Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
File: haz7mtOlDOFTMc_066iLzAe3ooI.mft (raw, json)
Hash identifier: dE0G67l+tTngO0Sv134iT07nZHG2wQgPOeGtv8kU9ec=
Subject key identifier: 4F:7A:A3:8F:16:75:D5:F4:F9:34:3B:2F:E4:2D:58:90:D1:68:52:C0
Authority key identifier: 85:AC:FB:9A:D3:A5:0C:E1:53:31:CF:F4:EB:A8:8B:CC:07:B7:A2:82
Certificate issuer: /CN=85acfb9ad3a50ce15331cff4eba88bcc07b7a282
Certificate serial: 019E1DFE2EA17C40E4CEE9AC0B52F55E3D70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
Manifest number: 0889
Signing time: Tue 12 May 2026 21:00:57 +0000
Manifest this update: Tue 12 May 2026 21:00:57 +0000
Manifest next update: Wed 13 May 2026 21:00:57 +0000
Files and hashes: 1: LVJLyRNkzYXWrFPMXDuqL1cx3r0.roa (hash: /6VNNRjnmK1nx7DLPoyOKEbtFH+S0vHKlP1nyDqaMBk=)
2: haz7mtOlDOFTMc_066iLzAe3ooI.crl (hash: 9IoycRtkFEr+uR34bASwTf4CG0S1P27BnBDHgPlKEfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:2e:a1:7c:40:e4:ce:e9:ac:0b:52:f5:5e:3d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85acfb9ad3a50ce15331cff4eba88bcc07b7a282
Validity
Not Before: May 12 21:00:57 2026 GMT
Not After : May 13 21:00:57 2026 GMT
Subject: CN=4f7aa38f1675d5f4f9343b2fe42d5890d16852c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5e:8c:09:f7:c6:77:e8:f3:03:3b:fd:4c:c4:
94:f9:83:a5:f0:ec:2b:95:b7:94:43:b6:c3:07:44:
51:0c:10:31:cf:64:2a:99:3e:35:d0:50:2b:3e:96:
12:33:37:8a:3b:5e:2b:8e:a2:03:98:8e:a7:1a:48:
a6:fb:22:e3:f6:0b:08:d7:ef:2d:18:d4:b2:71:33:
c9:88:f8:08:4b:22:25:c6:97:17:5a:f6:30:de:59:
77:27:ba:24:d7:2d:43:69:08:8e:1e:df:2e:53:65:
14:67:93:02:34:0a:75:94:e5:60:2d:fc:0e:85:99:
32:55:24:f2:4a:e4:fc:8d:85:0b:69:fc:a7:af:f4:
01:ab:15:76:4d:95:f1:7e:67:43:95:47:be:82:16:
53:07:d4:80:40:ac:36:30:8f:be:ab:00:de:35:17:
1e:2b:ba:2b:ec:02:fb:0c:f7:de:7a:b2:2f:30:b8:
09:b9:54:9f:e9:c1:58:10:99:b1:7c:9b:85:eb:a5:
71:60:6b:60:b5:aa:87:aa:bf:5c:32:db:b7:f0:83:
4c:da:63:c4:cd:6c:1d:8c:cf:5f:39:81:78:06:44:
b9:42:b2:7a:ba:aa:3f:3d:5a:a5:c8:bd:74:42:a4:
4c:16:f3:a4:18:ab:25:2f:2b:e6:a5:11:cd:f0:3d:
81:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7A:A3:8F:16:75:D5:F4:F9:34:3B:2F:E4:2D:58:90:D1:68:52:C0
X509v3 Authority Key Identifier:
keyid:85:AC:FB:9A:D3:A5:0C:E1:53:31:CF:F4:EB:A8:8B:CC:07:B7:A2:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:c6:ca:d4:23:6d:bd:58:e0:89:31:68:4b:cb:db:93:b3:de:
