Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
File: hKafxWiJTLOYXt7yIha9mZdN4lE.mft (raw, json)
Hash identifier: 8iCsP8MG/oywrm5Urtafd9yu1fKfzyzyCMIiJHvjMYk=
Subject key identifier: 6F:7F:68:32:35:FB:B0:30:DA:00:75:27:45:2A:26:09:A0:E3:A7:E5
Authority key identifier: 84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51
Certificate issuer: /CN=84a69fc568894cb3985edef22216bd99974de251
Certificate serial: 019D38663ADB912BAFA7E4F7BDCDDA91B8C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
Manifest number: 1559
Signing time: Sun 29 Mar 2026 07:01:56 +0000
Manifest this update: Sun 29 Mar 2026 07:01:56 +0000
Manifest next update: Mon 30 Mar 2026 07:01:56 +0000
Files and hashes: 1: 5yDhnFwC0iVn5DPcpR3QmCvoVv0.roa (hash: ZjrAq68K+mD03JUMhXQCJJAVWYAycmpN3p0OOOXApGI=)
2: hKafxWiJTLOYXt7yIha9mZdN4lE.crl (hash: 9HGu2A2EANU55TabRoaxMjUm3i5Gx+ZD2Wk2uqyQOuo=)
3: iimJ_FJ2za4rPb0lbWSF-wMFV-U.roa (hash: 9GhANmHxIYz0vSDlZn19gbsqViraUvvPcjEm2QpG0pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:3a:db:91:2b:af:a7:e4:f7:bd:cd:da:91:b8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84a69fc568894cb3985edef22216bd99974de251
Validity
Not Before: Mar 29 07:01:56 2026 GMT
Not After : Mar 30 07:01:56 2026 GMT
Subject: CN=6f7f683235fbb030da007527452a2609a0e3a7e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:68:fc:8d:7d:a8:52:32:db:a2:a5:18:94:3e:
40:90:35:ad:ab:91:e2:36:fe:26:a8:46:1d:77:d5:
7a:7a:54:5a:4f:59:ac:1f:f5:36:83:09:9d:d5:a9:
48:ae:7f:cf:d5:52:cc:d5:2c:06:08:41:41:39:a9:
bd:60:7c:ad:66:87:49:b2:dd:37:a6:39:74:36:43:
43:ba:81:3d:b5:70:b3:be:d4:8a:f1:53:2b:d7:92:
e2:97:f9:88:9d:61:2a:83:4d:39:96:f4:7e:ee:e1:
25:d3:97:d9:95:4d:73:e5:39:34:53:cb:41:88:84:
00:84:ba:10:b9:07:a4:cd:d7:73:e8:b5:a5:78:4d:
d8:00:01:21:e6:dc:fa:d7:d8:8f:36:b0:ed:c1:12:
71:2f:a3:40:53:66:89:f2:84:d9:89:19:af:85:7c:
2d:4b:d1:fd:1d:1e:9f:a4:21:ee:18:1d:75:0f:6d:
e6:07:b1:20:e8:85:6a:bf:49:a2:47:d4:38:a6:e3:
c8:b1:88:42:32:fc:4e:08:bc:69:fb:ad:14:dd:b9:
6d:f8:1f:bb:a1:dd:75:79:08:38:e2:4c:7f:7c:0f:
76:86:f8:83:52:9e:99:75:2a:0f:9c:59:e1:cb:70:
90:b5:39:f3:89:33:80:86:ff:d3:e1:56:09:09:9a:
2f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:7F:68:32:35:FB:B0:30:DA:00:75:27:45:2A:26:09:A0:E3:A7:E5
X509v3 Authority Key Identifier:
keyid:84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:34:20:d6:57:51:43:ab:1e:9b:67:16:01:36:1f:5c:f2:86:
