Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/fddfe0-ff7c-4224-af59-4d45ed0b135c/1/HAeEBT_IZqVWI0VIEZQW0b1xaYA.mft
File: HAeEBT_IZqVWI0VIEZQW0b1xaYA.mft (raw, json)
Hash identifier: p2Awt7VqLEIjqfhxKd+WWJVa6OT5hUfYHSOrJtpR82g=
Subject key identifier: 7F:2E:95:DB:89:AA:38:56:21:C9:D2:67:F8:64:DD:2F:BE:EC:D4:3C
Authority key identifier: 1C:07:84:05:3F:C8:66:A5:56:23:45:48:11:94:16:D1:BD:71:69:80
Certificate issuer: /CN=1c0784053fc866a556234548119416d1bd716980
Certificate serial: 01A1DEA7A142912F426ACE9569D3A6E632DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAeEBT_IZqVWI0VIEZQW0b1xaYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/fddfe0-ff7c-4224-af59-4d45ed0b135c/1/HAeEBT_IZqVWI0VIEZQW0b1xaYA.mft
Manifest number: 0162
Signing time: Sun 15 Nov 2026 10:01:29 +0000
Manifest this update: Sun 15 Nov 2026 10:01:29 +0000
Manifest next update: Mon 16 Nov 2026 10:01:29 +0000
Files and hashes: 1: HAeEBT_IZqVWI0VIEZQW0b1xaYA.crl (hash: RHbZ8s7trO8leyX2Q3Z5NyekC0V2KfcKutHzgLhp2RI=)
2: Nkte9zldrD_Gk3IGRNWOPWQDMbo.roa (hash: UNgTl0HhH/SBGa8ko1wMjVaJ6tBhwBkcw/5zum00v8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/fddfe0-ff7c-4224-af59-4d45ed0b135c/1/HAeEBT_IZqVWI0VIEZQW0b1xaYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/fddfe0-ff7c-4224-af59-4d45ed0b135c/1/HAeEBT_IZqVWI0VIEZQW0b1xaYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAeEBT_IZqVWI0VIEZQW0b1xaYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:a1:42:91:2f:42:6a:ce:95:69:d3:a6:e6:32:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0784053fc866a556234548119416d1bd716980
Validity
Not Before: Nov 15 10:01:29 2026 GMT
Not After : Nov 16 10:01:29 2026 GMT
Subject: CN=7f2e95db89aa385621c9d267f864dd2fbeecd43c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9a:61:ee:33:57:94:2d:1b:b8:71:47:72:f0:
fe:3d:f8:da:cb:9c:23:f0:c4:73:64:8a:b1:94:2b:
38:34:86:99:10:b9:19:23:41:e5:6f:81:cc:05:4c:
4b:5a:f5:80:7c:8d:1e:af:d7:89:77:a4:bd:1a:32:
5f:27:fb:6b:df:c3:34:52:cb:b7:47:94:22:70:e6:
c4:66:00:60:b6:4d:15:f4:c5:06:a9:25:d3:fd:9c:
4c:3b:db:3b:66:46:5e:77:90:73:fb:9e:32:9b:f4:
78:29:cb:46:b6:95:e7:18:a7:19:a6:cf:73:54:97:
1a:d5:01:1e:ab:e0:d6:87:1f:98:e3:71:37:2d:98:
3a:c3:7e:03:e5:d9:e6:84:75:89:5d:6c:2f:72:17:
8f:8a:e0:6c:6c:ae:31:4f:b9:10:05:14:1e:5c:17:
fc:43:0e:d6:4d:8f:ed:47:af:8f:5b:cd:94:f5:b2:
6b:74:fc:9e:30:7f:07:07:2c:c0:9c:bd:af:3b:0a:
d1:ca:91:f3:c0:d5:c6:1e:2e:39:3c:30:4c:e6:b6:
82:c5:8d:28:f3:15:a0:69:54:d7:e4:79:f4:fd:c1:
dc:2c:19:96:4e:78:87:22:ce:d8:58:cf:99:40:c1:
fd:a6:f6:08:07:b6:92:7b:0e:40:20:bc:79:0f:18:
32:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:2E:95:DB:89:AA:38:56:21:C9:D2:67:F8:64:DD:2F:BE:EC:D4:3C
X509v3 Authority Key Identifier:
keyid:1C:07:84:05:3F:C8:66:A5:56:23:45:48:11:94:16:D1:BD:71:69:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAeEBT_IZqVWI0VIEZQW0b1xaYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fddfe0-ff7c-4224-af59-4d45ed0b135c/1/HAeEBT_IZqVWI0VIEZQW0b1xaYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fddfe0-ff7c-4224-af59-4d45ed0b135c/1/HAeEBT_IZqVWI0VIEZQW0b1xaYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:1c:53:24:98:c6:63:43:e1:9d:6e:f2:86:ea:42:0e:19:7a:
01:68:91:c2:fe:ce:96:1f:3a:bc:94:3d:5f:54:b4:6f:58:e3:
38:0d:0a:b9:fd:d4:8d:27:ef:e4:0e:2f:4e:fa:29:76:dd:08:
b3:11:94:36:24:8e:3c:51:58:66:46:97:46:84:d3:c9:29:44:
c1:a5:f4:87:fe:e9:4a:e9:77:a3:fc:83:d1:63:2a:7f:cf:cc:
7b:a3:47:82:f2:20:3e:05:c7:3f:d3:69:ef:24:e8:38:4a:0c:
ff:58:d6:4a:bf:9f:e6:6e:81:48:ab:79:5a:1f:d8:8a:3d:da:
82:7b:bb:e7:dd:48:53:c8:7a:09:28:b7:92:78:c1:31:c5:73:
e5:57:30:32:74:31:52:cd:b7:18:35:48:be:04:1e:4b:f5:88:
43:64:91:53:5a:5a:ea:ed:74:14:54:39:b0:1b:a4:b3:68:60:
b8:b7:f9:26:76:66:8d:c8:95:2d:8e:e3:32:ae:de:fe:dd:6b:
c9:a8:e5:f6:7f:da:5e:2a:73:87:37:04:95:72:fb:e6:2f:42:
df:51:4b:c1:95:87:43:ea:2e:ac:2a:6a:fa:cf:c8:43:93:1a:
61:74:29:13:d2:fe:e2:01:6c:62:3b:d0:57:f1:27:4d:48:f8:
e4:91:51:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:47:59 2026 by rpki-client