Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
File: hq8scWa7NKaW_eL7rO9AAbCo5-I.mft (raw, json)
Hash identifier: Isp6LJN739TfsLjMDuvf2TkYhEyuw7M6rjpnQCEa5r4=
Subject key identifier: 91:D3:52:C1:F5:B2:51:5E:E3:90:78:44:25:C2:C2:D1:C0:29:55:86
Authority key identifier: 86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
Certificate issuer: /CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Certificate serial: 019EC0A454514E834D75636EDFA1F9D02645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
Manifest number: 14E1
Signing time: Sat 13 Jun 2026 11:00:55 +0000
Manifest this update: Sat 13 Jun 2026 11:00:55 +0000
Manifest next update: Sun 14 Jun 2026 11:00:55 +0000
Files and hashes: 1: 3MbENdJT26XzCCTRISyB_iPykiw.roa (hash: kSjcy26IOOyW+caS15k1M32+3TxvbP1k3eV5GVXbdqs=)
2: 93Zo7Pu2h3l6Yl9T9RSBRKnjw20.roa (hash: WXzD03j8xoR9D+l/6kOBvEB/Gim510LMJ3OHuaq0Urg=)
3: hq8scWa7NKaW_eL7rO9AAbCo5-I.crl (hash: eZShlB1bJ34xYQebi37z6ZRIl8pqRPZNZN/4t4rEaKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a4:54:51:4e:83:4d:75:63:6e:df:a1:f9:d0:26:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Validity
Not Before: Jun 13 11:00:55 2026 GMT
Not After : Jun 14 11:00:55 2026 GMT
Subject: CN=91d352c1f5b2515ee390784425c2c2d1c0295586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b8:af:37:97:75:4d:84:e5:16:a5:2d:02:87:
90:5c:89:d7:27:c5:57:22:de:b7:bf:3d:3f:d5:84:
53:93:94:88:7b:4a:68:a6:ff:f4:bb:f5:ba:37:dd:
95:50:7f:d9:e8:f3:0f:77:b3:f2:39:e3:83:07:b0:
2b:2c:45:a1:7e:dd:2a:18:a8:03:a2:0c:27:5f:5a:
f7:8b:49:6f:47:fa:b2:32:3c:0a:7e:d1:5b:42:60:
b6:3c:a4:33:85:e4:9c:28:99:69:b4:74:69:dd:64:
a7:00:a6:2e:6a:c7:98:59:45:68:6c:66:22:78:13:
29:a6:c5:55:8c:93:e8:77:57:00:cd:ce:3d:43:e9:
e4:c1:96:0a:c2:ee:b7:41:74:a0:b0:18:69:00:7c:
cb:cd:1c:6e:f3:34:b3:5a:fd:89:09:01:12:c4:8a:
3b:94:b7:8e:92:7c:78:01:ff:9c:ff:84:1a:92:2e:
91:d8:d9:84:99:5b:5e:be:77:a0:69:c3:6b:08:f6:
1b:40:15:c9:db:47:3c:a4:3c:f5:17:0f:83:ba:ba:
3c:ad:11:48:b5:13:8f:d2:c1:59:66:52:f7:b4:57:
88:6b:13:8c:56:b5:16:a8:12:bd:d0:20:78:2c:88:
b7:ac:e7:70:89:d5:b7:a2:98:ca:95:60:04:db:d4:
29:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D3:52:C1:F5:B2:51:5E:E3:90:78:44:25:C2:C2:D1:C0:29:55:86
X509v3 Authority Key Identifier:
keyid:86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:6a:64:d4:22:1e:64:2e:0c:13:cb:1b:d6:22:7a:78:97:a5:
8f:51:be:d2:df:ae:81:8a:e3:29:11:d7:d8:08:aa:de:84:98:
b2:a7:dd:d0:20:61:8a:0a:8d:5a:57:eb:1d:7e:89:b2:90:7e:
43:8f:a6:3f:8e:b2:e2:52:bf:01:37:95:e3:af:b4:8e:1f:43:
79:c0:85:34:c2:98:73:13:f8:93:bb:b4:b0:17:e1:93:11:47:
a7:c5:3a:b9:46:0b:ac:56:4d:5a:1c:1d:38:ef:1f:16:2a:8b:
85:f1:47:a6:db:b6:97:29:cb:e8:2b:4d:61:e2:5b:d0:78:b2:
c8:bf:fd:00:7e:2c:d1:42:73:89:f3:8e:6e:05:42:10:e8:0a:
ac:4a:25:00:6b:e3:12:b1:c7:a9:ce:06:b5:64:9f:29:d0:54:
6b:ff:18:7d:d7:9f:d5:51:9a:bf:ae:52:60:78:0b:b2:c0:ad:
57:df:4e:51:fd:77:e5:aa:13:31:40:09:a7:68:a0:b4:5b:7b:
38:89:f9:c4:fe:61:91:c6:c7:ea:b7:68:48:db:80:03:05:e8:
95:b6:2e:d7:24:f7:49:af:37:6c:b3:1d:9b:56:0f:60:fa:9f:
86:0b:7c:d9:60:8c:f7:77:03:c6:5f:9e:1f:79:f2:96:c5:e1:
e6:d4:55:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:44:34 2026 by rpki-client