Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
File: hKafxWiJTLOYXt7yIha9mZdN4lE.mft (raw, json)
Hash identifier: ftzKRy2vhrx3SpPit5obrAZdEpb4IRqa3ai1o+tCYzk=
Subject key identifier: 5B:BB:E5:92:37:5F:34:A1:1E:FC:6F:A0:6A:E2:6A:84:C7:95:39:32
Authority key identifier: 84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51
Certificate issuer: /CN=84a69fc568894cb3985edef22216bd99974de251
Certificate serial: 019E9213EF154FEC0166AC15BD958F8681D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
Manifest number: 160C
Signing time: Thu 04 Jun 2026 10:00:40 +0000
Manifest this update: Thu 04 Jun 2026 10:00:40 +0000
Manifest next update: Fri 05 Jun 2026 10:00:40 +0000
Files and hashes: 1: 5yDhnFwC0iVn5DPcpR3QmCvoVv0.roa (hash: ZjrAq68K+mD03JUMhXQCJJAVWYAycmpN3p0OOOXApGI=)
2: hKafxWiJTLOYXt7yIha9mZdN4lE.crl (hash: hsRnfEpaNXKdj2LQLL0aLmald1uDA8ecb9W1eEA+DTY=)
3: iimJ_FJ2za4rPb0lbWSF-wMFV-U.roa (hash: 9GhANmHxIYz0vSDlZn19gbsqViraUvvPcjEm2QpG0pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:13:ef:15:4f:ec:01:66:ac:15:bd:95:8f:86:81:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84a69fc568894cb3985edef22216bd99974de251
Validity
Not Before: Jun 4 10:00:40 2026 GMT
Not After : Jun 5 10:00:40 2026 GMT
Subject: CN=5bbbe592375f34a11efc6fa06ae26a84c7953932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d4:26:a5:17:57:a1:60:6d:5c:a8:c0:e5:de:
c0:96:d0:9f:42:f9:42:75:87:f4:c9:cb:1d:be:f1:
c0:93:a9:e7:0f:53:a1:32:62:64:41:bd:fa:4f:45:
c0:73:4b:54:bc:ed:7a:4e:a7:59:86:3c:d6:b9:e8:
46:1d:e7:4d:44:e4:61:7f:fd:bb:f3:0a:4c:7a:7f:
3a:52:17:dc:06:ee:4b:4d:54:d4:a9:8f:12:38:c2:
28:63:bb:eb:c3:0e:0a:3a:86:9e:d6:98:d4:8e:5e:
4e:41:f9:3d:3a:24:11:33:bc:17:98:7d:b3:55:ba:
06:9d:fc:cd:bf:ab:7e:66:b2:7a:43:2b:42:cc:8f:
96:cc:54:46:ca:b9:f6:d8:08:4d:f6:43:bd:e3:e4:
9b:71:4e:d1:52:3d:bc:bf:5e:d9:b5:19:11:1b:5e:
4c:4d:de:e0:21:a4:de:95:a1:53:07:35:55:4e:da:
20:3f:95:09:87:8d:3a:1b:9e:5f:7c:6a:07:ec:d9:
dd:bd:f8:00:83:6c:78:cc:36:02:e6:f4:db:fa:49:
ca:d8:b1:5d:dd:80:dd:ad:06:de:32:a8:f0:6f:08:
f5:d0:0d:73:cf:c3:3a:56:f2:61:d9:01:13:a5:4e:
4c:c8:58:cd:de:c2:5a:51:52:e9:08:e8:42:17:46:
b3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BB:E5:92:37:5F:34:A1:1E:FC:6F:A0:6A:E2:6A:84:C7:95:39:32
X509v3 Authority Key Identifier:
keyid:84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:db:23:65:35:fe:c1:f0:17:3b:48:3b:63:11:6c:0a:4e:1e:
