Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
File: hKafxWiJTLOYXt7yIha9mZdN4lE.mft (raw, json)
Hash identifier: 9JDruen3Ffqs9eBAj5Rrx9tknC0ZhGPAEFQnqsU8CsI=
Subject key identifier: 5A:D0:82:0C:7A:8A:48:0D:14:8D:E2:3F:D6:1D:CC:1D:66:2C:0E:44
Authority key identifier: 84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51
Certificate issuer: /CN=84a69fc568894cb3985edef22216bd99974de251
Certificate serial: 019F92ED96DD13811A159CF58E7FF4047409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
Manifest number: 1691
Signing time: Fri 24 Jul 2026 07:01:11 +0000
Manifest this update: Fri 24 Jul 2026 07:01:11 +0000
Manifest next update: Sat 25 Jul 2026 07:01:11 +0000
Files and hashes: 1: 5yDhnFwC0iVn5DPcpR3QmCvoVv0.roa (hash: ZjrAq68K+mD03JUMhXQCJJAVWYAycmpN3p0OOOXApGI=)
2: hKafxWiJTLOYXt7yIha9mZdN4lE.crl (hash: mTP5DGLb0pVBXAURzhvGV77INcd2A0kZ0kIKwscVlIY=)
3: iimJ_FJ2za4rPb0lbWSF-wMFV-U.roa (hash: 9GhANmHxIYz0vSDlZn19gbsqViraUvvPcjEm2QpG0pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:96:dd:13:81:1a:15:9c:f5:8e:7f:f4:04:74:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84a69fc568894cb3985edef22216bd99974de251
Validity
Not Before: Jul 24 07:01:11 2026 GMT
Not After : Jul 25 07:01:11 2026 GMT
Subject: CN=5ad0820c7a8a480d148de23fd61dcc1d662c0e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4a:0a:b4:f5:83:ec:1b:24:f2:71:9e:76:5b:
fe:8a:2b:69:8a:af:44:85:e2:2a:ed:6e:cc:9e:7b:
d7:df:dd:4c:30:96:63:c1:05:f2:a9:f7:08:a8:c6:
ca:e2:42:e2:a9:27:4b:96:ea:af:32:8a:4a:7c:db:
7e:68:74:5a:64:03:54:f6:3e:54:6a:44:7e:af:83:
48:70:fb:ac:ce:72:c6:95:a5:d3:6e:24:6a:0f:f8:
8d:4d:4e:52:59:a1:63:61:26:9f:18:a0:35:2e:86:
38:4c:f3:08:af:88:83:d0:62:3a:dd:15:69:57:7b:
5b:9a:37:24:40:72:42:9e:ef:ed:1d:5d:4e:3b:1b:
5b:95:1a:95:92:9b:09:4c:27:4b:3a:1f:9c:0e:2a:
6f:16:37:83:69:eb:fd:5e:8a:a9:6b:ef:9c:49:45:
b4:45:29:3a:53:e2:56:31:eb:e4:7b:3b:51:4f:7d:
1b:43:30:68:f6:b4:6a:0d:aa:3b:6c:f6:3d:81:b9:
f4:1c:5f:2b:05:2e:87:48:e4:d7:15:20:06:6d:bb:
cd:0a:5e:be:3a:56:da:83:6a:57:ba:a0:ce:95:34:
44:13:ee:ed:47:43:ff:a3:f3:e2:e7:8b:bf:97:32:
e2:0f:a6:ae:af:ed:42:4f:48:be:de:26:b4:26:76:
40:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D0:82:0C:7A:8A:48:0D:14:8D:E2:3F:D6:1D:CC:1D:66:2C:0E:44
X509v3 Authority Key Identifier:
keyid:84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b2:63:21:90:29:25:0b:b6:1d:ce:67:71:e3:13:a8:e0:ca:
