Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
File: hq8scWa7NKaW_eL7rO9AAbCo5-I.mft (raw, json)
Hash identifier: nOgum0jEdUr2uyMrHhheKQvlagSRHzPZZkWWps5U0Co=
Subject key identifier: 12:2A:12:1B:36:62:A3:53:E4:96:74:97:06:5B:19:B6:09:73:31:A7
Authority key identifier: 86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
Certificate issuer: /CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Certificate serial: 019CAD90D7A6904CA6C07CDBF4F89FA048E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
Manifest number: 13CE
Signing time: Mon 02 Mar 2026 08:01:16 +0000
Manifest this update: Mon 02 Mar 2026 08:01:16 +0000
Manifest next update: Tue 03 Mar 2026 08:01:16 +0000
Files and hashes: 1: 3MbENdJT26XzCCTRISyB_iPykiw.roa (hash: kSjcy26IOOyW+caS15k1M32+3TxvbP1k3eV5GVXbdqs=)
2: 93Zo7Pu2h3l6Yl9T9RSBRKnjw20.roa (hash: WXzD03j8xoR9D+l/6kOBvEB/Gim510LMJ3OHuaq0Urg=)
3: hq8scWa7NKaW_eL7rO9AAbCo5-I.crl (hash: n9QEVEAsMEBd73Gt4Vd9H6mx2uAwOQTO29BZTTG0nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:d7:a6:90:4c:a6:c0:7c:db:f4:f8:9f:a0:48:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Validity
Not Before: Mar 2 08:01:16 2026 GMT
Not After : Mar 3 08:01:16 2026 GMT
Subject: CN=122a121b3662a353e4967497065b19b6097331a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:24:8a:a2:d4:7c:51:61:90:c4:33:cb:a0:99:
43:02:d9:f2:0c:dd:c3:f1:97:1d:7b:2b:c3:00:aa:
37:73:d3:c0:26:d2:35:97:77:38:8a:80:d8:36:5f:
5e:06:ea:77:5d:f9:15:86:4f:a0:a7:dc:2c:06:8f:
55:bb:99:79:b4:f1:36:de:f6:2d:c9:66:b4:e7:05:
89:48:fd:05:66:17:24:c9:d8:72:1b:13:76:0e:9f:
8a:42:5c:00:d2:8c:c4:1a:1b:86:bf:43:a2:9e:2c:
7b:26:91:fd:5d:18:d7:60:ce:26:3f:f5:73:68:5e:
d2:ec:c5:67:a6:2a:60:cf:7c:e6:17:13:1f:07:3e:
cb:3e:9f:5d:74:7b:44:43:9b:ac:14:79:76:bd:83:
37:02:5c:ad:ee:25:1d:e5:58:fe:cb:6e:8a:48:5d:
0c:8b:a8:d0:af:ec:03:1d:29:ac:0d:a8:0c:dd:bf:
4d:79:bf:a0:7d:46:1a:68:c1:90:74:c5:70:37:ca:
71:a7:50:d1:40:84:35:40:ea:91:63:7e:31:68:54:
9b:89:8c:6f:5d:c6:2a:b7:d0:4d:29:2b:8b:07:d3:
14:fa:2c:53:8b:55:6f:d0:f4:30:ff:d8:95:8a:55:
ef:70:f3:8f:93:dc:db:9b:5e:44:dd:c6:15:e0:87:
bc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2A:12:1B:36:62:A3:53:E4:96:74:97:06:5B:19:B6:09:73:31:A7
X509v3 Authority Key Identifier:
keyid:86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:dd:61:02:c9:46:4b:d5:77:8a:ea:e5:37:88:f7:69:a1:05:
f0:72:21:a4:03:3a:1e:65:58:c3:07:8d:c5:31:95:e2:ab:d8:
08:41:fb:9c:29:9f:56:62:ff:d1:f7:49:03:e4:34:32:a4:7f:
cf:21:e0:aa:78:c8:24:96:8d:c3:5a:bb:e0:b4:d8:74:eb:16:
0d:25:51:a4:e0:24:d9:e2:bd:ec:23:53:7c:d5:53:88:3e:2e:
b6:3e:ba:09:65:3b:2b:8c:3f:08:86:b6:dd:f8:9b:d9:c7:da:
64:0a:d9:79:c9:83:05:11:84:1e:b1:02:09:8a:5f:e2:f3:a8:
99:ec:a9:5e:90:08:32:2b:d6:fc:af:1d:ec:42:a1:dc:9c:4e:
e2:2b:9b:1d:b4:c4:e4:f6:42:68:c9:57:20:d7:52:1c:01:32:
5d:6e:67:54:8c:96:16:fa:a3:80:bc:d2:51:3a:04:7e:63:c2:
18:65:54:11:b0:fc:0e:47:0a:7b:0c:a8:04:be:86:bb:9c:1b:
fb:53:2f:e2:d5:46:0f:3f:c2:0f:f3:99:ac:d9:5b:1b:52:b7:
98:81:80:7d:de:13:51:74:2d:98:ee:ea:d2:67:f5:ea:49:7d:
f5:be:98:de:a7:e6:a8:54:ee:19:bf:b3:8f:72:9f:59:bb:33:
83:89:e0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:01:44 2026 by rpki-client