Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
File: hKafxWiJTLOYXt7yIha9mZdN4lE.mft (raw, json)
Hash identifier: 9u+e11Was8Jn26k+L/ZsGiPVIUzp73vCe0p1hNW8cMU=
Subject key identifier: C9:89:B1:AB:E4:11:28:16:3D:EC:9C:CF:F0:B0:63:FE:DF:8D:5D:4B
Authority key identifier: 84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51
Certificate issuer: /CN=84a69fc568894cb3985edef22216bd99974de251
Certificate serial: 019D9AE374B6C6190AE1831050B91CE5689F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
Manifest number: 158C
Signing time: Fri 17 Apr 2026 10:01:30 +0000
Manifest this update: Fri 17 Apr 2026 10:01:30 +0000
Manifest next update: Sat 18 Apr 2026 10:01:30 +0000
Files and hashes: 1: 5yDhnFwC0iVn5DPcpR3QmCvoVv0.roa (hash: ZjrAq68K+mD03JUMhXQCJJAVWYAycmpN3p0OOOXApGI=)
2: hKafxWiJTLOYXt7yIha9mZdN4lE.crl (hash: YtutpkUoIjJMewjXTz2DmfIcNAUtLxj/M5QMWeZ4EvY=)
3: iimJ_FJ2za4rPb0lbWSF-wMFV-U.roa (hash: 9GhANmHxIYz0vSDlZn19gbsqViraUvvPcjEm2QpG0pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:74:b6:c6:19:0a:e1:83:10:50:b9:1c:e5:68:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84a69fc568894cb3985edef22216bd99974de251
Validity
Not Before: Apr 17 10:01:30 2026 GMT
Not After : Apr 18 10:01:30 2026 GMT
Subject: CN=c989b1abe41128163dec9ccff0b063fedf8d5d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:18:44:68:93:6b:4e:d8:08:4d:f8:f3:83:b7:
0a:bf:f1:7e:fa:47:7e:aa:20:4c:a6:80:8b:46:15:
b8:e5:ef:4b:fa:2d:1f:ac:3a:17:f2:14:9a:79:e6:
42:49:8b:fd:97:0e:d2:f8:0d:b3:ad:32:86:f2:ac:
a4:42:07:98:20:5a:5b:3f:a5:38:35:69:32:bd:e1:
a6:98:e6:a9:32:63:98:69:04:47:04:67:ae:90:bb:
fa:58:b2:89:74:26:e7:4f:65:58:49:bb:67:c0:76:
ac:26:86:26:9d:ef:bf:57:26:ee:0f:66:16:f4:13:
90:ec:80:8d:af:87:7a:df:6a:4d:94:a6:67:67:9b:
10:79:7d:4a:c8:8c:30:08:c3:b4:e6:2b:45:a8:91:
23:03:ac:bd:b1:80:78:ca:63:18:b0:cf:19:fa:3d:
df:f6:b1:32:1f:88:9a:7e:55:e0:d4:29:74:35:07:
7a:7a:62:82:c1:34:fa:0e:ec:5a:7e:59:a4:61:57:
77:49:e7:a2:d9:70:58:6c:7e:84:d8:09:e4:24:5d:
a3:be:ae:8d:a2:67:ec:97:16:9a:52:28:9b:4a:e6:
6d:5e:f3:29:2b:37:c8:52:b8:d9:3c:c2:e9:e4:a4:
73:c6:f4:d2:e5:be:c0:b0:93:1c:f4:ca:f5:22:74:
46:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:89:B1:AB:E4:11:28:16:3D:EC:9C:CF:F0:B0:63:FE:DF:8D:5D:4B
X509v3 Authority Key Identifier:
keyid:84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ad:81:78:5b:6c:39:51:91:3c:20:ee:32:c1:06:2e:a0:e8:
