Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
File: hKafxWiJTLOYXt7yIha9mZdN4lE.mft (raw, json)
Hash identifier: pU14DZQN6enek8P5vSlPRGfdi7YdtSp4GLoAQKhA7iQ=
Subject key identifier: C9:C2:18:9F:FD:E9:7C:B3:70:52:F0:4D:30:0E:89:6B:42:1C:D9:A7
Authority key identifier: 84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51
Certificate issuer: /CN=84a69fc568894cb3985edef22216bd99974de251
Certificate serial: 01A0C7EAAF07C13EDFE4B4A43C209C9CFB78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
Manifest number: 1731
Signing time: Tue 22 Sep 2026 07:00:41 +0000
Manifest this update: Tue 22 Sep 2026 07:00:41 +0000
Manifest next update: Wed 23 Sep 2026 07:00:41 +0000
Files and hashes: 1: 5yDhnFwC0iVn5DPcpR3QmCvoVv0.roa (hash: ZjrAq68K+mD03JUMhXQCJJAVWYAycmpN3p0OOOXApGI=)
2: hKafxWiJTLOYXt7yIha9mZdN4lE.crl (hash: Ne1JBdy4VXW2T4lmvYL37yyWGjwi5m1/LMDfoZ2lWTs=)
3: iimJ_FJ2za4rPb0lbWSF-wMFV-U.roa (hash: 9GhANmHxIYz0vSDlZn19gbsqViraUvvPcjEm2QpG0pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ea:af:07:c1:3e:df:e4:b4:a4:3c:20:9c:9c:fb:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84a69fc568894cb3985edef22216bd99974de251
Validity
Not Before: Sep 22 07:00:41 2026 GMT
Not After : Sep 23 07:00:41 2026 GMT
Subject: CN=c9c2189ffde97cb37052f04d300e896b421cd9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a9:44:e6:8c:c1:88:4d:6c:ea:89:f5:3e:9a:
52:9c:71:d6:6f:76:1e:bb:38:d3:29:29:4a:da:b6:
e7:7d:63:d0:e3:d2:3d:32:6a:97:bd:0a:5e:81:59:
38:88:c4:ab:c7:77:b2:4e:8f:b8:be:f0:96:5d:d5:
b2:fa:e8:87:8d:bb:8b:ae:1c:bb:48:d1:4a:46:53:
3a:c2:fb:3a:f3:79:1d:ab:3d:be:a4:50:be:5a:86:
4d:a7:bd:a5:e5:4c:c4:e3:60:0a:54:30:40:ba:dc:
ca:16:bc:89:b1:e3:6e:ad:2a:e7:38:fe:a7:b1:ba:
56:68:2f:4f:7a:92:96:01:d1:9b:51:d7:e1:01:60:
b8:2f:7f:00:0e:dc:86:3b:57:76:bb:10:47:62:1b:
40:79:ae:e9:44:81:aa:af:9c:5e:ae:7c:ad:0d:a1:
e2:4a:11:b6:bf:ce:c4:5c:e2:f4:40:3c:2f:c4:a5:
58:c3:00:fd:72:50:16:ef:70:1e:5c:0e:6f:40:9e:
de:f6:a1:02:51:52:fa:46:97:4a:9b:ab:eb:00:13:
dc:21:0e:e4:14:18:36:af:97:d2:4d:9b:bc:48:88:
6c:02:a5:5b:2a:bb:df:1b:45:27:36:a6:62:bf:46:
d1:08:35:fb:d7:fc:de:00:d1:6a:59:88:b9:c2:5a:
57:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C2:18:9F:FD:E9:7C:B3:70:52:F0:4D:30:0E:89:6B:42:1C:D9:A7
X509v3 Authority Key Identifier:
keyid:84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:0f:e3:72:00:2f:7d:70:e8:0d:5d:f9:f6:c4:78:e3:f8:3e:
61:dd:2e:7f:7a:ae:76:13:2f:5a:41:f6:3a:a6:06:77:28:6d:
b3:e9:be:83:64:86:d4:07:11:c7:1e:37:7f:5a:bf:18:33:1a:
3d:25:1e:fd:f2:92:61:c4:d3:9e:9f:f5:bc:b1:25:e1:3c:a5:
1e:fb:ac:c7:ef:c0:cd:af:62:af:44:4a:92:c1:a7:93:a9:74:
34:3c:bc:18:7c:79:a1:f0:4e:1a:7d:d2:90:6b:20:2b:1a:99:
26:7a:bc:43:69:aa:c9:2c:61:8a:86:af:c1:a5:56:b3:3c:9f:
c6:53:4d:e4:8d:55:68:26:cf:72:05:78:28:fd:ce:ba:ec:7b:
62:7b:fb:67:58:47:bb:26:c2:ae:1d:86:bb:50:c2:67:41:14:
0a:d4:09:bb:50:a6:cf:60:2a:8a:f3:f5:6a:8c:16:8b:44:22:
a4:3d:65:b2:65:82:69:74:5c:95:10:f0:d4:d7:15:6f:bf:f0:
15:0a:6e:80:57:e8:5f:9a:fb:49:c7:79:ae:54:d7:94:93:88:
43:53:4f:38:85:f9:4f:9c:5d:93:92:e8:fa:5b:fc:77:b3:5a:
9a:eb:6d:fa:fb:0a:a2:4b:1b:30:4d:a4:59:d6:34:3c:82:31:
f8:10:24:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:30:29 2026 by rpki-client