Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
File: hKafxWiJTLOYXt7yIha9mZdN4lE.mft (raw, json)
Hash identifier: Dstm61hkBpvB/lL9wMZ1xsM3KmNuSa6xAmjybScz8tg=
Subject key identifier: D8:FC:8C:7D:15:C8:F5:2C:F4:22:F6:3D:BE:B4:1B:49:E9:27:2F:09
Authority key identifier: 84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51
Certificate issuer: /CN=84a69fc568894cb3985edef22216bd99974de251
Certificate serial: 019EC25BF79DBB189B1AC32681E98D5D603F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
Manifest number: 1625
Signing time: Sat 13 Jun 2026 19:01:07 +0000
Manifest this update: Sat 13 Jun 2026 19:01:07 +0000
Manifest next update: Sun 14 Jun 2026 19:01:07 +0000
Files and hashes: 1: 5yDhnFwC0iVn5DPcpR3QmCvoVv0.roa (hash: ZjrAq68K+mD03JUMhXQCJJAVWYAycmpN3p0OOOXApGI=)
2: hKafxWiJTLOYXt7yIha9mZdN4lE.crl (hash: pSFtCBiBT5lRUDHKOU3V02GklGjUDzzFdXojvwPxBho=)
3: iimJ_FJ2za4rPb0lbWSF-wMFV-U.roa (hash: 9GhANmHxIYz0vSDlZn19gbsqViraUvvPcjEm2QpG0pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:5b:f7:9d:bb:18:9b:1a:c3:26:81:e9:8d:5d:60:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84a69fc568894cb3985edef22216bd99974de251
Validity
Not Before: Jun 13 19:01:07 2026 GMT
Not After : Jun 14 19:01:07 2026 GMT
Subject: CN=d8fc8c7d15c8f52cf422f63dbeb41b49e9272f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:16:48:da:60:6f:0a:e1:33:d7:ca:10:ab:4f:
b9:f6:35:17:e6:d6:64:2e:56:19:95:aa:f0:3d:33:
24:da:56:73:28:c3:05:eb:23:c8:da:3a:43:ee:92:
a5:5a:6e:91:f7:85:39:d3:f2:63:8e:2e:ae:4c:7d:
69:b5:bf:41:10:26:98:06:a2:58:dc:1a:6d:85:5a:
bc:a2:12:0c:7f:79:1c:cf:fb:71:ec:b8:6c:14:7a:
45:7a:ee:87:a7:9e:7b:e5:ee:72:9c:85:1a:28:fa:
c7:08:88:55:97:54:96:f2:42:56:ea:90:c5:aa:6d:
63:ae:cb:17:4e:da:ab:b4:0c:a8:e9:b7:92:59:f6:
40:0d:1c:50:fe:59:8e:49:7e:9b:bd:f9:cd:60:6a:
cf:38:37:68:b7:ec:30:14:fa:9c:ec:95:2a:e0:be:
c6:76:4a:75:7c:50:69:e9:c9:c5:0f:de:06:ed:d5:
06:a1:43:b8:79:22:18:da:47:6d:a9:e7:af:5c:85:
d5:14:12:2c:b2:32:a2:c4:5d:11:f2:7c:74:1a:6d:
55:b1:64:07:48:48:16:0c:9e:ad:ed:36:b5:35:02:
d4:59:c3:fc:aa:7b:53:b9:7d:f6:df:a0:3c:c7:32:
24:e2:7b:17:6e:d1:82:f2:3b:84:75:9d:13:65:b4:
f0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:FC:8C:7D:15:C8:F5:2C:F4:22:F6:3D:BE:B4:1B:49:E9:27:2F:09
X509v3 Authority Key Identifier:
keyid:84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d1:03:a3:71:04:53:d5:3f:23:a2:9e:de:1d:40:e4:3c:d1:
42:68:a4:fb:13:54:fa:ca:57:20:1c:08:e2:c5:b5:6c:b6:2e:
62:b5:86:8b:7b:b2:5b:0c:b4:6f:a1:99:12:07:0e:ea:77:af:
77:11:7d:f4:f5:1e:79:9a:36:0f:e8:e4:dc:8f:ff:10:ec:3c:
ef:75:46:f4:76:26:e3:ee:a8:28:8b:61:75:81:8f:da:0d:3a:
83:6f:9d:26:19:a6:09:df:91:ae:0a:d0:63:59:30:72:e8:91:
a8:a8:75:43:23:45:64:f5:e5:a8:16:91:6d:4d:10:42:bf:f3:
64:b7:78:40:27:62:b3:8f:d0:79:9f:96:f5:8c:2c:b2:17:42:
07:5f:2d:75:69:33:68:9e:d4:51:52:a2:1d:4c:7a:b0:8f:a7:
9d:05:7c:64:d1:c2:1c:a5:e2:58:ab:e9:95:28:8c:47:c2:83:
db:c8:e1:4e:e2:79:b2:20:a6:53:ea:6e:59:87:1c:10:b8:fd:
97:f1:e8:9e:d3:8e:4c:46:48:bb:87:ec:90:87:70:d8:67:30:
ba:24:2f:6f:20:8b:dc:f0:c2:20:60:16:44:ad:c5:9b:89:bb:
fb:37:dc:71:df:9a:e4:18:4d:6b:e5:bb:0c:ca:3a:b7:e6:cb:
21:d0:e4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:11:27 2026 by rpki-client