30:aa:08:da:58:b7:9b:97:c2:0d:fd:1a:cc:aa:fa:6f:9c:75:
12:3c:fc:88:8e:2d:e1:59:c6:a9:9f:81:de:f2:04:40:eb:5f:
b2:9c:2b:c9:8d:f6:ec:39:8c:0a:cf:3c:28:ee:0b:9c:37:f9:
8f:6b:6c:78:95:ea:d0:8d:ee:4b:d1:42:a8:7c:b3:09:c7:58:
f1:10:85:d4:3e:ff:9e:3c:b9:34:4d:d6:58:e9:61:d3:b4:ff:
4a:23:23:d6:14:5a:77:32:e9:06:dc:ba:46:5d:21:ae:e3:a9:
d2:89:a6:4e:e5:2c:44:59:33:9c:44:6c:23:e6:9b:dc:96:4d:
60:5b:42:ad:7a:9d:f8:50:f0:f3:1d:2c:02:17:98:bc:d9:f3:
f6:34:76:00:0c:1a:8a:25:bc:93:8b:54:1c:82:48:f5:de:41:
94:68:43:9d:66:8b:83:fa:c4:fd:52:98:c1:95:35:37:f8:2b:
33:b9:fb:df:5f:a1:df:25:69:65:a6:7d:c5:ea:1d:b2:96:0b:
3d:aa:e1:de:da:7a:26:2c:1e:d3:c2:3b:2c:a3:e5:c8:4a:a6:
14:01:7a:45:52:5b:e6:11:f0:08:71:b4:ae:5d:ee:35:df:ef:
d3:8b:65:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6SE+8VT+wBZqwVvZWPhoHSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YTY5ZmM1Njg4OTRjYjM5ODVlZGVmMjIyMTZiZDk5OTc0
ZGUyNTEwHhcNMjYwNjA0MTAwMDQwWhcNMjYwNjA1MTAwMDQwWjAzMTEwLwYDVQQD
Eyg1YmJiZTU5MjM3NWYzNGExMWVmYzZmYTA2YWUyNmE4NGM3OTUzOTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtQmpRdXoWBtXKjA5d7AltCfQvlC
dYf0ycsdvvHAk6nnD1OhMmJkQb36T0XAc0tUvO16TqdZhjzWuehGHedNRORhf/27
8wpMen86UhfcBu5LTVTUqY8SOMIoY7vrww4KOoae1pjUjl5OQfk9OiQRM7wXmH2z
VboGnfzNv6t+ZrJ6QytCzI+WzFRGyrn22AhN9kO94+SbcU7RUj28v17ZtRkRG15M
Td7gIaTelaFTBzVVTtogP5UJh406G55ffGoH7NndvfgAg2x4zDYC5vTb+knK2LFd
3YDdrQbeMqjwbwj10A1zz8M6VvJh2QETpU5MyFjN3sJaUVLpCOhCF0az3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFu75ZI3XzShHvxvoGriaoTHlTkyMB8GA1UdIwQY
MBaAFISmn8VoiUyzmF7e8iIWvZmXTeJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEthZnhXaUpUTE9ZWHQ3eUloYTltWmRONGxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jNjBhMWUtOTA4MC00YjA4LTk1ZGEt
NDM3ZmU1MGJiNGY3LzEvaEthZnhXaUpUTE9ZWHQ3eUloYTltWmRONGxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9jNjBhMWUtOTA4MC00YjA4LTk1ZGEtNDM3ZmU1MGJiNGY3
LzEvaEthZnhXaUpUTE9ZWHQ3eUloYTltWmRONGxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa9sjZTX+
wfAXO0g7YxFsCk4eMKoI2li3m5fCDf0azKr6b5x1Ejz8iI4t4VnGqZ+B3vIEQOtf
spwryY327DmMCs88KO4LnDf5j2tseJXq0I3uS9FCqHyzCcdY8RCF1D7/njy5NE3W
WOlh07T/SiMj1hRadzLpBty6Rl0hruOp0ommTuUsRFkznERsI+ab3JZNYFtCrXqd
+FDw8x0sAheYvNnz9jR2AAwaiiW8k4tUHIJI9d5BlGhDnWaLg/rE/VKYwZU1N/gr
M7n731+h3yVpZaZ9xeodspYLParh3tp6Jiwe08I7LKPlyEqmFAF6RVJb5hHwCHG0
rl3uNd/v04tlMw==
-----END CERTIFICATE-----
Generated at Thu Jun 4 12:04:12 2026 by rpki-client