Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
File: hq8scWa7NKaW_eL7rO9AAbCo5-I.mft (raw, json)
Hash identifier: lDwhPz6MoJYbcP8lLs82Ut7Y+OHuz/U40TM3o13aSc4=
Subject key identifier: 27:E4:41:8B:0B:4B:91:FA:9E:01:DB:72:EF:6A:41:BE:4A:B6:EE:35
Authority key identifier: 86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
Certificate issuer: /CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Certificate serial: 019FAA50BC879119249E21CC3F4035CEFC79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
Manifest number: 155A
Signing time: Tue 28 Jul 2026 20:00:45 +0000
Manifest this update: Tue 28 Jul 2026 20:00:45 +0000
Manifest next update: Wed 29 Jul 2026 20:00:45 +0000
Files and hashes: 1: 3MbENdJT26XzCCTRISyB_iPykiw.roa (hash: kSjcy26IOOyW+caS15k1M32+3TxvbP1k3eV5GVXbdqs=)
2: 93Zo7Pu2h3l6Yl9T9RSBRKnjw20.roa (hash: WXzD03j8xoR9D+l/6kOBvEB/Gim510LMJ3OHuaq0Urg=)
3: hq8scWa7NKaW_eL7rO9AAbCo5-I.crl (hash: o20rIDKG8GznpAs8B74ryaeO2O8+SMer2tmLpZaK4fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:bc:87:91:19:24:9e:21:cc:3f:40:35:ce:fc:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Validity
Not Before: Jul 28 20:00:45 2026 GMT
Not After : Jul 29 20:00:45 2026 GMT
Subject: CN=27e4418b0b4b91fa9e01db72ef6a41be4ab6ee35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9e:7d:39:c6:a6:05:00:79:8d:a7:ec:e7:86:
9e:8b:66:f6:79:f0:c1:0d:05:02:09:17:e2:43:c8:
17:52:f3:6f:3b:19:b3:12:31:67:35:6a:13:65:5a:
f9:01:0d:09:4f:4c:4b:d7:31:bb:33:2f:ba:5f:ca:
9e:c1:d9:ce:53:a6:2a:98:c2:d2:df:b1:f1:f3:ee:
7e:5f:e7:3e:02:61:80:4a:0f:f8:ce:bc:04:94:1e:
ab:51:c5:74:46:cf:e5:f7:9e:0f:58:22:14:84:8a:
35:9a:c1:26:f4:49:83:29:51:e1:18:39:88:f2:c2:
9f:6e:90:18:9d:fc:66:3a:bb:09:f5:ce:08:5a:c6:
b3:f3:ed:10:d7:96:b9:22:47:f0:ce:e6:a5:26:14:
a2:ad:d7:b9:71:cf:61:6b:87:3a:5f:68:c6:39:f6:
31:42:17:30:34:5a:ee:cb:fc:9c:9b:e9:59:3e:fd:
69:b4:01:4f:1d:94:df:52:7d:08:5b:34:51:d9:43:
4e:bf:22:d7:41:d8:c8:bb:85:da:05:7f:c2:78:a1:
89:67:97:05:48:24:b2:81:fb:b8:b2:7c:d6:73:28:
e8:ee:c5:e6:ff:01:d5:46:fc:f3:55:e8:d9:f8:bf:
7c:34:f6:8e:05:97:40:33:f1:2f:81:bb:13:d2:7e:
cb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E4:41:8B:0B:4B:91:FA:9E:01:DB:72:EF:6A:41:BE:4A:B6:EE:35
X509v3 Authority Key Identifier:
keyid:86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:80:7d:7a:8b:26:9e:09:ab:33:e3:e8:4c:19:77:6b:bd:5e:
b1:64:a3:a2:38:b4:36:9f:4e:f6:0e:b8:ca:3b:09:08:f5:5d:
86:0c:0f:2b:7e:12:4b:ab:32:f5:8b:da:f3:7a:51:ef:2e:ef:
66:77:18:3d:39:0a:d8:ed:17:0a:de:46:16:54:90:54:b5:64:
c4:a0:96:75:30:8d:74:75:88:09:0e:91:7b:78:7b:7a:cb:1c:
91:58:00:8a:f7:4b:8c:13:97:fd:25:9f:d8:ad:30:c7:b0:7e:
b5:db:d9:93:27:6c:b3:2a:52:41:5e:bf:a5:0b:df:15:63:5e:
c8:f6:ba:0b:63:9c:da:ef:48:97:e1:bf:d2:10:80:c5:78:c2:
d3:26:6b:12:86:5f:96:36:e4:c4:e4:38:c5:46:26:7d:fc:dd:
6b:21:d8:44:75:73:73:b9:ab:56:7d:7b:56:e5:61:51:53:58:
ce:78:e4:33:a3:a7:6d:c5:0b:6a:94:af:92:83:5a:53:90:f7:
87:47:41:b9:56:08:27:12:0c:06:e9:95:6b:4a:83:b7:3a:fb:
46:09:f2:1d:3c:fa:11:7e:8e:7b:8f:4e:cd:69:96:e3:ea:e9:
41:46:cb:f5:fa:24:f3:d9:f6:44:64:38:b9:ea:1f:45:db:c7:
93:d5:2f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:49:17 2026 by rpki-client