Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
File: hKafxWiJTLOYXt7yIha9mZdN4lE.mft (raw, json)
Hash identifier: 9OXN/XKJWAp8FaldEEVF/nuyvdfMNPsPhJypfTq8tUE=
Subject key identifier: 1E:E7:E8:4E:D0:D6:27:C4:6F:E1:1B:33:33:A4:99:05:2E:96:F1:3A
Authority key identifier: 84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51
Certificate issuer: /CN=84a69fc568894cb3985edef22216bd99974de251
Certificate serial: 019F8568E9C7BB4D16C32273DFCE60D8CA4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
Manifest number: 168A
Signing time: Tue 21 Jul 2026 16:01:12 +0000
Manifest this update: Tue 21 Jul 2026 16:01:12 +0000
Manifest next update: Wed 22 Jul 2026 16:01:12 +0000
Files and hashes: 1: 5yDhnFwC0iVn5DPcpR3QmCvoVv0.roa (hash: ZjrAq68K+mD03JUMhXQCJJAVWYAycmpN3p0OOOXApGI=)
2: hKafxWiJTLOYXt7yIha9mZdN4lE.crl (hash: 81cjTKUIsqEdCWXi4y4duOvKtaUmDhKTbmY7fLdrek4=)
3: iimJ_FJ2za4rPb0lbWSF-wMFV-U.roa (hash: 9GhANmHxIYz0vSDlZn19gbsqViraUvvPcjEm2QpG0pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:68:e9:c7:bb:4d:16:c3:22:73:df:ce:60:d8:ca:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84a69fc568894cb3985edef22216bd99974de251
Validity
Not Before: Jul 21 16:01:12 2026 GMT
Not After : Jul 22 16:01:12 2026 GMT
Subject: CN=1ee7e84ed0d627c46fe11b3333a499052e96f13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:51:3c:77:b2:a7:a0:70:27:31:6a:25:1b:bc:
37:db:46:f7:f9:de:8f:29:79:64:ff:b6:58:2e:8f:
c8:b0:f9:b6:4d:2b:d2:72:49:94:75:c0:61:87:67:
11:97:7d:31:b2:63:01:7f:a3:e5:28:ec:2b:7c:2b:
60:80:62:fd:da:de:1f:b9:85:ed:4c:a7:63:88:df:
68:10:aa:d7:11:09:4d:1a:a5:1b:2f:c0:9a:4e:2d:
65:6b:bf:48:b2:11:4b:4f:83:09:25:c7:59:f5:c6:
3d:5e:5e:0b:88:36:25:25:b1:f0:b8:05:8e:31:7f:
51:ed:23:74:8f:cb:78:49:27:29:45:3e:3f:3c:b5:
5e:55:87:a1:ec:e2:3c:bd:04:c2:13:0d:88:72:1a:
9e:37:ae:f1:c8:f0:57:a8:8f:99:f8:9f:c0:6d:68:
0c:8d:62:7c:20:81:52:b4:83:29:17:7e:1e:cc:58:
ee:47:bc:fd:31:e7:d0:41:b3:fb:29:3d:fe:86:87:
d1:0d:e6:ce:d0:40:2d:4e:3d:52:a8:d3:60:0b:c6:
2a:41:b1:b2:c3:8a:b9:f3:e1:c5:8e:18:33:06:80:
39:03:49:64:f2:b2:07:b8:61:a7:70:00:1b:cd:97:
55:41:eb:f0:da:f9:d2:22:f4:20:c2:75:4f:9b:78:
ce:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E7:E8:4E:D0:D6:27:C4:6F:E1:1B:33:33:A4:99:05:2E:96:F1:3A
X509v3 Authority Key Identifier:
keyid:84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b5:a8:e5:f1:ed:23:94:4a:60:19:fa:c7:7d:a9:1a:12:5d:
e9:69:15:df:2e:6c:25:31:37:5a:dd:5e:63:b4:9a:9f:7d:36:
a2:25:33:d1:9f:53:b8:aa:08:64:a4:ce:2a:fb:95:19:3d:5f:
09:ce:15:19:03:e9:d1:36:62:80:b1:b0:6d:0a:2f:07:fa:d5:
bd:a7:cf:f8:3c:27:d0:85:ed:3a:1c:e1:1b:fc:2a:ba:27:85:
48:41:2c:ec:69:4c:81:07:1e:dd:ee:92:f4:a5:27:7f:30:cd:
e0:c3:73:45:c5:cc:9b:1b:9e:29:b3:6b:bb:21:0d:cc:92:3f:
92:d3:85:0e:c8:f6:6c:c3:d1:4d:12:74:fc:8b:d3:60:ca:62:
47:d3:e8:30:15:52:84:f3:d5:77:c5:4a:40:45:69:f7:71:87:
07:83:50:b7:c5:15:27:0f:14:a4:84:8c:df:e4:1c:93:4d:b5:
ff:fd:5a:c8:48:7f:e3:87:1b:76:e1:32:fe:2b:11:2b:b8:5f:
7d:db:70:b0:32:34:c6:fc:03:a5:0f:4f:f3:18:55:70:c6:fe:
7d:db:a9:fc:10:8c:4a:40:e7:6d:b5:9e:75:c9:a3:a9:2f:e5:
a9:55:48:8d:ef:b0:55:9b:0b:43:42:d6:26:2e:19:34:e9:bb:
6e:51:55:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:33:47 2026 by rpki-client