9d:42:ab:0b:d6:3a:07:f8:51:91:de:c6:c1:0e:e5:ac:a2:4e:
55:b5:fa:2c:08:df:74:bf:fa:2f:dd:e3:8f:67:22:1d:13:b0:
ae:27:05:58:d6:6f:6d:62:23:ef:15:c1:5f:b8:6b:cc:50:d1:
86:55:7e:2c:7b:bd:7c:54:4a:02:3c:16:6f:4a:63:38:99:6d:
63:82:75:66:72:d8:ca:f6:17:03:06:01:e0:dd:4e:3e:0a:54:
0d:98:6f:26:e8:e1:21:b3:52:f4:c0:82:c0:37:80:18:27:6f:
80:2b:86:13:a4:ff:49:12:ef:01:c8:9b:04:79:5b:90:64:c9:
f7:b0:0e:81:d4:35:d9:77:53:3c:dd:9c:1a:47:cd:00:00:ea:
63:09:a1:01:a6:06:19:e1:ba:6e:78:02:37:51:c2:9d:fe:88:
46:b4:88:f8:a7:96:7b:80:b5:25:d8:cb:12:bb:33:8f:9d:5e:
98:df:42:35:0f:3a:82:b0:8a:72:5d:5d:84:ee:da:98:e9:95:
5d:a2:ba:91:10:81:07:98:14:83:02:8d:04:6e:6b:ae:2b:55:
15:08:15:9d:97:c9:31:cd:06:46:de:ca:a8:94:8a:7e:04:34:
69:5e:7e:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+S7ZbdE4EaFZz1jn/0BHQJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YTY5ZmM1Njg4OTRjYjM5ODVlZGVmMjIyMTZiZDk5OTc0
ZGUyNTEwHhcNMjYwNzI0MDcwMTExWhcNMjYwNzI1MDcwMTExWjAzMTEwLwYDVQQD
Eyg1YWQwODIwYzdhOGE0ODBkMTQ4ZGUyM2ZkNjFkY2MxZDY2MmMwZTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0oKtPWD7Bsk8nGedlv+iitpiq9E
heIq7W7MnnvX391MMJZjwQXyqfcIqMbK4kLiqSdLluqvMopKfNt+aHRaZANU9j5U
akR+r4NIcPusznLGlaXTbiRqD/iNTU5SWaFjYSafGKA1LoY4TPMIr4iD0GI63RVp
V3tbmjckQHJCnu/tHV1OOxtblRqVkpsJTCdLOh+cDipvFjeDaev9Xoqpa++cSUW0
RSk6U+JWMevkeztRT30bQzBo9rRqDao7bPY9gbn0HF8rBS6HSOTXFSAGbbvNCl6+
Olbag2pXuqDOlTREE+7tR0P/o/Pi54u/lzLiD6aur+1CT0i+3ia0JnZAaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFrQggx6ikgNFI3iP9YdzB1mLA5EMB8GA1UdIwQY
MBaAFISmn8VoiUyzmF7e8iIWvZmXTeJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEthZnhXaUpUTE9ZWHQ3eUloYTltWmRONGxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jNjBhMWUtOTA4MC00YjA4LTk1ZGEt
NDM3ZmU1MGJiNGY3LzEvaEthZnhXaUpUTE9ZWHQ3eUloYTltWmRONGxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9jNjBhMWUtOTA4MC00YjA4LTk1ZGEtNDM3ZmU1MGJiNGY3
LzEvaEthZnhXaUpUTE9ZWHQ3eUloYTltWmRONGxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS7JjIZAp
JQu2Hc5nceMTqODKnUKrC9Y6B/hRkd7GwQ7lrKJOVbX6LAjfdL/6L93jj2ciHROw
ricFWNZvbWIj7xXBX7hrzFDRhlV+LHu9fFRKAjwWb0pjOJltY4J1ZnLYyvYXAwYB
4N1OPgpUDZhvJujhIbNS9MCCwDeAGCdvgCuGE6T/SRLvAcibBHlbkGTJ97AOgdQ1
2XdTPN2cGkfNAADqYwmhAaYGGeG6bngCN1HCnf6IRrSI+KeWe4C1JdjLErszj51e
mN9CNQ86grCKcl1dhO7amOmVXaK6kRCBB5gUgwKNBG5rritVFQgVnZfJMc0GRt7K
qJSKfgQ0aV5+QQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:11:05 2026 by rpki-client