Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
File: hq8scWa7NKaW_eL7rO9AAbCo5-I.mft (raw, json)
Hash identifier: AwfiFsvN/TMXCFm0BZWI/jksz7SME8qYT5+50RrdZJM=
Subject key identifier: 7C:2B:D7:F9:BC:CF:44:A4:75:5C:48:AC:CE:3C:62:26:B1:09:B5:AE
Authority key identifier: 86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
Certificate issuer: /CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Certificate serial: 019CAF7F44CD5FC8BB924B53BF70F292560C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
Manifest number: 13CF
Signing time: Mon 02 Mar 2026 17:01:19 +0000
Manifest this update: Mon 02 Mar 2026 17:01:19 +0000
Manifest next update: Tue 03 Mar 2026 17:01:19 +0000
Files and hashes: 1: 3MbENdJT26XzCCTRISyB_iPykiw.roa (hash: kSjcy26IOOyW+caS15k1M32+3TxvbP1k3eV5GVXbdqs=)
2: 93Zo7Pu2h3l6Yl9T9RSBRKnjw20.roa (hash: WXzD03j8xoR9D+l/6kOBvEB/Gim510LMJ3OHuaq0Urg=)
3: hq8scWa7NKaW_eL7rO9AAbCo5-I.crl (hash: DmKrleZ6HOPsKXY+FRF8nPJ2ELQgrcas6tiAah0tVeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:7f:44:cd:5f:c8:bb:92:4b:53:bf:70:f2:92:56:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Validity
Not Before: Mar 2 17:01:19 2026 GMT
Not After : Mar 3 17:01:19 2026 GMT
Subject: CN=7c2bd7f9bccf44a4755c48acce3c6226b109b5ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5f:47:72:07:50:cf:48:cc:3a:2d:97:d2:6d:
6c:b2:cf:11:79:12:83:99:fc:4e:7d:09:d4:10:cb:
18:52:da:e4:c8:c7:ad:19:9b:f3:be:c8:09:7e:7e:
4f:83:3c:dd:1b:33:2a:98:27:90:43:88:49:e5:bb:
1b:8a:f6:79:02:b4:96:2c:eb:e3:6c:a7:cf:77:8c:
df:e2:32:76:ca:f0:86:d3:39:8e:d0:72:dc:33:ed:
d5:70:a7:51:35:85:52:e8:1b:14:8f:76:f8:4d:17:
81:e7:c6:a1:6d:6e:c7:a7:c5:a5:cf:4a:b3:ae:35:
c3:e9:6f:86:87:4e:73:8d:7a:d7:07:65:c4:42:52:
cd:2c:81:f3:68:bf:11:32:f0:40:ff:45:b1:bc:82:
fb:0f:4d:1f:0d:5d:2a:53:9e:64:0c:97:5f:88:aa:
2f:0c:09:9a:47:6d:6e:b0:c0:51:ad:be:73:9b:b2:
04:66:5e:70:be:a2:78:3f:20:10:25:67:a1:85:f3:
e3:c6:37:f8:e2:ca:b7:85:89:f2:a9:09:18:55:a7:
8c:b7:d9:d0:61:3c:cf:64:8c:b1:82:09:4f:aa:78:
08:11:27:f5:26:9f:30:45:42:0d:43:90:b0:87:5a:
e7:81:1b:fe:bc:8c:5f:8f:60:ac:5f:26:4e:40:c3:
25:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2B:D7:F9:BC:CF:44:A4:75:5C:48:AC:CE:3C:62:26:B1:09:B5:AE
X509v3 Authority Key Identifier:
keyid:86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:7c:ce:07:56:ef:88:44:04:75:39:bd:78:c7:d2:3c:84:b8:
e3:d8:f0:17:75:0b:e1:5e:9f:e0:2c:14:a5:c3:ac:9f:bb:60:
8e:18:a5:94:13:ed:07:fc:ae:0e:3c:ce:90:7c:b3:7f:db:ce:
fa:64:a2:18:de:7a:33:e3:ad:e6:6e:89:af:db:02:1d:8f:a7:
23:a7:3c:38:cf:65:20:04:df:20:92:66:7e:99:77:31:f3:1e:
9c:e5:66:33:29:a7:09:2a:d7:22:dc:ea:76:83:d8:74:3b:e8:
5e:4d:6d:66:50:3c:4a:a2:53:34:ed:c5:0b:a9:08:66:f3:00:
43:0c:e7:65:60:a6:6a:58:cf:27:4c:99:01:84:26:38:fc:5c:
b1:43:2e:23:3e:22:09:62:76:78:f5:35:e7:a3:6a:77:b4:ec:
74:38:e7:d0:6b:b3:2c:ce:e1:4a:ff:fe:65:fa:2e:c2:da:db:
55:e6:b7:dc:fe:f8:69:ba:25:47:7d:15:f9:68:0f:cd:bb:42:
21:4a:a4:6c:f0:1e:dc:07:e5:07:0b:79:8f:21:97:78:82:3b:
93:36:30:5a:72:ce:ed:4c:ca:21:a7:19:cf:2d:f7:a1:de:46:
1a:49:e9:9a:9e:62:3a:a2:4b:b7:e9:c0:96:72:8e:49:01:16:
dc:0c:fa:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:56:50 2026 by rpki-client