Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
File: haz7mtOlDOFTMc_066iLzAe3ooI.mft (raw, json)
Hash identifier: pgAL4RELtRQRTgKF5bFFq5TsZ7WBeXydhC+BkECVoUg=
Subject key identifier: 66:30:97:21:91:AF:F1:8E:1D:3C:CE:F3:25:62:6F:CE:8E:ED:94:FA
Authority key identifier: 85:AC:FB:9A:D3:A5:0C:E1:53:31:CF:F4:EB:A8:8B:CC:07:B7:A2:82
Certificate issuer: /CN=85acfb9ad3a50ce15331cff4eba88bcc07b7a282
Certificate serial: 019D26CD494E23B0B6FDEE524C6F788D8130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
Manifest number: 0809
Signing time: Wed 25 Mar 2026 21:01:20 +0000
Manifest this update: Wed 25 Mar 2026 21:01:20 +0000
Manifest next update: Thu 26 Mar 2026 21:01:20 +0000
Files and hashes: 1: LVJLyRNkzYXWrFPMXDuqL1cx3r0.roa (hash: /6VNNRjnmK1nx7DLPoyOKEbtFH+S0vHKlP1nyDqaMBk=)
2: haz7mtOlDOFTMc_066iLzAe3ooI.crl (hash: uHy51pPD1WlHSU1NER19WDxYIvKIvxMPU6dooaUHyHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:49:4e:23:b0:b6:fd:ee:52:4c:6f:78:8d:81:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85acfb9ad3a50ce15331cff4eba88bcc07b7a282
Validity
Not Before: Mar 25 21:01:20 2026 GMT
Not After : Mar 26 21:01:20 2026 GMT
Subject: CN=6630972191aff18e1d3ccef325626fce8eed94fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5e:bb:1b:79:86:32:8b:45:4b:4a:7b:07:3b:
4f:98:ac:b7:6d:3c:ae:a2:92:da:08:7e:d6:a6:18:
af:55:c2:62:85:0e:b4:07:03:cf:63:b6:af:fc:fe:
4a:72:e8:b6:7e:d4:d1:bd:eb:62:97:2e:97:02:51:
9f:5e:79:25:75:bb:d5:29:02:c5:71:4c:c7:7d:14:
fe:a0:87:3b:cd:6a:43:dd:a1:a5:3e:60:f8:bb:73:
9b:15:80:d9:3b:56:17:91:e9:d2:76:17:f3:02:e4:
41:6d:c5:52:02:f0:49:70:25:1d:4d:b0:91:c1:75:
8e:3e:13:1e:8f:c4:6c:f2:23:63:42:30:3f:a9:12:
23:68:d0:ba:6c:c4:82:62:76:84:65:b7:c4:6f:a0:
15:74:d6:4d:b2:42:0c:03:83:95:e8:ce:d4:e7:01:
36:1e:98:45:51:37:2f:cb:b8:ca:32:d7:24:02:8b:
b6:3e:c3:5f:51:6f:0b:b2:81:14:27:3f:bb:f2:06:
09:1d:ec:bf:7e:eb:9b:b8:5d:92:66:90:e7:84:7b:
80:b6:22:69:dd:a4:e9:75:16:bd:01:1e:97:cc:a6:
62:9a:29:90:26:d4:9b:5e:3e:0e:c1:00:0d:06:5a:
47:ec:da:4a:d2:b3:79:13:23:56:4e:89:c8:c2:e5:
0d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:30:97:21:91:AF:F1:8E:1D:3C:CE:F3:25:62:6F:CE:8E:ED:94:FA
X509v3 Authority Key Identifier:
keyid:85:AC:FB:9A:D3:A5:0C:E1:53:31:CF:F4:EB:A8:8B:CC:07:B7:A2:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:2f:25:ec:9e:69:a8:5b:c2:dd:5f:a7:ef:d2:e8:3c:e3:01:
