Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
File: haz7mtOlDOFTMc_066iLzAe3ooI.mft (raw, json)
Hash identifier: 0Qq+xbkd9cRNlEXpcu/iGQSrXsxpDYrLhq1evqmD5DU=
Subject key identifier: 7E:88:95:24:43:5B:D7:3C:0A:2B:BD:FF:55:47:29:85:E5:3E:6E:0C
Authority key identifier: 85:AC:FB:9A:D3:A5:0C:E1:53:31:CF:F4:EB:A8:8B:CC:07:B7:A2:82
Certificate issuer: /CN=85acfb9ad3a50ce15331cff4eba88bcc07b7a282
Certificate serial: 01A0E69AC09008C249DCA3AB33DE4A4254B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
Manifest number: 09FA
Signing time: Mon 28 Sep 2026 06:01:36 +0000
Manifest this update: Mon 28 Sep 2026 06:01:36 +0000
Manifest next update: Tue 29 Sep 2026 06:01:36 +0000
Files and hashes: 1: LVJLyRNkzYXWrFPMXDuqL1cx3r0.roa (hash: /6VNNRjnmK1nx7DLPoyOKEbtFH+S0vHKlP1nyDqaMBk=)
2: haz7mtOlDOFTMc_066iLzAe3ooI.crl (hash: kJWyh+YoosadPeY9JuNBCazRSogMTfbPJ9Kt4Vxg854=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 06:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:9a:c0:90:08:c2:49:dc:a3:ab:33:de:4a:42:54:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85acfb9ad3a50ce15331cff4eba88bcc07b7a282
Validity
Not Before: Sep 28 06:01:36 2026 GMT
Not After : Sep 29 06:01:36 2026 GMT
Subject: CN=7e889524435bd73c0a2bbdff55472985e53e6e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d4:ab:20:97:8e:ab:64:0a:6e:c8:a6:cd:75:
17:d3:d7:56:05:77:9a:a9:38:95:06:07:87:26:5e:
10:a4:16:f1:39:37:95:3e:94:6d:d7:c8:36:7a:50:
aa:75:c6:82:82:24:d6:ae:e2:4b:a1:91:c8:67:07:
e8:0c:98:d3:d6:4a:fd:8c:80:6c:8d:f4:d4:e3:a2:
41:11:cf:e3:42:45:04:8a:94:12:d4:ef:4c:e6:71:
7a:b6:27:b9:13:f6:ea:ff:c1:64:c1:24:a1:e3:3e:
32:71:36:00:60:77:1d:c3:48:7c:fc:12:42:34:f9:
ee:a9:a1:ba:02:38:9c:ce:f0:6a:a8:be:dd:1a:86:
cf:d5:df:ae:2f:7a:16:7f:f7:5a:be:b1:a9:9f:d0:
7d:08:4b:5d:f6:ff:02:b2:f5:39:72:01:d1:f9:c9:
d6:a9:a0:e1:a0:85:aa:a9:7b:4a:5a:19:bc:67:55:
d7:76:4a:66:30:e4:30:a9:31:0e:20:44:f2:06:18:
0d:05:39:57:6f:75:1d:16:a4:90:b5:cf:3f:d5:3d:
60:b2:3a:b4:0c:06:34:65:2f:7b:19:91:e4:e6:b8:
d9:e1:03:9a:56:46:88:1b:74:6e:ad:55:da:6b:93:
da:62:45:a9:ca:26:4a:26:c9:86:7e:3f:6e:4f:17:
93:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:88:95:24:43:5B:D7:3C:0A:2B:BD:FF:55:47:29:85:E5:3E:6E:0C
X509v3 Authority Key Identifier:
keyid:85:AC:FB:9A:D3:A5:0C:E1:53:31:CF:F4:EB:A8:8B:CC:07:B7:A2:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f5:71:75:b2:65:d3:60:60:ac:78:84:4a:50:df:71:58:58:
7b:19:0e:9d:90:01:a1:77:a4:18:80:b8:bc:f8:ea:6b:d8:92:
71:be:57:ce:eb:6d:59:55:cd:8e:10:10:bf:f0:9a:85:48:af:
5a:a0:32:99:3b:34:9a:79:f3:e7:25:2c:d7:6e:0e:3b:dd:2b:
11:2b:02:70:4d:ff:ba:8c:c2:1d:3e:79:b8:08:00:ba:ba:24:
96:64:07:68:fd:b5:a7:24:b8:66:2f:eb:db:5a:70:18:79:08:
0c:dc:06:97:03:e2:b8:8c:e0:82:3a:4a:eb:e6:a1:7d:cd:1b:
a7:78:d3:a4:72:a1:9b:14:20:ae:8d:d9:75:27:cd:bb:05:f6:
35:72:b6:69:a0:c9:6a:70:8d:86:54:71:01:72:87:ce:fa:0b:
1f:32:b5:02:5a:bf:45:58:79:2d:d5:ca:b7:16:f1:22:0f:c3:
1a:58:fd:1d:55:f7:00:57:9f:b5:2b:2a:3d:59:b0:36:8a:94:
46:40:92:69:55:d2:9a:d8:ad:92:0d:c0:5b:aa:cb:6d:1a:ed:
1d:18:fa:e9:5b:d0:d8:06:6f:e1:ea:8a:eb:b2:fc:9f:7f:25:
59:28:f0:74:2f:5b:9f:e4:ed:b7:5b:63:8b:d0:7e:af:11:5c:
b4:50:ae:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:09:20 2026 by rpki-client