Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
File: hKafxWiJTLOYXt7yIha9mZdN4lE.mft (raw, json)
Hash identifier: RSuFDQEwBqLOjmQKEAzARi1xW7stJiTJAEbMrqmE9E8=
Subject key identifier: B9:A5:BF:EB:9E:DF:46:4B:29:4B:8A:6B:86:E6:A6:2B:D8:A5:48:5A
Authority key identifier: 84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51
Certificate issuer: /CN=84a69fc568894cb3985edef22216bd99974de251
Certificate serial: 019CAB6AF158AE9782DD854D544E4AE71EA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
Manifest number: 1510
Signing time: Sun 01 Mar 2026 22:00:38 +0000
Manifest this update: Sun 01 Mar 2026 22:00:38 +0000
Manifest next update: Mon 02 Mar 2026 22:00:38 +0000
Files and hashes: 1: 5yDhnFwC0iVn5DPcpR3QmCvoVv0.roa (hash: ZjrAq68K+mD03JUMhXQCJJAVWYAycmpN3p0OOOXApGI=)
2: hKafxWiJTLOYXt7yIha9mZdN4lE.crl (hash: DUa0NOu/rOHoCd+xnatxVkQHxhZOCS6BgRaOexgMTpQ=)
3: iimJ_FJ2za4rPb0lbWSF-wMFV-U.roa (hash: 9GhANmHxIYz0vSDlZn19gbsqViraUvvPcjEm2QpG0pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:f1:58:ae:97:82:dd:85:4d:54:4e:4a:e7:1e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84a69fc568894cb3985edef22216bd99974de251
Validity
Not Before: Mar 1 22:00:38 2026 GMT
Not After : Mar 2 22:00:38 2026 GMT
Subject: CN=b9a5bfeb9edf464b294b8a6b86e6a62bd8a5485a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:be:b8:78:88:c1:a4:c8:17:e4:44:05:39:6e:
94:3d:8d:f2:db:d7:fe:6b:45:d6:05:80:3c:cd:11:
da:b9:32:dc:1d:95:8f:e6:be:5f:46:28:7a:12:6d:
05:13:6c:59:29:b1:ad:6f:83:d9:9b:49:84:46:fe:
e1:29:63:4a:81:fc:bd:03:f6:8a:3a:8b:6b:de:66:
e6:b5:e1:42:fd:c0:fe:03:24:5e:04:1f:f4:7c:47:
f0:ba:b7:e2:d0:9c:72:5f:f9:de:fe:76:24:7c:f8:
9a:3a:ea:c8:ce:e6:1c:ad:e9:f1:9d:ea:7f:86:02:
0c:37:62:9d:9c:57:d3:ad:30:fc:72:a0:6a:4d:40:
88:2e:5b:09:eb:ea:2c:40:09:17:cd:29:35:f4:63:
ca:30:9e:7a:f8:bd:03:6d:15:16:87:c5:6f:65:9d:
f7:af:26:d0:36:58:2a:86:8d:82:98:5c:f3:ee:ff:
61:6a:ac:bc:b0:f7:ab:6e:ac:13:7a:ef:c0:1a:c9:
fc:e7:87:ab:ee:c4:47:fd:dc:4b:28:6b:ed:63:26:
c3:06:7e:27:ff:1b:58:6b:5a:ec:06:35:92:71:8b:
32:0d:01:e5:2c:d2:3f:06:04:e0:ae:07:6b:14:9a:
be:1a:71:2d:a4:35:91:cf:68:60:24:8b:39:61:3f:
49:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A5:BF:EB:9E:DF:46:4B:29:4B:8A:6B:86:E6:A6:2B:D8:A5:48:5A
X509v3 Authority Key Identifier:
keyid:84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:81:49:63:f7:48:1c:ed:eb:ac:6b:14:ee:d2:1d:85:af:d4:
fd:f0:5e:93:68:a2:18:50:9e:a1:6f:54:ed:a9:ef:08:f5:37:
39:d7:da:19:b1:ed:29:10:4c:9b:8f:32:fd:01:b0:ad:84:2d:
db:93:cb:6d:e4:dc:cf:61:ef:b4:16:d8:d0:bd:9c:31:a3:a0:
15:80:c2:5e:28:38:69:82:d0:24:b3:15:64:f7:4a:3f:d7:eb:
e7:a3:fa:d5:92:5b:3c:13:7d:a4:23:46:91:6a:2c:f7:85:7e:
5a:7f:1e:91:cd:dd:c5:ed:cb:78:09:be:53:2b:96:3a:53:57:
a1:58:b7:69:2d:54:0b:fe:c3:ac:d6:3d:06:7a:1f:e4:09:e3:
18:b7:2b:cd:21:fc:91:bc:bb:27:1a:10:ee:4b:ee:ff:8d:1f:
3f:28:fb:c0:d7:e3:3e:ea:6c:8b:93:5c:bb:99:f2:6a:8d:01:
4d:22:dd:5d:5a:9b:fd:76:ee:0b:ef:7a:66:62:5e:1c:54:81:
f7:89:ce:c6:20:55:48:1a:42:26:4b:e6:aa:fd:fa:55:f6:7c:
c3:ea:d6:d4:bc:9b:c2:d4:12:04:d7:d1:08:58:ea:34:ba:8f:
39:ba:8a:8b:33:c6:1e:27:ac:cb:1b:b5:34:4b:8c:38:91:2a:
0b:67:18:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:44:37 2026 by rpki-client