be:f0:09:ab:55:af:ed:5f:f1:35:1c:c0:c6:6d:c8:d3:b0:4f:
94:0e:a2:aa:b4:3f:9f:7e:78:d6:83:76:cd:86:b7:39:a1:00:
63:af:26:ac:5c:15:c7:f3:38:a8:33:0c:55:f7:dd:c5:75:ef:
a0:5b:23:2a:03:c2:fc:b2:28:b1:08:19:8a:7f:e8:f7:74:f4:
93:a2:4a:8a:40:72:fc:20:5f:4a:2c:6e:08:d5:7a:39:99:e9:
4a:55:cd:3e:bc:8d:74:b2:d8:da:8d:6f:e2:74:53:62:67:9d:
80:80:6e:20:f6:75:5c:0c:0e:93:06:f8:01:aa:c1:be:f2:fc:
ea:75:cd:ed:71:8f:2a:cb:a2:ea:9b:36:78:56:a6:4d:97:ec:
55:d5:ff:5f:85:8d:e9:14:0a:a1:89:9d:52:aa:fe:b2:0c:5a:
25:b2:8a:87:0e:cc:e1:f4:64:60:c0:de:c1:95:35:45:be:58:
36:52:2f:53:ec:d5:7d:87:0f:54:db:0b:8a:34:2e:d5:cc:18:
aa:38:8e:51:7d:ea:c4:ab:d0:dc:cc:62:ec:00:1c:30:cf:37:
30:16:1a:a2:ce:bb:f8:24:38:07:15:5e:00:3a:2f:ea:5b:b1:
a5:57:c2:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzUlOI7C2/e5STG94jYEwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1YWNmYjlhZDNhNTBjZTE1MzMxY2ZmNGViYTg4YmNjMDdi
N2EyODIwHhcNMjYwMzI1MjEwMTIwWhcNMjYwMzI2MjEwMTIwWjAzMTEwLwYDVQQD
Eyg2NjMwOTcyMTkxYWZmMThlMWQzY2NlZjMyNTYyNmZjZThlZWQ5NGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv167G3mGMotFS0p7BztPmKy3bTyu
opLaCH7WphivVcJihQ60BwPPY7av/P5Kcui2ftTRvetily6XAlGfXnkldbvVKQLF
cUzHfRT+oIc7zWpD3aGlPmD4u3ObFYDZO1YXkenSdhfzAuRBbcVSAvBJcCUdTbCR
wXWOPhMej8Rs8iNjQjA/qRIjaNC6bMSCYnaEZbfEb6AVdNZNskIMA4OV6M7U5wE2
HphFUTcvy7jKMtckAou2PsNfUW8LsoEUJz+78gYJHey/fuubuF2SZpDnhHuAtiJp
3aTpdRa9AR6XzKZimimQJtSbXj4OwQANBlpH7NpK0rN5EyNWTonIwuUN/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYwlyGRr/GOHTzO8yVib86O7ZT6MB8GA1UdIwQY
MBaAFIWs+5rTpQzhUzHP9Ouoi8wHt6KCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGF6N210T2xET0ZUTWNfMDY2aUx6QWUzb29JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wYmVkNTItYjdjYy00MTRhLTljODgt
NmQ3N2YwNjVhMmMzLzEvaGF6N210T2xET0ZUTWNfMDY2aUx6QWUzb29JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8wYmVkNTItYjdjYy00MTRhLTljODgtNmQ3N2YwNjVhMmMz
LzEvaGF6N210T2xET0ZUTWNfMDY2aUx6QWUzb29JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcC8l7J5p
qFvC3V+n79LoPOMBvvAJq1Wv7V/xNRzAxm3I07BPlA6iqrQ/n3541oN2zYa3OaEA
Y68mrFwVx/M4qDMMVffdxXXvoFsjKgPC/LIosQgZin/o93T0k6JKikBy/CBfSixu
CNV6OZnpSlXNPryNdLLY2o1v4nRTYmedgIBuIPZ1XAwOkwb4AarBvvL86nXN7XGP
Ksui6ps2eFamTZfsVdX/X4WN6RQKoYmdUqr+sgxaJbKKhw7M4fRkYMDewZU1Rb5Y
NlIvU+zVfYcPVNsLijQu1cwYqjiOUX3qxKvQ3Mxi7AAcMM83MBYaos67+CQ4BxVe
ADov6luxpVfCyg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:57 2026 by rpki-client