef:4f:d4:19:cf:ab:ce:
6a:11:03:90:3f:bb:6e:dd:26:f8:34:c8:9f:93:ea:dc:42:c4:
54:fb:26:3e:b5:93:c5:0a:86:16:3b:5b:82:48:d9:dc:35:3c:
67:94:91:c2:d6:e5:2a:50:b0:3d:fa:77:d9:e5:e2:42:54:57:
3e:c8:d1:eb:6a:0f:44:e3:b7:9e:36:c2:d9:20:fb:06:44:c4:
1b:72:9f:68:5c:cc:63:da:63:6e:e8:43:09:72:85:0e:f3:05:
68:61:ae:da:69:96:86:5b:74:41:b0:c2:43:85:65:6f:15:9f:
bd:ac:09:2a:a1:26:e6:e6:3f:4d:4a:3f:bb:1c:22:8d:0c:a6:
81:14:30:6f:63:d2:6b:5a:bf:54:35:c4:94:93:16:c9:13:8c:
49:b9:5a:d4:9e:54:b0:c7:c8:02:f5:88:f8:4d:e4:f8:59:72:
f4:49:18:5f:ff:dc:57:da:24:e6:ca:cf:1c:d8:7d:4f:c8:7e:
62:b2:8e:37:74:97:7f:d6:8e:d5:be:6f:ae:1a:41:40:45:12:
26:0d:43:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:55:04 2026 by rpki-client