Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
File: Ha5HTXlZfbddH01JkBtSVYu_avQ.mft (raw, json)
Hash identifier: 1fEn+JXX2+M6XMjMywQW7/7ZcEEFjXdCTiTCw5P1FlA=
Subject key identifier: 25:E6:95:15:50:E2:86:51:41:A7:DA:20:00:49:D8:4B:83:C5:55:23
Authority key identifier: 1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
Certificate issuer: /CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Certificate serial: 019D273B1115BE62C934BA25CD1B1B84509B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
Manifest number: 10A4
Signing time: Wed 25 Mar 2026 23:01:15 +0000
Manifest this update: Wed 25 Mar 2026 23:01:15 +0000
Manifest next update: Thu 26 Mar 2026 23:01:15 +0000
Files and hashes: 1: Ha5HTXlZfbddH01JkBtSVYu_avQ.crl (hash: TPXByTDq09dgeOg8YxgBxS30pxfmMoqPsItAfFZzSlc=)
2: k97xiEPNhhSgqvtrR_5TEOjiPrM.roa (hash: ZH1DGUuXgshBEvHt5egPH/VHWGjZYucZ8h4th9PhsLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:11:15:be:62:c9:34:ba:25:cd:1b:1b:84:50:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Validity
Not Before: Mar 25 23:01:15 2026 GMT
Not After : Mar 26 23:01:15 2026 GMT
Subject: CN=25e6951550e2865141a7da200049d84b83c55523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:86:b7:ee:db:5c:9c:aa:cb:a0:ae:8b:e6:cf:
c1:06:8f:2f:88:05:55:51:17:e5:a5:d1:45:22:eb:
01:bc:5d:45:71:ec:19:77:bf:cf:28:5c:d4:20:19:
6b:9f:22:68:df:9d:9b:3b:19:2c:fd:31:d4:bb:ba:
4c:92:3e:08:11:46:e4:4d:45:59:a1:fc:e6:90:ed:
a7:59:ba:be:f8:20:a2:3d:35:f7:3b:37:ee:d9:04:
6b:43:41:3d:7a:39:7e:54:d7:d6:2d:ee:94:01:27:
8a:ba:d3:0b:bb:0c:6f:f2:d1:03:bd:67:9c:22:2b:
6c:93:35:74:5d:97:96:64:eb:74:de:56:c6:80:22:
5c:82:99:7f:77:08:00:e6:67:0f:55:76:a5:2b:9f:
9a:0b:22:c7:3e:cb:ea:89:d9:ee:a8:f3:e9:eb:28:
20:a8:9e:ca:5e:d4:28:da:57:08:a4:70:cb:44:75:
49:99:f5:57:82:d1:73:3d:09:10:35:33:af:8d:81:
cc:43:3f:be:92:19:77:06:ea:f4:4a:94:cf:c8:7d:
cb:9d:af:3f:06:18:ec:93:a2:85:2b:28:9b:9c:2e:
d5:62:94:a2:c3:ad:46:14:29:54:32:50:b5:d8:3f:
a3:c9:08:1d:46:5b:ea:ee:97:72:56:9f:5e:f4:a5:
8f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E6:95:15:50:E2:86:51:41:A7:DA:20:00:49:D8:4B:83:C5:55:23
X509v3 Authority Key Identifier:
keyid:1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:83:be:55:a7:e9:53:68:37:7a:b5:b1:ec:8c:61:ea:4f:fc:
14:48:cd:b0:9a:38:1e:63:69:bb:93:6c:d6:2b:be:4f:fd:38:
16:bf:9b:4c:42:92:36:6d:a0:49:3a:b3:c7:70:12:02:8c:07:
88:c5:5a:86:01:51:40:a3:96:42:38:e0:82:2e:d8:77:50:03:
f4:7c:22:81:73:5b:bb:71:03:01:2a:b9:2b:fc:98:ed:12:99:
17:6a:0c:6f:ff:51:bf:13:82:d1:6c:c6:2b:5f:ef:05:e5:7a:
8d:75:33:10:6a:57:c6:4b:e9:8d:88:39:b5:fd:ac:6f:cf:46:
bf:5d:a4:c4:fa:de:69:50:13:71:b3:f5:b6:cc:b9:3c:b6:29:
30:2b:5b:1f:a0:da:2e:3c:3b:fe:2b:42:b7:ac:57:62:d4:5c:
0b:55:39:fd:4a:ed:42:81:b2:5b:4e:3a:32:2d:8a:ba:18:5f:
8c:44:13:a0:b8:ab:09:52:8a:a3:08:27:b8:72:8f:65:92:94:
96:94:9a:ec:39:f1:ce:b0:f0:94:26:a6:d5:db:8b:c7:c4:55:
3d:f4:f8:8c:48:9f:da:db:38:27:2d:2c:95:66:74:25:3e:dd:
05:ab:18:b6:69:ca:dd:b6:79:74:82:bd:06:64:57:1f:21:41:
ef:ff:22:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOxEVvmLJNLolzRsbhFCbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYWU0NzRkNzk1OTdkYjc1ZDFmNGQ0OTkwMWI1MjU1OGJi
ZjZhZjQwHhcNMjYwMzI1MjMwMTE1WhcNMjYwMzI2MjMwMTE1WjAzMTEwLwYDVQQD
EygyNWU2OTUxNTUwZTI4NjUxNDFhN2RhMjAwMDQ5ZDg0YjgzYzU1NTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Ya37ttcnKrLoK6L5s/BBo8viAVV
URflpdFFIusBvF1FcewZd7/PKFzUIBlrnyJo352bOxks/THUu7pMkj4IEUbkTUVZ
ofzmkO2nWbq++CCiPTX3Ozfu2QRrQ0E9ejl+VNfWLe6UASeKutMLuwxv8tEDvWec
IitskzV0XZeWZOt03lbGgCJcgpl/dwgA5mcPVXalK5+aCyLHPsvqidnuqPPp6ygg
qJ7KXtQo2lcIpHDLRHVJmfVXgtFzPQkQNTOvjYHMQz++khl3Bur0SpTPyH3Lna8/
Bhjsk6KFKyibnC7VYpSiw61GFClUMlC12D+jyQgdRlvq7pdyVp9e9KWP4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXmlRVQ4oZRQafaIABJ2EuDxVUjMB8GA1UdIwQY
MBaAFB2uR015WX23XR9NSZAbUlWLv2r0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGE1SFRYbFpmYmRkSDAxSmtCdFNWWXVfYXZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS85OTZjZWUtMGFjYi00ZWI4LWE3N2Et
MjdmOTBiOGQ4NWU2LzEvSGE1SFRYbFpmYmRkSDAxSmtCdFNWWXVfYXZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS85OTZjZWUtMGFjYi00ZWI4LWE3N2EtMjdmOTBiOGQ4NWU2
LzEvSGE1SFRYbFpmYmRkSDAxSmtCdFNWWXVfYXZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVYO+Vafp
U2g3erWx7Ixh6k/8FEjNsJo4HmNpu5Ns1iu+T/04Fr+bTEKSNm2gSTqzx3ASAowH
iMVahgFRQKOWQjjggi7Yd1AD9HwigXNbu3EDASq5K/yY7RKZF2oMb/9RvxOC0WzG
K1/vBeV6jXUzEGpXxkvpjYg5tf2sb89Gv12kxPreaVATcbP1tsy5PLYpMCtbH6Da
Ljw7/itCt6xXYtRcC1U5/UrtQoGyW046Mi2KuhhfjEQToLirCVKKowgnuHKPZZKU
lpSa7DnxzrDwlCam1duLx8RVPfT4jEif2ts4Jy0slWZ0JT7dBasYtmnK3bZ5dIK9
BmRXHyFB7/8iLg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:25:20 2026 by rpki-client