Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
File: hKafxWiJTLOYXt7yIha9mZdN4lE.mft (raw, json)
Hash identifier: frU5erYsWxg/tEMvZpYea43q2ejsX0tkYM0vc0PXrRM=
Subject key identifier: 00:89:2D:B7:DC:47:04:62:31:7C:A7:21:F1:38:29:19:C1:81:26:08
Authority key identifier: 84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51
Certificate issuer: /CN=84a69fc568894cb3985edef22216bd99974de251
Certificate serial: 019FAC08F1D87EEC89B3E4000C4813FDFEAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
Manifest number: 169E
Signing time: Wed 29 Jul 2026 04:01:35 +0000
Manifest this update: Wed 29 Jul 2026 04:01:35 +0000
Manifest next update: Thu 30 Jul 2026 04:01:35 +0000
Files and hashes: 1: 5yDhnFwC0iVn5DPcpR3QmCvoVv0.roa (hash: ZjrAq68K+mD03JUMhXQCJJAVWYAycmpN3p0OOOXApGI=)
2: hKafxWiJTLOYXt7yIha9mZdN4lE.crl (hash: AWs+RDoBphcGuzhhi5y5d+WzXChA2ooIGIVcF3oO31k=)
3: iimJ_FJ2za4rPb0lbWSF-wMFV-U.roa (hash: 9GhANmHxIYz0vSDlZn19gbsqViraUvvPcjEm2QpG0pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 04:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:f1:d8:7e:ec:89:b3:e4:00:0c:48:13:fd:fe:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84a69fc568894cb3985edef22216bd99974de251
Validity
Not Before: Jul 29 04:01:35 2026 GMT
Not After : Jul 30 04:01:35 2026 GMT
Subject: CN=00892db7dc470462317ca721f1382919c1812608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:97:0b:e8:3c:fa:bf:91:fe:f9:88:77:9e:e9:
4e:2f:1e:20:d0:64:b5:90:db:80:de:4f:90:86:34:
c6:a6:d6:40:c1:65:5e:ad:da:63:2c:88:33:45:97:
43:62:3f:2d:b8:e1:9b:8e:75:cf:dc:4e:a1:c4:e3:
24:5d:d7:d5:3e:cf:95:07:11:a5:b9:40:d6:41:12:
93:04:a2:8d:f1:8e:1a:90:db:a4:8e:1c:d2:aa:db:
9d:4e:29:77:ac:51:5d:0e:9b:90:8f:cb:44:60:db:
18:2d:0f:13:5d:a7:8d:52:08:b8:9f:4b:58:ce:80:
c2:c0:81:08:1c:0b:6e:a4:03:57:f4:26:a3:f1:6a:
07:a7:f6:78:42:5d:98:68:78:61:2c:39:a9:f3:94:
e3:c5:76:7b:82:1a:0d:61:58:d6:0a:b6:29:bb:6d:
f6:29:13:56:f7:0f:35:56:c4:7c:da:6c:ce:72:20:
76:87:29:89:f0:42:92:03:24:dd:cd:12:c8:6b:f9:
8a:f4:8f:63:63:2a:fd:86:df:62:21:3e:de:cd:6f:
02:83:46:6d:ef:bf:7a:d3:45:c3:3f:bf:9d:5b:39:
58:bb:02:6f:7e:11:4e:f0:d9:d8:9e:3d:30:f8:0f:
1c:6f:86:51:f5:fb:b7:e4:e2:83:18:df:96:b9:78:
0e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:89:2D:B7:DC:47:04:62:31:7C:A7:21:F1:38:29:19:C1:81:26:08
X509v3 Authority Key Identifier:
keyid:84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:38:08:91:d8:36:c4:a8:32:2f:0f:9e:a7:4a:86:53:5b:a7:
f8:7b:92:c7:d6:2e:35:ab:dc:da:37:d5:0d:e6:30:e3:30:c0:
25:29:d4:08:14:68:ad:1e:e0:1c:47:67:a0:17:c2:47:b5:16:
a4:4d:6a:8a:f9:57:71:c4:d5:ec:a6:9d:dc:8e:59:08:b3:ba:
a1:f0:60:0f:b1:36:bb:f7:63:73:d3:4d:ad:0c:dd:af:a8:64:
2b:83:03:9a:82:60:26:fc:ce:d8:d8:63:d0:e9:a5:74:7c:df:
db:bf:a4:29:5a:8c:ca:f4:34:95:8b:e2:46:2e:ec:64:72:f6:
cb:92:3f:85:4f:ce:75:c9:78:4c:0e:f1:9b:3c:e0:ee:e4:bc:
8e:55:96:8e:b7:5a:e3:b2:4a:94:c3:c1:4e:9d:3c:56:fc:0c:
73:78:b2:91:8e:6a:ca:6c:e1:b8:5c:c1:b2:e6:c9:a6:98:f1:
c3:5c:1a:78:27:b7:38:bd:30:36:49:32:fe:63:11:75:a0:0e:
ca:ca:71:a6:02:62:cf:b4:aa:72:b2:1c:a6:7c:32:1d:a2:39:
aa:f4:db:5f:8a:3d:50:cf:32:d8:be:ff:b6:5c:99:0b:28:59:
39:91:d4:1c:54:80:1c:88:95:8a:9c:23:a1:a2:cf:5e:ef:52:
7b:53:23:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sCPHYfuyJs+QADEgT/f6sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YTY5ZmM1Njg4OTRjYjM5ODVlZGVmMjIyMTZiZDk5OTc0
ZGUyNTEwHhcNMjYwNzI5MDQwMTM1WhcNMjYwNzMwMDQwMTM1WjAzMTEwLwYDVQQD
EygwMDg5MmRiN2RjNDcwNDYyMzE3Y2E3MjFmMTM4MjkxOWMxODEyNjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pcL6Dz6v5H++Yh3nulOLx4g0GS1
kNuA3k+QhjTGptZAwWVerdpjLIgzRZdDYj8tuOGbjnXP3E6hxOMkXdfVPs+VBxGl
uUDWQRKTBKKN8Y4akNukjhzSqtudTil3rFFdDpuQj8tEYNsYLQ8TXaeNUgi4n0tY
zoDCwIEIHAtupANX9Caj8WoHp/Z4Ql2YaHhhLDmp85TjxXZ7ghoNYVjWCrYpu232
KRNW9w81VsR82mzOciB2hymJ8EKSAyTdzRLIa/mK9I9jYyr9ht9iIT7ezW8Cg0Zt
779600XDP7+dWzlYuwJvfhFO8NnYnj0w+A8cb4ZR9fu35OKDGN+WuXgOKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFACJLbfcRwRiMXynIfE4KRnBgSYIMB8GA1UdIwQY
MBaAFISmn8VoiUyzmF7e8iIWvZmXTeJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEthZnhXaUpUTE9ZWHQ3eUloYTltWmRONGxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jNjBhMWUtOTA4MC00YjA4LTk1ZGEt
NDM3ZmU1MGJiNGY3LzEvaEthZnhXaUpUTE9ZWHQ3eUloYTltWmRONGxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9jNjBhMWUtOTA4MC00YjA4LTk1ZGEtNDM3ZmU1MGJiNGY3
LzEvaEthZnhXaUpUTE9ZWHQ3eUloYTltWmRONGxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgzgIkdg2
xKgyLw+ep0qGU1un+HuSx9YuNavc2jfVDeYw4zDAJSnUCBRorR7gHEdnoBfCR7UW
pE1qivlXccTV7Kad3I5ZCLO6ofBgD7E2u/djc9NNrQzdr6hkK4MDmoJgJvzO2Nhj
0OmldHzf27+kKVqMyvQ0lYviRi7sZHL2y5I/hU/Odcl4TA7xmzzg7uS8jlWWjrda
47JKlMPBTp08VvwMc3iykY5qymzhuFzBsubJppjxw1waeCe3OL0wNkky/mMRdaAO
yspxpgJiz7SqcrIcpnwyHaI5qvTbX4o9UM8y2L7/tlyZCyhZOZHUHFSAHIiVipwj
oaLPXu9Se1Mj1Q==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:22:04 2026 by rpki-client