Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
File: hq8scWa7NKaW_eL7rO9AAbCo5-I.mft (raw, json)
Hash identifier: jDl773jcDseYntwy6rBDQRZ5uC2D6DCxZaldQL3zO7U=
Subject key identifier: 29:BC:0E:3A:86:26:8A:33:3D:58:B8:4D:35:F2:6E:E0:24:26:C9:19
Authority key identifier: 86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
Certificate issuer: /CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Certificate serial: 01A0C82198A59123202097CFD7800F52DC4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
Manifest number: 15EE
Signing time: Tue 22 Sep 2026 08:00:39 +0000
Manifest this update: Tue 22 Sep 2026 08:00:39 +0000
Manifest next update: Wed 23 Sep 2026 08:00:39 +0000
Files and hashes: 1: 3MbENdJT26XzCCTRISyB_iPykiw.roa (hash: kSjcy26IOOyW+caS15k1M32+3TxvbP1k3eV5GVXbdqs=)
2: 93Zo7Pu2h3l6Yl9T9RSBRKnjw20.roa (hash: WXzD03j8xoR9D+l/6kOBvEB/Gim510LMJ3OHuaq0Urg=)
3: hq8scWa7NKaW_eL7rO9AAbCo5-I.crl (hash: FMrM0Yar2i1vMRRrsw/O2Ftxh/vzj3Fz0cKITan8XHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:21:98:a5:91:23:20:20:97:cf:d7:80:0f:52:dc:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Validity
Not Before: Sep 22 08:00:39 2026 GMT
Not After : Sep 23 08:00:39 2026 GMT
Subject: CN=29bc0e3a86268a333d58b84d35f26ee02426c919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0b:1a:07:0b:cb:fd:ef:11:d6:62:8d:e9:ed:
bd:ab:b1:98:00:6b:a3:ad:b7:c1:6c:3c:a9:50:a9:
f2:2e:25:b8:b1:1b:7a:69:8c:64:d3:aa:38:8c:44:
8e:ca:e5:2c:9c:24:7b:37:d2:dc:8c:d5:49:95:d4:
92:79:c6:84:ea:42:d9:66:69:04:96:35:42:8d:b5:
c3:26:9d:56:96:c5:cb:b5:02:8c:6b:2a:cc:fa:dd:
13:d5:07:0c:85:60:8f:40:69:e4:8c:0d:8c:c8:f5:
11:39:d3:df:f5:44:63:30:0b:b1:a3:35:bc:1d:6d:
1c:7f:87:d1:09:c4:cb:b4:24:e5:a3:b7:58:bb:19:
2f:d9:3f:d9:ae:3d:f3:0b:f5:1e:b0:6c:94:63:90:
aa:6b:d9:a2:a7:f8:81:6c:d4:88:d6:68:7a:8c:5c:
31:55:f8:75:53:dd:12:81:2b:09:98:54:92:b0:90:
44:01:a9:d5:78:4a:57:e4:ca:c0:20:72:8c:1c:cf:
b3:3f:49:f8:93:e9:18:c0:86:2b:77:88:8d:46:89:
2e:e9:17:d2:b7:f9:c2:cb:85:ab:82:36:af:d9:d1:
f9:3c:7f:01:6d:0e:8e:b8:b6:c3:b0:0d:36:43:05:
3e:80:d0:a4:5c:54:23:70:a2:16:14:45:56:fd:dc:
61:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BC:0E:3A:86:26:8A:33:3D:58:B8:4D:35:F2:6E:E0:24:26:C9:19
X509v3 Authority Key Identifier:
keyid:86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:70:c2:ac:a9:a2:57:2c:bf:7d:33:c1:09:cd:9f:28:47:33:
e9:82:d2:81:df:97:47:31:1d:28:f2:9a:37:94:95:b6:5c:21:
44:ca:ab:b6:4e:83:0b:85:35:4d:4c:02:e0:fc:6e:0d:1a:af:
33:c1:a8:94:98:65:e5:fb:f4:dc:81:13:36:29:0f:2b:ed:de:
be:9d:64:aa:49:3a:5c:63:1d:ec:47:b6:98:fa:c3:44:90:4f:
aa:b4:85:d3:1a:58:54:7e:55:51:8e:1c:0c:37:11:78:42:9f:
88:fa:0a:48:f5:e7:bd:97:13:2f:a8:08:20:cb:98:91:ee:24:
cf:4e:ed:47:2c:e7:49:4f:8d:31:1b:b9:d1:02:37:70:72:7c:
37:81:b0:d7:f5:2c:16:75:34:7d:3b:ab:0c:80:6e:1a:61:c5:
ff:bf:4c:e9:66:65:3c:6d:98:a4:da:b7:b3:3e:df:b0:8b:e0:
21:f2:41:8c:d4:2e:87:2d:a4:05:e5:00:ec:e5:73:e0:7f:0a:
6e:c7:6d:f6:c6:85:eb:29:d4:93:3b:0e:33:e2:55:cc:8f:e1:
59:93:4a:b1:16:93:fa:18:1c:6e:ec:a7:32:40:fd:68:28:2f:
70:4e:ab:31:eb:ad:8d:40:78:04:1d:fb:6a:45:d2:79:1d:c3:
06:13:cc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:05:08 2026 by rpki-client