Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
File: hq8scWa7NKaW_eL7rO9AAbCo5-I.mft (raw, json)
Hash identifier: eHbvONrJvIhkBApigQ5YRwxW7mcjS1LBg4s+57vB4js=
Subject key identifier: 23:BA:F2:F8:C9:69:B8:31:62:17:B2:2E:4E:32:B2:15:E0:A2:07:D0
Authority key identifier: 86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
Certificate issuer: /CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Certificate serial: 019D992AF0191A9FA8D0448F19D6309B3B0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
Manifest number: 1448
Signing time: Fri 17 Apr 2026 02:00:21 +0000
Manifest this update: Fri 17 Apr 2026 02:00:21 +0000
Manifest next update: Sat 18 Apr 2026 02:00:21 +0000
Files and hashes: 1: 3MbENdJT26XzCCTRISyB_iPykiw.roa (hash: kSjcy26IOOyW+caS15k1M32+3TxvbP1k3eV5GVXbdqs=)
2: 93Zo7Pu2h3l6Yl9T9RSBRKnjw20.roa (hash: WXzD03j8xoR9D+l/6kOBvEB/Gim510LMJ3OHuaq0Urg=)
3: hq8scWa7NKaW_eL7rO9AAbCo5-I.crl (hash: 5eTvRtCrZm+ub/as4cca2CUgBGln6Df3stzQ/fS2oRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2a:f0:19:1a:9f:a8:d0:44:8f:19:d6:30:9b:3b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Validity
Not Before: Apr 17 02:00:21 2026 GMT
Not After : Apr 18 02:00:21 2026 GMT
Subject: CN=23baf2f8c969b8316217b22e4e32b215e0a207d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a1:6b:d6:c5:84:aa:8e:b7:52:42:01:7b:54:
c7:d9:7c:98:b4:8f:19:cb:d2:4d:90:b4:28:ac:99:
c3:24:6e:74:96:6a:25:8d:6d:0d:53:90:38:88:3a:
0e:dc:c8:00:f0:fe:25:03:27:cf:26:54:29:bf:0b:
6f:63:80:95:cd:fd:2d:79:fa:aa:5f:1e:8b:25:77:
c4:b7:fb:7d:77:3b:55:b3:2b:b4:cc:cd:48:3c:ac:
da:df:0c:81:97:9d:0f:55:f1:82:3f:b6:a0:aa:d3:
7e:10:19:55:5d:cc:d3:88:c5:88:c4:c7:63:7a:8c:
26:31:b1:46:a9:11:91:f2:af:0d:72:40:3d:bc:1d:
56:e2:f0:05:bd:7f:85:44:a5:83:98:ce:71:61:cc:
22:ff:a2:4e:8e:fc:88:ea:89:f9:e0:02:bb:c1:c6:
a1:b6:7e:b0:e2:3b:77:59:eb:17:d1:1a:ca:5c:c1:
55:70:78:20:1e:fe:28:86:b7:be:6e:f3:ed:55:02:
87:68:06:ea:be:04:0e:66:f1:ce:f2:2a:f7:f3:ab:
d7:ec:7b:b3:b0:b3:17:0d:70:ea:e9:a4:e8:f8:e2:
4b:1e:8a:83:4a:7b:89:ed:f9:f8:07:6a:d2:c3:be:
c8:a9:50:bc:d1:13:06:1d:f5:b7:13:ae:b7:ad:d3:
23:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BA:F2:F8:C9:69:B8:31:62:17:B2:2E:4E:32:B2:15:E0:A2:07:D0
X509v3 Authority Key Identifier:
keyid:86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:08:27:6e:f8:37:ba:65:1b:b1:83:7b:a8:b7:db:f9:5d:79:
