Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
File: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft (raw, json)
Hash identifier: BzMcg6zn7rJXTkAx/1flylMQewnWzWgtk9EjilX4D9w=
Subject key identifier: 34:1C:69:1D:2E:8B:5E:B3:CD:3A:BA:0B:62:42:26:E1:C0:F0:FD:39
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial: 019D2816A7102E35F92BF78E31BF8146212B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
Manifest number: 1560
Signing time: Thu 26 Mar 2026 03:01:06 +0000
Manifest this update: Thu 26 Mar 2026 03:01:06 +0000
Manifest next update: Fri 27 Mar 2026 03:01:06 +0000
Files and hashes: 1: 9hVZarMZXXFecBErtuPkYLQrriE.roa (hash: KsiiLeHicnzuMLdpx8BniCnY9e3C72b9G03ZzbEor1A=)
2: 9m20uAAFdgNoVQH3076gaYQmYYU.roa (hash: ly6A2Lm/ZdDnqWIOLhpR56go+OLBASNK0cUewK9eTjc=)
3: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl (hash: ATfxqEM9jSZdkQYSPc++MSTh/mscURllhP0Yze4M+so=)
4: I2kYVGgTXf3beeheYP4NYqvlsqo.roa (hash: +1MdfvNf88UVk1eBDOjY75bUfmqtSM1iSrahOzZLtS8=)
5: QDsntjcOt3fxAoY-_3bsGRuRxHo.roa (hash: 8Wg5bkOdvAsky6YfIg1CDs57PHLp5vOyQI0z4fcD3vE=)
6: cOY-DC2HVK8oGsGuJBqrFqkU9C8.roa (hash: MwPd12qekQ7oRDjQ5MzO5S3l6bIuuruJk/odjgKUjg4=)
7: jKnv8Hl298ULyF7AoE6ZHcljJwE.roa (hash: TA8MQ/eJxiYGg6c5Dgiv14NsF16+iZvCNQxTM8OPxss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:a7:10:2e:35:f9:2b:f7:8e:31:bf:81:46:21:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Validity
Not Before: Mar 26 03:01:06 2026 GMT
Not After : Mar 27 03:01:06 2026 GMT
Subject: CN=341c691d2e8b5eb3cd3aba0b624226e1c0f0fd39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4c:50:ea:8e:c1:f5:ff:cb:1b:38:18:55:29:
ec:dc:00:6d:3d:2e:ba:17:07:eb:d3:94:18:ed:3a:
80:52:22:45:bf:7e:dd:ae:b5:07:5a:34:8b:74:47:
68:5c:0d:da:62:82:7a:ce:67:f1:8b:c8:95:79:7d:
f0:12:2c:b0:ae:7f:9c:03:71:91:ea:e3:d5:96:8a:
3f:05:56:55:8e:f4:65:f8:e4:df:71:67:58:fb:93:
3e:9b:55:c0:f5:c9:75:60:55:05:9f:7f:e9:5a:0c:
09:c1:29:72:6a:f2:14:19:91:71:da:d6:6b:f3:dd:
80:b8:bf:24:99:41:ab:07:a4:8d:d1:32:89:51:3c:
9e:80:22:1f:c2:f5:b9:d0:20:9f:8e:00:ec:cb:a3:
b1:92:a2:b5:bc:c7:0e:4f:98:6b:10:bd:33:f8:44:
a4:c0:77:92:c4:7f:4b:9f:a4:57:73:df:26:d8:dd:
0c:d6:4c:d9:83:af:67:ad:fa:f2:f3:e1:64:56:8d:
6c:28:1a:d8:a3:b1:d6:67:0f:72:a6:16:6e:63:75:
bd:fc:74:32:d9:75:e6:ca:74:99:34:49:1e:13:39:
5d:2c:9e:74:e3:26:2a:31:03:d9:10:f8:52:86:b0:
ec:4a:fe:e3:cc:03:bf:3b:7d:a1:9e:72:62:49:d7:
fa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:1C:69:1D:2E:8B:5E:B3:CD:3A:BA:0B:62:42:26:E1:C0:F0:FD:39
X509v3 Authority Key Identifier:
keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d5:3c:fc:af:24:43:a3:04:66:b4:36:37:26:55:8a:b2:af:
a4:3c:e7:ae:67:c0:1d:18:b7:34:82:62:34:50:a4:67:8a:f7:
42:21:2c:4d:40:28:26:f3:79:f4:c0:f5:b0:bf:f9:fb:55:de:
3c:b5:1f:c9:42:72:bc:37:51:ea:5b:69:6b:25:d8:4b:7d:68:
c0:95:9c:4f:d0:4a:85:d1:44:2e:19:1e:db:d9:cd:29:b3:86:
99:22:97:92:6b:5b:70:0b:a7:b7:9e:20:47:53:0c:fd:8e:92:
05:01:ba:b5:0b:0c:73:50:22:e6:eb:37:d9:6a:12:a3:ab:9b:
e0:82:d8:ff:33:9b:97:69:07:f5:c3:2a:80:6e:74:29:df:7e:
83:05:8a:3e:18:64:c0:d5:7e:f5:e7:53:ef:a4:46:bb:2f:58:
42:df:57:38:5e:61:d0:9a:f1:3a:9a:9b:40:0f:79:f7:92:59:
67:e1:2c:3c:69:79:54:c2:ce:0f:f9:b6:11:6e:b5:8a:94:e9:
2c:40:d7:93:cc:ff:97:52:af:a9:5b:df:c5:03:f2:d6:40:19:
f5:53:4c:0e:41:9f:60:e1:c2:15:16:ba:ec:71:2d:00:48:b4:
06:49:2f:ce:9e:fc:5c:e0:89:c7:c7:90:a1:60:b0:8d:b4:94:
66:97:47:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:36:41 2026 by rpki-client