a9:1d:00:80:ee:f9:7b:2a:ea:e0:39:8a:23:cf:6d:d2:28:d3:
21:59:7b:c5:38:08:30:fb:08:17:6f:07:7a:23:99:4b:20:b9:
b3:a9:cf:91:22:9d:fe:d2:74:ec:ad:d0:89:03:16:70:4c:60:
ac:f7:39:52:91:f4:a8:fd:1b:87:de:3c:0b:b5:9d:92:9c:09:
80:dc:7d:b4:dd:9b:14:ae:cd:19:08:04:aa:6d:72:f8:b7:60:
5c:80:18:c6:de:e5:ed:c9:0e:9a:7a:be:14:96:80:43:fb:be:
32:bb:d3:71:d6:e7:01:43:92:8d:06:f6:55:08:70:29:e1:c7:
a1:a7:1e:9a:77:d1:a4:35:9c:41:d8:19:69:6d:a0:5d:83:00:
52:c2:3e:6b:0c:2a:b0:82:02:58:33:94:47:58:53:5d:ff:23:
3c:fa:0d:68:2d:8d:c7:10:c7:25:d8:1f:35:8c:cb:38:af:2f:
df:11:49:56:54:94:b5:5a:94:14:ce:46:42:8d:c9:ae:80:aa:
4b:ae:c4:0d:15:3e:99:8c:63:75:85:1b:c6:37:b8:f9:50:f7:
b0:50:9f:3a:59:35:7d:d3:4a:fe:82:9a:c0:58:16:06:5e:de:
e9:64:b8:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZjrbkSuvp+T3vc3akbjDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YTY5ZmM1Njg4OTRjYjM5ODVlZGVmMjIyMTZiZDk5OTc0
ZGUyNTEwHhcNMjYwMzI5MDcwMTU2WhcNMjYwMzMwMDcwMTU2WjAzMTEwLwYDVQQD
Eyg2ZjdmNjgzMjM1ZmJiMDMwZGEwMDc1Mjc0NTJhMjYwOWEwZTNhN2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWj8jX2oUjLboqUYlD5AkDWtq5Hi
Nv4mqEYdd9V6elRaT1msH/U2gwmd1alIrn/P1VLM1SwGCEFBOam9YHytZodJst03
pjl0NkNDuoE9tXCzvtSK8VMr15Lil/mInWEqg005lvR+7uEl05fZlU1z5Tk0U8tB
iIQAhLoQuQekzddz6LWleE3YAAEh5tz619iPNrDtwRJxL6NAU2aJ8oTZiRmvhXwt
S9H9HR6fpCHuGB11D23mB7Eg6IVqv0miR9Q4puPIsYhCMvxOCLxp+60U3blt+B+7
od11eQg44kx/fA92hviDUp6ZdSoPnFnhy3CQtTnziTOAhv/T4VYJCZovYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9/aDI1+7Aw2gB1J0UqJgmg46flMB8GA1UdIwQY
MBaAFISmn8VoiUyzmF7e8iIWvZmXTeJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEthZnhXaUpUTE9ZWHQ3eUloYTltWmRONGxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jNjBhMWUtOTA4MC00YjA4LTk1ZGEt
NDM3ZmU1MGJiNGY3LzEvaEthZnhXaUpUTE9ZWHQ3eUloYTltWmRONGxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9jNjBhMWUtOTA4MC00YjA4LTk1ZGEtNDM3ZmU1MGJiNGY3
LzEvaEthZnhXaUpUTE9ZWHQ3eUloYTltWmRONGxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAojQg1ldR
Q6sem2cWATYfXPKGqR0AgO75eyrq4DmKI89t0ijTIVl7xTgIMPsIF28HeiOZSyC5
s6nPkSKd/tJ07K3QiQMWcExgrPc5UpH0qP0bh948C7WdkpwJgNx9tN2bFK7NGQgE
qm1y+LdgXIAYxt7l7ckOmnq+FJaAQ/u+MrvTcdbnAUOSjQb2VQhwKeHHoacemnfR
pDWcQdgZaW2gXYMAUsI+awwqsIICWDOUR1hTXf8jPPoNaC2NxxDHJdgfNYzLOK8v
3xFJVlSUtVqUFM5GQo3JroCqS67EDRU+mYxjdYUbxje4+VD3sFCfOlk1fdNK/oKa
wFgWBl7e6WS4CQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:17 2026 by rpki-client