Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/hh8QJbTdZhRYH1DB-FoGc0ulqfk.mft
File: hh8QJbTdZhRYH1DB-FoGc0ulqfk.mft (raw, json)
Hash identifier: Mwus/n46NVGToUSd8RH4Dlam2YdM4jxBKooQhaccgzM=
Subject key identifier: ED:DA:A6:4D:9E:BA:70:7F:04:13:78:FA:BA:BE:41:88:64:90:91:6C
Authority key identifier: 86:1F:10:25:B4:DD:66:14:58:1F:50:C1:F8:5A:06:73:4B:A5:A9:F9
Certificate issuer: /CN=861f1025b4dd6614581f50c1f85a06734ba5a9f9
Certificate serial: 01A10248DBB17CAEA4A88BE84D52B87756B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hh8QJbTdZhRYH1DB-FoGc0ulqfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/hh8QJbTdZhRYH1DB-FoGc0ulqfk.mft
Manifest number: FF
Signing time: Sat 03 Oct 2026 15:01:31 +0000
Manifest this update: Sat 03 Oct 2026 15:01:31 +0000
Manifest next update: Sun 04 Oct 2026 15:01:31 +0000
Files and hashes: 1: fTTJaw_54nEtImNHGANh9X5pCjU.roa (hash: IDhG7BAffdnYnvyt684I59EEhWvx4nR1U8ujkTq4BHo=)
2: hh8QJbTdZhRYH1DB-FoGc0ulqfk.crl (hash: 5YyQTNybgJSwgo8RmQMm5KM2dm4N6Y3FKj0m9rfqJDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/hh8QJbTdZhRYH1DB-FoGc0ulqfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/hh8QJbTdZhRYH1DB-FoGc0ulqfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hh8QJbTdZhRYH1DB-FoGc0ulqfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:48:db:b1:7c:ae:a4:a8:8b:e8:4d:52:b8:77:56:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861f1025b4dd6614581f50c1f85a06734ba5a9f9
Validity
Not Before: Oct 3 15:01:31 2026 GMT
Not After : Oct 4 15:01:31 2026 GMT
Subject: CN=eddaa64d9eba707f041378fababe41886490916c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7e:34:44:4e:20:b6:cd:84:a8:b8:17:df:65:
44:cd:b4:dd:8c:79:2c:1c:e9:25:9a:49:65:1f:c6:
15:da:e9:60:10:6b:ca:58:df:65:a8:60:56:ae:31:
ab:df:16:30:d1:e6:d3:bd:99:70:44:31:74:60:c8:
ff:92:f7:d2:32:64:c9:15:fb:c3:5c:6d:bf:b1:ac:
4b:fd:ae:31:bf:e6:88:c7:cb:18:44:3e:6a:eb:17:
f3:43:0d:67:e8:59:25:11:34:8d:4f:d6:5a:2e:0d:
ef:ed:a4:09:c4:79:77:0f:6b:27:d7:1f:01:31:a2:
da:70:5a:9e:0e:44:d9:85:2d:70:e9:4a:6b:e5:1b:
56:cd:17:34:b9:d7:ac:2d:c4:dd:75:8a:83:64:15:
ca:3b:61:7f:d0:77:2d:b2:e0:08:93:5e:35:82:fa:
86:be:58:77:ba:72:3a:07:1d:4d:be:f7:a6:ac:3e:
a5:91:d4:37:57:2e:1d:57:e9:14:d5:ed:99:16:27:
80:50:66:5c:09:f8:40:60:7c:cb:c4:6c:dc:59:52:
fd:9a:f8:d0:a8:b8:6b:cd:4f:ec:da:aa:07:c2:2d:
47:39:e7:bc:ca:a3:6c:ef:e5:4f:03:46:a0:ba:31:
35:dc:4b:c7:b0:86:44:f5:56:1c:75:07:9a:7c:73:
59:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DA:A6:4D:9E:BA:70:7F:04:13:78:FA:BA:BE:41:88:64:90:91:6C
X509v3 Authority Key Identifier:
keyid:86:1F:10:25:B4:DD:66:14:58:1F:50:C1:F8:5A:06:73:4B:A5:A9:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hh8QJbTdZhRYH1DB-FoGc0ulqfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/hh8QJbTdZhRYH1DB-FoGc0ulqfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/hh8QJbTdZhRYH1DB-FoGc0ulqfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:af:ee:f3:b9:97:a3:cc:44:e6:40:bb:95:ff:10:62:52:34:
cf:f4:e2:92:93:1c:c7:6c:8c:f5:05:95:b8:19:da:1c:ee:c3:
8a:6b:8b:de:88:f2:25:2e:86:38:98:a0:00:3e:9b:2b:b5:95:
6c:d4:aa:47:a0:79:27:e8:c6:bb:96:5a:85:ee:3d:28:a7:ec:
ab:b5:1c:52:f7:83:cd:c0:4e:ef:a7:f2:e5:6e:9f:a0:71:71:
9b:0c:6c:b1:8c:0f:0a:f8:e2:93:4e:29:e4:90:c4:e0:8c:0e:
81:ae:a2:b6:da:47:4c:d3:6d:7e:fe:4e:00:22:d9:17:ef:65:
e0:95:92:4c:b8:8b:d3:d3:23:9f:31:80:66:21:69:68:f9:62:
1d:04:05:38:79:e9:2c:5b:29:36:dd:bd:fd:a1:04:9b:75:ca:
71:18:02:c8:17:f9:c8:fe:4b:30:7c:17:9e:71:3e:12:63:cd:
98:4e:fa:9f:e7:67:ce:f5:0a:5b:3c:32:59:5c:ec:64:6a:19:
d0:19:03:9c:9c:20:ed:d0:d3:26:30:0f:09:48:9c:af:8a:42:
7a:ce:41:c3:b9:3e:6d:c8:26:5b:4f:ac:ac:16:df:1a:b2:7e:
e3:00:c5:27:71:ad:df:2e:9b:30:a0:82:a1:b4:28:94:df:7d:
e5:5e:71:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 19:38:06 2026 by rpki-client