Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
File: hKafxWiJTLOYXt7yIha9mZdN4lE.mft (raw, json)
Hash identifier: mNieU9AgfniKPM+O8aol8uR92ZrNmpYA4WksLyaomBo=
Subject key identifier: DF:0C:76:A3:54:9D:F6:31:61:73:EA:56:63:89:19:16:6A:84:2C:27
Authority key identifier: 84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51
Certificate issuer: /CN=84a69fc568894cb3985edef22216bd99974de251
Certificate serial: 019FADF6F871779429A7BA3CCC11FF407E1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
Manifest number: 169F
Signing time: Wed 29 Jul 2026 13:01:11 +0000
Manifest this update: Wed 29 Jul 2026 13:01:11 +0000
Manifest next update: Thu 30 Jul 2026 13:01:11 +0000
Files and hashes: 1: 5yDhnFwC0iVn5DPcpR3QmCvoVv0.roa (hash: ZjrAq68K+mD03JUMhXQCJJAVWYAycmpN3p0OOOXApGI=)
2: hKafxWiJTLOYXt7yIha9mZdN4lE.crl (hash: /LdRfFVAzDx+32VoXlzuuDg3GKNma5yaSlsPGgM1KsM=)
3: iimJ_FJ2za4rPb0lbWSF-wMFV-U.roa (hash: 9GhANmHxIYz0vSDlZn19gbsqViraUvvPcjEm2QpG0pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:f6:f8:71:77:94:29:a7:ba:3c:cc:11:ff:40:7e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84a69fc568894cb3985edef22216bd99974de251
Validity
Not Before: Jul 29 13:01:11 2026 GMT
Not After : Jul 30 13:01:11 2026 GMT
Subject: CN=df0c76a3549df6316173ea56638919166a842c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:21:1a:8a:ca:ca:9f:be:b9:ad:a9:75:e2:54:
0e:4f:f1:d5:8c:23:27:8c:77:3b:d8:f2:ae:f8:94:
70:77:2e:41:a6:ed:26:dc:40:2e:6e:4a:4c:d4:9a:
17:c7:3f:21:dc:22:97:bd:f3:15:e1:8a:81:bc:62:
67:40:d7:c5:54:aa:03:de:cf:cd:76:e3:b9:f9:4d:
ff:43:68:a9:dc:20:c3:1f:dc:33:73:c7:e8:91:fb:
6e:4e:94:64:54:e7:62:5b:7c:c8:9c:14:cb:b2:07:
db:7f:17:cc:fb:d2:5e:70:b9:a6:c7:06:5e:56:6d:
8c:e9:38:7a:b7:aa:bd:df:1f:0b:bc:09:4a:da:71:
ab:2c:c1:9c:ae:a8:cd:5c:33:5a:65:33:85:bd:f9:
28:0f:ae:49:40:12:bf:f0:0f:5f:b6:20:57:96:1f:
72:b9:e4:f6:ee:24:2f:55:f3:4b:d5:b4:7b:5b:80:
81:01:14:3a:80:a4:6d:dd:87:e3:b1:f6:34:da:08:
b4:24:f1:c0:5a:e7:f2:b7:b7:8d:36:c5:05:75:b4:
52:2a:e3:46:44:87:41:85:1c:ca:bb:59:56:76:67:
26:85:be:bb:49:fd:30:de:f2:a6:db:89:54:42:50:
aa:15:35:b7:7f:1d:bf:3d:26:b0:42:14:bb:43:55:
66:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0C:76:A3:54:9D:F6:31:61:73:EA:56:63:89:19:16:6A:84:2C:27
X509v3 Authority Key Identifier:
keyid:84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:96:d9:fa:b5:85:eb:2f:2d:a7:dd:86:71:83:b6:5d:ba:b2:
0e:b6:a6:1d:72:9a:a4:b5:c1:d1:e0:07:1c:6a:07:b4:a2:e7:
53:c5:5e:ba:40:d6:49:bf:9a:33:ea:3b:80:85:8d:f6:db:cf:
ec:25:97:4a:a8:58:69:15:ee:8d:7c:87:9a:52:84:96:1e:9f:
8e:7c:b6:ed:32:72:91:65:a5:5f:11:7f:fe:20:b0:3c:93:43:
43:83:96:e0:63:9e:35:41:62:3c:91:f0:ac:62:d7:f3:af:99:
30:ab:50:25:21:05:0e:d2:be:7a:34:e0:72:9f:91:b5:15:99:
0a:56:8e:07:c9:2e:53:c3:3b:b8:89:9c:45:b7:02:36:57:23:
45:1c:24:f5:34:16:08:b6:b3:76:ab:b9:21:80:1b:92:71:c3:
e9:50:dc:e3:eb:83:14:d3:b9:00:cd:44:07:82:ab:95:03:df:
50:e0:f3:1c:79:81:40:a8:5e:2c:e3:1d:13:25:8e:3e:8d:b2:
be:c2:05:04:92:e9:bc:66:1b:2e:72:29:8d:e5:24:39:a4:ad:
03:10:62:c6:c7:54:d9:f4:5d:49:d2:f4:91:83:2c:d6:62:c3:
03:45:7c:86:88:14:53:36:0b:77:d2:4e:64:4f:22:96:e0:7d:
22:6c:88:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+t9vhxd5Qpp7o8zBH/QH4cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YTY5ZmM1Njg4OTRjYjM5ODVlZGVmMjIyMTZiZDk5OTc0
ZGUyNTEwHhcNMjYwNzI5MTMwMTExWhcNMjYwNzMwMTMwMTExWjAzMTEwLwYDVQQD
EyhkZjBjNzZhMzU0OWRmNjMxNjE3M2VhNTY2Mzg5MTkxNjZhODQyYzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniEaisrKn765ral14lQOT/HVjCMn
jHc72PKu+JRwdy5Bpu0m3EAubkpM1JoXxz8h3CKXvfMV4YqBvGJnQNfFVKoD3s/N
duO5+U3/Q2ip3CDDH9wzc8fokftuTpRkVOdiW3zInBTLsgfbfxfM+9JecLmmxwZe
Vm2M6Th6t6q93x8LvAlK2nGrLMGcrqjNXDNaZTOFvfkoD65JQBK/8A9ftiBXlh9y
ueT27iQvVfNL1bR7W4CBARQ6gKRt3YfjsfY02gi0JPHAWufyt7eNNsUFdbRSKuNG
RIdBhRzKu1lWdmcmhb67Sf0w3vKm24lUQlCqFTW3fx2/PSawQhS7Q1VmTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8MdqNUnfYxYXPqVmOJGRZqhCwnMB8GA1UdIwQY
MBaAFISmn8VoiUyzmF7e8iIWvZmXTeJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEthZnhXaUpUTE9ZWHQ3eUloYTltWmRONGxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jNjBhMWUtOTA4MC00YjA4LTk1ZGEt
NDM3ZmU1MGJiNGY3LzEvaEthZnhXaUpUTE9ZWHQ3eUloYTltWmRONGxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9jNjBhMWUtOTA4MC00YjA4LTk1ZGEtNDM3ZmU1MGJiNGY3
LzEvaEthZnhXaUpUTE9ZWHQ3eUloYTltWmRONGxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM5bZ+rWF
6y8tp92GcYO2XbqyDramHXKapLXB0eAHHGoHtKLnU8VeukDWSb+aM+o7gIWN9tvP
7CWXSqhYaRXujXyHmlKElh6fjny27TJykWWlXxF//iCwPJNDQ4OW4GOeNUFiPJHw
rGLX86+ZMKtQJSEFDtK+ejTgcp+RtRWZClaOB8kuU8M7uImcRbcCNlcjRRwk9TQW
CLazdqu5IYAbknHD6VDc4+uDFNO5AM1EB4KrlQPfUODzHHmBQKheLOMdEyWOPo2y
vsIFBJLpvGYbLnIpjeUkOaStAxBixsdU2fRdSdL0kYMs1mLDA0V8hogUUzYLd9JO
ZE8iluB9ImyIFw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 15:00:44 2026 by rpki-client