c9:2a:75:86:36:46:f2:0a:ed:7c:79:77:39:b1:ba:b4:d3:9f:
94:82:d0:49:65:3f:c6:f2:bc:12:09:89:d3:41:ba:aa:91:ca:
82:5a:8d:75:6b:46:df:e8:c4:4d:a9:4b:ed:6a:3f:90:39:12:
56:8e:b3:f8:4e:fd:80:f8:a0:ed:fe:68:ed:e3:b5:6a:c7:e6:
8b:e7:e4:be:94:4c:75:2b:a8:37:5f:28:37:cc:e1:9a:17:00:
d4:0c:5b:5a:9b:83:eb:d1:10:02:a8:be:8d:56:2a:a5:45:7e:
05:9b:82:e1:7a:15:37:08:e3:66:4f:56:e9:4f:cc:53:e0:47:
43:a5:03:53:4b:cf:c6:f8:a7:65:12:fb:dd:66:d1:aa:15:62:
dc:82:97:76:6d:64:ae:d2:a9:9d:fe:df:5e:5e:e8:25:fe:a8:
12:9f:b8:b0:33:62:e2:bf:8d:a8:7a:59:82:49:dc:25:fe:6e:
f2:2b:ea:64:7c:7a:fb:7e:66:c1:81:cd:7b:3c:8e:72:23:ca:
df:c4:be:df:e0:92:d7:70:ea:16:62:2a:47:f3:f5:ab:0e:18:
31:63:89:21:3e:97:38:46:c2:73:a2:f3:92:b4:9a:e6:a7:97:
c3:8b:2d:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a43S2xhkK4YMQULkc5WifMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YTY5ZmM1Njg4OTRjYjM5ODVlZGVmMjIyMTZiZDk5OTc0
ZGUyNTEwHhcNMjYwNDE3MTAwMTMwWhcNMjYwNDE4MTAwMTMwWjAzMTEwLwYDVQQD
EyhjOTg5YjFhYmU0MTEyODE2M2RlYzljY2ZmMGIwNjNmZWRmOGQ1ZDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBhEaJNrTtgITfjzg7cKv/F++kd+
qiBMpoCLRhW45e9L+i0frDoX8hSaeeZCSYv9lw7S+A2zrTKG8qykQgeYIFpbP6U4
NWkyveGmmOapMmOYaQRHBGeukLv6WLKJdCbnT2VYSbtnwHasJoYmne+/VybuD2YW
9BOQ7ICNr4d632pNlKZnZ5sQeX1KyIwwCMO05itFqJEjA6y9sYB4ymMYsM8Z+j3f
9rEyH4iaflXg1Cl0NQd6emKCwTT6DuxaflmkYVd3Seei2XBYbH6E2AnkJF2jvq6N
omfslxaaUiibSuZtXvMpKzfIUrjZPMLp5KRzxvTS5b7AsJMc9Mr1InRGtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMmJsavkESgWPeycz/CwY/7fjV1LMB8GA1UdIwQY
MBaAFISmn8VoiUyzmF7e8iIWvZmXTeJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEthZnhXaUpUTE9ZWHQ3eUloYTltWmRONGxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jNjBhMWUtOTA4MC00YjA4LTk1ZGEt
NDM3ZmU1MGJiNGY3LzEvaEthZnhXaUpUTE9ZWHQ3eUloYTltWmRONGxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9jNjBhMWUtOTA4MC00YjA4LTk1ZGEtNDM3ZmU1MGJiNGY3
LzEvaEthZnhXaUpUTE9ZWHQ3eUloYTltWmRONGxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnq2BeFts
OVGRPCDuMsEGLqDoySp1hjZG8grtfHl3ObG6tNOflILQSWU/xvK8EgmJ00G6qpHK
glqNdWtG3+jETalL7Wo/kDkSVo6z+E79gPig7f5o7eO1asfmi+fkvpRMdSuoN18o
N8zhmhcA1AxbWpuD69EQAqi+jVYqpUV+BZuC4XoVNwjjZk9W6U/MU+BHQ6UDU0vP
xvinZRL73WbRqhVi3IKXdm1krtKpnf7fXl7oJf6oEp+4sDNi4r+NqHpZgkncJf5u
8ivqZHx6+35mwYHNezyOciPK38S+3+CS13DqFmIqR/P1qw4YMWOJIT6XOEbCc6Lz
krSa5qeXw4stXw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:26:02 2026 by rpki-client