Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
File: hKafxWiJTLOYXt7yIha9mZdN4lE.mft (raw, json)
Hash identifier: Oui7OY1XllAKisxl7At7hhd+n84d+tByvLaXP0g22jg=
Subject key identifier: 61:E7:AD:00:B9:99:24:01:F7:AB:AF:19:89:94:E4:20:74:08:FC:83
Authority key identifier: 84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51
Certificate issuer: /CN=84a69fc568894cb3985edef22216bd99974de251
Certificate serial: 01A1626950FDD25016B7096CA3B4EC7EC674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
Manifest number: 1781
Signing time: Thu 22 Oct 2026 07:00:31 +0000
Manifest this update: Thu 22 Oct 2026 07:00:31 +0000
Manifest next update: Fri 23 Oct 2026 07:00:31 +0000
Files and hashes: 1: 5yDhnFwC0iVn5DPcpR3QmCvoVv0.roa (hash: ZjrAq68K+mD03JUMhXQCJJAVWYAycmpN3p0OOOXApGI=)
2: hKafxWiJTLOYXt7yIha9mZdN4lE.crl (hash: eBpMaF3ytRgjPaMi/Bfrt19ZoA2NjWj08z50EUFslx4=)
3: iimJ_FJ2za4rPb0lbWSF-wMFV-U.roa (hash: 9GhANmHxIYz0vSDlZn19gbsqViraUvvPcjEm2QpG0pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:69:50:fd:d2:50:16:b7:09:6c:a3:b4:ec:7e:c6:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84a69fc568894cb3985edef22216bd99974de251
Validity
Not Before: Oct 22 07:00:31 2026 GMT
Not After : Oct 23 07:00:31 2026 GMT
Subject: CN=61e7ad00b9992401f7abaf198994e4207408fc83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:79:6e:73:18:64:c1:d9:6d:44:26:0b:9c:cc:
0e:8c:73:48:17:6a:02:48:63:0a:09:a2:68:1b:4b:
ba:97:26:ac:10:2d:24:82:a6:6b:05:24:7c:5e:f9:
ec:91:44:6b:92:4c:a6:c1:89:ce:bd:a5:c8:0b:0c:
a7:5f:f3:dc:33:be:6c:29:55:93:03:42:89:3e:f8:
b9:a0:4d:54:f7:2b:e2:b7:d0:89:aa:ae:cd:14:24:
83:e0:da:28:93:d9:47:af:2b:b5:2c:07:b3:95:09:
b8:81:a4:97:34:09:23:b9:82:30:56:d8:00:2a:3d:
f4:80:64:a5:b8:de:61:ea:71:07:a3:53:ec:e2:b0:
88:26:e7:31:de:8d:8f:15:95:de:1c:f1:9c:98:ab:
79:d6:8d:15:eb:06:05:2f:ba:a0:18:ad:ef:9e:67:
50:ee:4c:4d:13:42:5d:72:61:59:01:01:5c:c0:cc:
9f:d8:84:33:a3:cf:b3:b6:5a:18:ae:6d:2c:e1:1e:
ff:f6:1c:12:ed:dd:7b:e2:e9:0c:7a:1e:f9:ce:f9:
9b:10:e6:42:df:59:58:38:f8:62:13:c3:ca:ca:39:
90:88:ad:fb:6f:c7:43:ec:b0:9c:3b:63:72:11:24:
f8:76:77:c8:45:05:ce:19:46:be:0d:d2:01:eb:f7:
de:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E7:AD:00:B9:99:24:01:F7:AB:AF:19:89:94:E4:20:74:08:FC:83
X509v3 Authority Key Identifier:
keyid:84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:5f:ab:a9:ea:50:c6:2c:30:48:94:0f:10:5a:d9:ad:a4:6e:
f9:92:10:14:f8:05:e0:e2:4e:46:d6:dc:b7:9b:91:79:67:8a:
0b:4b:c6:e3:d0:74:7e:15:f5:d2:bf:e1:97:28:cd:57:23:4a:
62:ce:eb:d9:ae:cb:4d:ba:5d:eb:9b:f8:a2:b2:a5:5a:56:97:
33:76:ca:7b:87:cb:6f:bc:bf:79:cd:61:a0:cd:81:73:98:27:
3f:3c:3c:d9:b0:8d:21:6c:23:97:93:5c:45:2c:6f:4f:01:28:
23:84:1b:48:a8:21:3e:7a:67:9d:50:9b:9b:19:85:26:0e:d9:
ca:89:77:56:41:fa:32:70:d6:00:73:78:04:74:f0:c3:74:f1:
5e:16:2e:26:cc:c4:3d:c2:96:2f:71:86:04:20:7b:97:6e:a7:
d8:9d:ae:7f:34:63:3d:39:fa:e9:b3:5a:8c:f5:f8:6c:de:f9:
c9:96:2b:e2:90:ef:71:b7:58:ca:d4:1e:03:7f:b5:1e:49:bc:
3e:72:73:de:db:97:8d:1a:66:6d:f9:2c:f6:26:7a:0c:d8:33:
67:a8:fa:60:22:70:be:b6:44:2b:f2:cf:0a:90:8a:eb:a0:97:
cf:9d:2f:ec:2f:91:ce:e3:49:5f:8f:9a:b4:fd:1d:0b:f3:b0:
5b:f6:3f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:59:39 2026 by rpki-client