Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
File: hKafxWiJTLOYXt7yIha9mZdN4lE.mft (raw, json)
Hash identifier: 9hzx1rlqxMNKLcvozVal05Pg830ZTU3VtRnXsobOZuQ=
Subject key identifier: CA:61:3D:DC:08:7F:32:31:79:EA:EF:57:17:EC:33:A9:6A:AF:1A:43
Authority key identifier: 84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51
Certificate issuer: /CN=84a69fc568894cb3985edef22216bd99974de251
Certificate serial: 019EC06D97E0BC364887802F97AAEE87339B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
Manifest number: 1624
Signing time: Sat 13 Jun 2026 10:01:07 +0000
Manifest this update: Sat 13 Jun 2026 10:01:07 +0000
Manifest next update: Sun 14 Jun 2026 10:01:07 +0000
Files and hashes: 1: 5yDhnFwC0iVn5DPcpR3QmCvoVv0.roa (hash: ZjrAq68K+mD03JUMhXQCJJAVWYAycmpN3p0OOOXApGI=)
2: hKafxWiJTLOYXt7yIha9mZdN4lE.crl (hash: +QFrd2C9S1L4wmas0NoF3AgprPqhS+OiasrUHoDTwwM=)
3: iimJ_FJ2za4rPb0lbWSF-wMFV-U.roa (hash: 9GhANmHxIYz0vSDlZn19gbsqViraUvvPcjEm2QpG0pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:97:e0:bc:36:48:87:80:2f:97:aa:ee:87:33:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84a69fc568894cb3985edef22216bd99974de251
Validity
Not Before: Jun 13 10:01:07 2026 GMT
Not After : Jun 14 10:01:07 2026 GMT
Subject: CN=ca613ddc087f323179eaef5717ec33a96aaf1a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7f:6f:d2:e3:a3:d2:d6:96:ae:71:e7:72:be:
ef:a8:a7:c8:9c:48:0e:18:83:af:61:3a:1e:10:52:
20:27:09:c4:e9:de:57:89:d8:56:94:c7:43:a4:2b:
74:90:f1:bd:34:89:ca:d8:42:fa:b7:00:9e:e7:65:
83:60:70:2c:55:a5:f0:7e:31:84:ad:02:b2:3f:d5:
e2:98:10:73:74:f2:5e:52:fe:26:7c:bd:20:74:3d:
94:a0:f2:d8:e1:8a:6d:f9:74:27:79:08:6c:e5:8d:
8a:be:72:6d:11:12:e3:50:d9:b4:0f:a7:a6:21:b4:
61:10:38:c5:38:9e:53:89:fd:62:60:d3:9d:87:dc:
3a:c4:26:89:94:6d:f1:6d:35:b1:25:9e:29:db:9d:
5c:4a:af:e4:56:45:00:bb:99:89:e4:90:a2:de:9d:
db:3b:2d:66:1f:b3:2a:e3:9c:33:72:74:7b:87:9b:
76:6a:66:1d:a9:db:b2:26:c5:6a:6a:c7:fc:85:cc:
2f:2c:1f:87:75:52:c3:02:93:06:11:4d:e4:0b:9f:
c8:e1:5d:d2:45:34:70:8b:f6:7e:5d:34:6b:d7:c9:
8b:a6:60:e9:09:12:12:8f:36:8e:75:d4:67:01:c2:
45:94:36:ab:67:05:27:a9:0e:c0:8e:2b:39:f1:c0:
d1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:61:3D:DC:08:7F:32:31:79:EA:EF:57:17:EC:33:A9:6A:AF:1A:43
X509v3 Authority Key Identifier:
keyid:84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:28:3c:7b:f6:93:fb:53:53:35:c6:65:22:0f:27:89:be:72:
8c:03:8c:d3:57:48:04:1d:29:8b:c0:a9:a0:bd:7e:4a:6c:bf:
96:a5:31:ab:2c:8d:a8:60:0f:59:f7:97:6b:8e:a9:b9:60:e7:
1b:71:e1:4d:5a:7e:2d:dc:39:41:8d:31:eb:66:54:80:c0:f8:
db:20:ea:56:44:ac:81:f9:45:a4:39:89:17:b3:24:24:22:23:
18:d3:fb:96:54:8b:41:4b:f0:df:34:40:6e:fd:3f:44:a8:6b:
f4:61:6d:ff:61:dd:fb:0b:48:2a:aa:d0:50:0d:04:ea:b0:ca:
1a:61:89:14:31:70:07:0e:2a:a8:28:55:c8:c1:07:38:d7:ad:
df:7f:b9:a3:f6:c5:6d:91:13:e4:eb:ce:cc:8a:96:08:05:e0:
20:c2:4e:6b:9a:2b:6d:3d:c5:5e:bd:d7:50:1c:63:c3:c8:7c:
3c:29:06:69:a5:ee:cb:67:8a:11:88:8f:72:27:67:8f:fc:2e:
3e:be:8e:55:1f:95:74:54:d5:0a:65:d4:f0:76:f2:7f:57:c6:
a0:02:2d:08:f5:be:be:a6:80:32:56:b9:68:32:b1:47:bc:0f:
18:4e:78:c3:a1:28:6b:20:1f:e0:c3:97:1e:db:e7:96:84:4d:
d2:74:cf:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:48:25 2026 by rpki-client