Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/hp2fc3396q0-lfhm6NMqZsT4oLI.mft
File: hp2fc3396q0-lfhm6NMqZsT4oLI.mft (raw, json)
Hash identifier: s+q7Atzbj0d4Ra4E4mtJTjLawHqz/yx2QZeR8lxlF7E=
Subject key identifier: FB:6F:8C:29:5B:33:9A:0B:C2:76:F4:18:1A:B0:7E:4A:59:E5:59:E6
Authority key identifier: 86:9D:9F:73:7D:FD:EA:AD:3E:95:F8:66:E8:D3:2A:66:C4:F8:A0:B2
Certificate issuer: /CN=869d9f737dfdeaad3e95f866e8d32a66c4f8a0b2
Certificate serial: 01A113AA345022BDCD66AC066854FF2F6EEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hp2fc3396q0-lfhm6NMqZsT4oLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/hp2fc3396q0-lfhm6NMqZsT4oLI.mft
Manifest number: 0108
Signing time: Wed 07 Oct 2026 00:01:23 +0000
Manifest this update: Wed 07 Oct 2026 00:01:23 +0000
Manifest next update: Thu 08 Oct 2026 00:01:23 +0000
Files and hashes: 1: 7Tyv75qflu1MI2EbiYIYOe-EMOs.roa (hash: VD2V/Wqx8qVUzX6JNvOF1zN+nPxKD5Y7QjXuUoG/ZVc=)
2: hp2fc3396q0-lfhm6NMqZsT4oLI.crl (hash: Br4aBsSkNvHlZKps7bN3WUJNi6jMQTsx7h2+nBrE9So=)
3: ylnh5jHJGqU5w3NKWDSXLJQlbV8.asa (hash: DhXmkIGv0YJ5BrhiAQaTPI3U/c809JbcweCxcOd5t5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/hp2fc3396q0-lfhm6NMqZsT4oLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/hp2fc3396q0-lfhm6NMqZsT4oLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hp2fc3396q0-lfhm6NMqZsT4oLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:aa:34:50:22:bd:cd:66:ac:06:68:54:ff:2f:6e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869d9f737dfdeaad3e95f866e8d32a66c4f8a0b2
Validity
Not Before: Oct 7 00:01:23 2026 GMT
Not After : Oct 8 00:01:23 2026 GMT
Subject: CN=fb6f8c295b339a0bc276f4181ab07e4a59e559e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:77:ad:42:f6:bb:f7:b2:15:00:d9:ae:0d:a0:
fc:e4:84:69:7b:20:54:b5:ad:12:f6:a0:5c:e0:e2:
80:91:f9:7d:d9:11:a1:60:02:ed:a9:f9:ab:35:48:
80:55:cf:a7:04:72:99:6c:40:bd:a4:f5:e5:5e:d6:
67:17:8e:01:40:4d:38:9d:e8:8b:68:79:33:75:90:
84:96:54:a2:ce:c3:4a:a8:d3:c4:e1:b5:07:b8:fa:
a6:d4:ff:8b:ca:5b:43:ef:83:e9:0a:9d:2b:80:f0:
3a:8f:13:d0:89:75:75:60:37:37:ec:b1:b2:51:80:
30:b6:92:7f:d0:e0:95:06:dc:b1:2a:69:03:4d:6d:
7f:df:24:d9:75:d6:92:9d:a2:42:1d:8a:30:4d:ba:
51:bb:f9:8b:21:fa:83:a9:96:ba:6b:4c:fe:b2:60:
fc:aa:47:d9:55:ee:e6:a2:7b:b6:4b:73:34:2a:da:
bf:14:ee:3f:3c:32:5e:ca:cb:55:c5:37:8a:f8:89:
df:1d:a3:60:62:02:34:d7:d5:cc:a8:a0:38:4e:55:
3a:d9:25:0e:63:6a:67:f4:98:32:c8:09:c7:83:fb:
57:a4:92:28:1e:bd:0b:4a:9d:1d:af:3b:d1:8f:d9:
a1:0e:20:53:73:b2:15:bc:e3:60:9b:77:60:67:44:
25:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:6F:8C:29:5B:33:9A:0B:C2:76:F4:18:1A:B0:7E:4A:59:E5:59:E6
X509v3 Authority Key Identifier:
keyid:86:9D:9F:73:7D:FD:EA:AD:3E:95:F8:66:E8:D3:2A:66:C4:F8:A0:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hp2fc3396q0-lfhm6NMqZsT4oLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/hp2fc3396q0-lfhm6NMqZsT4oLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/hp2fc3396q0-lfhm6NMqZsT4oLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:7e:47:14:a6:a0:0c:6b:2f:27:cd:dd:33:73:70:3f:37:58:
d0:9d:a4:15:ca:ce:45:62:c6:df:a1:0b:79:8b:7e:bb:19:df:
bf:09:ea:f7:bc:c2:45:82:75:65:53:91:61:87:43:68:82:f1:
bb:f3:d2:90:ab:d1:1e:d5:ee:c9:d9:b4:60:ef:aa:ab:c2:31:
a6:c5:f4:76:66:81:1f:f0:da:13:5d:0e:f0:5e:96:8b:f1:21:
4f:f1:4a:90:52:de:fb:7d:bc:bb:50:2a:1b:77:91:ab:12:d1:
dc:cd:ad:8d:d5:65:e9:f8:05:e9:e4:90:55:6d:93:b1:85:cb:
b3:1f:46:79:c2:38:de:f7:e8:62:45:b2:fe:a9:18:f9:bb:14:
59:fa:ea:44:0f:5b:e3:42:b5:eb:f4:0d:50:df:0a:15:53:8d:
1b:08:fb:cb:f5:7e:74:b0:24:55:3c:f1:6f:16:7f:01:16:f3:
ed:bf:25:7e:89:12:48:9a:b8:86:86:c7:d6:cb:77:b3:20:f6:
30:40:e4:55:dc:e1:77:ca:61:96:e3:31:e7:f9:41:b6:10:f7:
43:13:2f:a2:02:c3:82:ab:04:33:df:30:d5:55:95:b9:73:26:
de:a2:79:e5:54:e2:ac:d5:89:a7:81:8f:4d:a4:50:c8:6f:43:
24:0d:c5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:53:04 2026 by rpki-client