69:06:c9:a4:44:00:93:df:2b:30:1b:e0:c0:12:a6:48:ea:67:
44:a3:a8:a7:49:f4:1d:b6:1b:bd:f4:c1:64:ef:2d:de:51:3f:
d6:01:11:ea:63:b1:63:2a:95:17:5b:62:b5:d2:d5:6d:43:27:
81:fc:98:c1:4e:b1:a8:d7:8e:f3:17:58:bb:c2:63:09:b1:dc:
4c:af:2b:82:58:5e:26:ba:8e:c7:e2:fe:6a:a0:0c:30:a6:8d:
7e:db:9d:23:ee:d6:4f:a8:78:f3:93:d8:55:78:b1:5f:09:d9:
75:b9:df:13:be:b5:c3:4e:06:65:92:f9:60:fc:8e:97:74:3e:
0a:ac:60:80:2b:c6:46:7f:f6:46:48:5d:80:4c:5d:11:d6:42:
0f:02:b5:37:7d:1b:8e:3e:ef:ed:a2:0f:54:09:d0:50:b5:ca:
2a:60:94:36:12:ef:35:5f:8d:64:65:30:87:1b:2e:3d:bd:55:
fe:1d:7e:b6:13:4f:b8:4a:13:48:82:40:9a:53:f2:ca:66:12:
02:ac:84:b9:10:d6:4e:b1:ee:f1:7d:4b:8a:b5:f5:c4:b7:00:
cf:c8:e7:2b:78:5d:49:6b:fb:1e:94:6e:c2:ad:7c:f0:94:7f:
03:a3:dc:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZKvAZGp+o0ESPGdYwmzsKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2YWYyYzcxNjZiYjM0YTY5NmZkZTJmYmFjZWY0MDAxYjBh
OGU3ZTIwHhcNMjYwNDE3MDIwMDIxWhcNMjYwNDE4MDIwMDIxWjAzMTEwLwYDVQQD
EygyM2JhZjJmOGM5NjliODMxNjIxN2IyMmU0ZTMyYjIxNWUwYTIwN2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaFr1sWEqo63UkIBe1TH2XyYtI8Z
y9JNkLQorJnDJG50lmoljW0NU5A4iDoO3MgA8P4lAyfPJlQpvwtvY4CVzf0tefqq
Xx6LJXfEt/t9dztVsyu0zM1IPKza3wyBl50PVfGCP7agqtN+EBlVXczTiMWIxMdj
eowmMbFGqRGR8q8NckA9vB1W4vAFvX+FRKWDmM5xYcwi/6JOjvyI6on54AK7wcah
tn6w4jt3WesX0RrKXMFVcHggHv4ohre+bvPtVQKHaAbqvgQOZvHO8ir386vX7Huz
sLMXDXDq6aTo+OJLHoqDSnuJ7fn4B2rSw77IqVC80RMGHfW3E663rdMj3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCO68vjJabgxYheyLk4yshXgogfQMB8GA1UdIwQY
MBaAFIavLHFmuzSmlv3i+6zvQAGwqOfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHE4c2NXYTdOS2FXX2VMN3JPOUFBYkNvNS1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mOGY2NmQtOGE0Ny00NDMxLWFmNTEt
ZTRmNTg3MDQ4MDRlLzEvaHE4c2NXYTdOS2FXX2VMN3JPOUFBYkNvNS1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9mOGY2NmQtOGE0Ny00NDMxLWFmNTEtZTRmNTg3MDQ4MDRl
LzEvaHE4c2NXYTdOS2FXX2VMN3JPOUFBYkNvNS1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAewgnbvg3
umUbsYN7qLfb+V15aQbJpEQAk98rMBvgwBKmSOpnRKOop0n0HbYbvfTBZO8t3lE/
1gER6mOxYyqVF1titdLVbUMngfyYwU6xqNeO8xdYu8JjCbHcTK8rglheJrqOx+L+
aqAMMKaNftudI+7WT6h485PYVXixXwnZdbnfE761w04GZZL5YPyOl3Q+CqxggCvG
Rn/2RkhdgExdEdZCDwK1N30bjj7v7aIPVAnQULXKKmCUNhLvNV+NZGUwhxsuPb1V
/h1+thNPuEoTSIJAmlPyymYSAqyEuRDWTrHu8X1LirX1xLcAz8jnK3hdSWv7HpRu
wq188JR/A6Pc1g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:36:31 2026 by rpki-client