Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft
File: HAICl4Occ5DfICUaXAkw5qZyvuM.mft (raw, json)
Hash identifier: qdCHp03K3X3po01mkkdB8Lk/2dS35ps+WYVPZtp8xSM=
Subject key identifier: 85:2D:74:34:1B:C1:BC:6B:4C:B4:2C:FB:A8:45:24:B6:BB:0F:19:5A
Authority key identifier: 1C:02:02:97:83:9C:73:90:DF:20:25:1A:5C:09:30:E6:A6:72:BE:E3
Certificate issuer: /CN=1c020297839c7390df20251a5c0930e6a672bee3
Certificate serial: 019D29298A37E4C9822DB9154563FDE1FDF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft
Manifest number: 1894
Signing time: Thu 26 Mar 2026 08:01:21 +0000
Manifest this update: Thu 26 Mar 2026 08:01:21 +0000
Manifest next update: Fri 27 Mar 2026 08:01:21 +0000
Files and hashes: 1: 1F9WIaTWCuPhT1fj3f_sEFEp_g8.roa (hash: TNYhPcHp1Cn0a4fwg5zefI73qcgF+qlhC3CnY4Ewyb4=)
2: HAICl4Occ5DfICUaXAkw5qZyvuM.crl (hash: VNpRp8vxpHO7mfe2LBUf/2IcGc6nBiyAe02s7NJmMz8=)
3: LJKhD8fk07zXDMBgH7_ZquUEkWo.roa (hash: lpLkxTnWA14ekLx427upuk7B/wpO8bahUjpiRWlX+pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:8a:37:e4:c9:82:2d:b9:15:45:63:fd:e1:fd:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c020297839c7390df20251a5c0930e6a672bee3
Validity
Not Before: Mar 26 08:01:21 2026 GMT
Not After : Mar 27 08:01:21 2026 GMT
Subject: CN=852d74341bc1bc6b4cb42cfba84524b6bb0f195a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b2:d3:1b:8a:3e:38:9e:1d:40:c2:30:04:5b:
8e:72:52:07:9b:a1:5c:0e:7f:40:0d:c0:92:1e:f5:
01:2b:d1:cf:30:f9:a4:f4:36:58:63:d2:98:31:73:
d6:1b:d4:14:1e:11:5c:a5:78:af:b9:a9:9e:a8:b1:
99:1b:a6:58:00:2b:36:ef:2f:48:46:65:15:02:d9:
7b:10:36:74:73:44:cc:1f:a0:6b:88:9a:00:81:b7:
54:3c:db:f2:cf:ec:4c:b3:39:08:02:28:7c:36:a6:
16:29:b4:dd:7e:4f:8f:c0:92:88:f5:db:c8:23:7d:
8c:55:7f:db:a0:2c:0c:dc:f2:23:3d:cd:94:a0:9d:
ef:2c:a2:e4:4a:ef:a1:8f:8c:7d:2a:52:8a:6c:99:
36:a2:b2:04:89:52:9f:ee:22:f3:77:2e:8a:d3:a9:
9f:3a:ff:8b:60:e7:2b:bd:8c:1e:5c:19:4b:0b:07:
52:bf:3c:41:76:62:2d:fc:b7:44:a1:e4:7e:05:f3:
d1:f5:5e:04:70:98:ab:bb:26:1e:35:59:fb:75:25:
cf:71:1b:05:23:72:42:93:d1:e5:4a:d1:0f:54:1b:
48:b0:00:3c:c7:88:06:dc:2e:33:1e:91:4d:ff:7c:
9c:cf:79:a0:7c:49:ec:53:5d:69:c9:8c:73:b5:23:
2c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2D:74:34:1B:C1:BC:6B:4C:B4:2C:FB:A8:45:24:B6:BB:0F:19:5A
X509v3 Authority Key Identifier:
keyid:1C:02:02:97:83:9C:73:90:DF:20:25:1A:5C:09:30:E6:A6:72:BE:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:af:13:07:ea:70:9e:5e:09:05:b0:25:1a:3f:72:5d:e7:74:
04:ea:8a:00:5d:dc:b9:92:32:6e:58:42:fe:2f:1f:e2:0c:48:
6f:95:d2:9b:a0:4b:32:3d:10:54:8e:d6:7e:a1:b6:78:3e:5f:
d3:28:77:61:15:7e:64:de:9f:69:99:ad:e5:b6:cc:a2:78:98:
2e:42:c3:1c:d8:64:8a:84:38:fb:c5:f0:0e:40:60:e7:23:33:
c2:7f:9e:18:5d:b4:4e:87:0e:68:76:64:d4:93:02:7d:01:7a:
20:62:16:d6:b5:44:5f:ee:92:a4:fb:2b:97:5f:4c:70:dd:8a:
d2:92:f7:25:d0:7c:d7:dd:21:f9:72:77:68:50:5e:d9:66:b2:
e6:a5:a1:e9:0b:b3:e5:85:6d:8a:ea:39:a5:c1:af:ef:ce:e4:
fd:24:22:1d:81:66:ea:43:7e:6a:85:15:ec:45:1e:5c:48:be:
bb:57:c7:a6:72:e1:ae:d0:76:69:5b:31:0a:ad:e4:c5:a5:56:
a4:82:c9:6d:21:3f:03:fa:15:2e:4f:00:93:50:ec:e2:25:81:
a9:a0:6c:bf:46:dd:c6:f7:c6:6e:2e:0f:db:f0:e6:65:6e:ba:
e7:7c:23:e0:ec:d4:aa:75:62:16:4b:1a:b9:1a:30:43:2a:aa:
5e:a5:5e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:46 2026 by rpki-client