1b:e7:d1:88:ad:5d:f9:7a:46:a8:e9:30:45:33:8f:78:0c:9b:
3f:4c:38:60:bd:a3:5a:ae:af:67:cf:ee:c3:4e:8a:77:65:69:
e6:31:70:8b:3c:60:1f:3a:3e:ec:a8:0e:82:aa:00:1b:0a:1c:
08:14:b5:4f:f7:c3:6c:ce:48:30:33:49:ae:3b:33:68:e8:b7:
8d:0a:55:ae:11:96:e2:2b:2c:9b:fe:39:15:36:14:e6:21:4b:
9a:61:c3:ce:44:63:6c:98:0d:20:a2:21:5b:e1:3a:9b:b0:91:
da:b1:8d:a6:98:ba:57:61:9e:d0:17:c8:d2:de:3d:d7:88:c1:
17:b8:48:09:76:8e:35:d6:f5:6e:ac:85:7e:66:e3:a5:64:4f:
9d:82:e3:97:38:f5:b3:a0:ed:0e:88:0b:21:a8:6c:c2:c7:fd:
92:8c:c2:d3:51:12:a0:61:6b:c4:9f:14:21:46:87:1f:0e:2d:
fa:a3:fa:f5:a4:11:e5:04:be:df:22:7b:e0:50:83:a9:8a:94:
f7:2c:d4:93:ba:ad:5a:f0:79:3a:6c:b8:42:36:8d:a5:ec:e5:
05:bf:50:0e:c4:c8:8c:44:ec:c2:dd:f2:0a:3b:ae:2a:b5:7b:
f3:d9:2a:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/i6hfEDkzumsC1L1Xj1wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1YWNmYjlhZDNhNTBjZTE1MzMxY2ZmNGViYTg4YmNjMDdi
N2EyODIwHhcNMjYwNTEyMjEwMDU3WhcNMjYwNTEzMjEwMDU3WjAzMTEwLwYDVQQD
Eyg0ZjdhYTM4ZjE2NzVkNWY0ZjkzNDNiMmZlNDJkNTg5MGQxNjg1MmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwl6MCffGd+jzAzv9TMSU+YOl8Owr
lbeUQ7bDB0RRDBAxz2QqmT410FArPpYSMzeKO14rjqIDmI6nGkim+yLj9gsI1+8t
GNSycTPJiPgISyIlxpcXWvYw3ll3J7ok1y1DaQiOHt8uU2UUZ5MCNAp1lOVgLfwO
hZkyVSTySuT8jYULafynr/QBqxV2TZXxfmdDlUe+ghZTB9SAQKw2MI++qwDeNRce
K7or7AL7DPfeerIvMLgJuVSf6cFYEJmxfJuF66VxYGtgtaqHqr9cMtu38INM2mPE
zWwdjM9fOYF4BkS5QrJ6uqo/PVqlyL10QqRMFvOkGKslLyvmpRHN8D2BkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE96o48WddX0+TQ7L+QtWJDRaFLAMB8GA1UdIwQY
MBaAFIWs+5rTpQzhUzHP9Ouoi8wHt6KCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGF6N210T2xET0ZUTWNfMDY2aUx6QWUzb29JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wYmVkNTItYjdjYy00MTRhLTljODgt
NmQ3N2YwNjVhMmMzLzEvaGF6N210T2xET0ZUTWNfMDY2aUx6QWUzb29JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8wYmVkNTItYjdjYy00MTRhLTljODgtNmQ3N2YwNjVhMmMz
LzEvaGF6N210T2xET0ZUTWNfMDY2aUx6QWUzb29JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdsbK1CNt
vVjgiTFoS8vbk7PeG+fRiK1d+XpGqOkwRTOPeAybP0w4YL2jWq6vZ8/uw06Kd2Vp
5jFwizxgHzo+7KgOgqoAGwocCBS1T/fDbM5IMDNJrjszaOi3jQpVrhGW4issm/45
FTYU5iFLmmHDzkRjbJgNIKIhW+E6m7CR2rGNppi6V2Ge0BfI0t4914jBF7hICXaO
Ndb1bqyFfmbjpWRPnYLjlzj1s6DtDogLIahswsf9kozC01ESoGFrxJ8UIUaHHw4t
+qP69aQR5QS+3yJ74FCDqYqU9yzUk7qtWvB5Omy4QjaNpezlBb9QDsTIjETswt3y
CjuuKrV789kqJA==
-----END CERTIFICATE-----
Generated at Wed May 13 07:22:31 2026 by rpki-client