Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
File: hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft (raw, json)
Hash identifier: Ge1eeQVaMxDQIRbiwjw7FpD2ACmkood2VuoHJn/rFv4=
Subject key identifier: B5:FC:E9:54:B4:B5:CF:FD:B6:F7:52:5B:04:B4:49:21:78:C9:FF:9C
Authority key identifier: 86:4F:30:1E:59:0B:83:EA:A3:8F:C1:21:B6:60:9F:F6:FE:52:B8:68
Certificate issuer: /CN=864f301e590b83eaa38fc121b6609ff6fe52b868
Certificate serial: 01A1818747B228C19E8BA8F2C7C5EBCFFBC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hk8wHlkLg-qjj8EhtmCf9v5SuGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
Manifest number: 16AA
Signing time: Wed 28 Oct 2026 08:01:28 +0000
Manifest this update: Wed 28 Oct 2026 08:01:28 +0000
Manifest next update: Thu 29 Oct 2026 08:01:28 +0000
Files and hashes: 1: 2nBYNNpL7DUTWC7t7_01sfvjbSY.roa (hash: gZ0dRZlvFm+YPFIz5Atx1f7qRtb0ULpGbzwkVg6VEJ0=)
2: hk8wHlkLg-qjj8EhtmCf9v5SuGg.crl (hash: r1vCUpY3nU+eXpaaA9WZVG2HGgalIhHoLxsE19IwdaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hk8wHlkLg-qjj8EhtmCf9v5SuGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:87:47:b2:28:c1:9e:8b:a8:f2:c7:c5:eb:cf:fb:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864f301e590b83eaa38fc121b6609ff6fe52b868
Validity
Not Before: Oct 28 08:01:28 2026 GMT
Not After : Oct 29 08:01:28 2026 GMT
Subject: CN=b5fce954b4b5cffdb6f7525b04b4492178c9ff9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:cf:5e:a9:3e:ea:2b:38:a7:0c:ab:fc:1e:bc:
d6:af:c9:db:a8:a0:4a:e3:d6:ab:1b:e9:e1:ec:f9:
5f:de:45:0c:c2:47:0c:2c:c3:ea:1a:f3:7f:5d:da:
41:db:fb:13:5d:81:c2:f7:84:51:9e:13:76:b1:82:
4b:ff:fe:cf:a4:85:78:60:85:75:a6:a2:2d:b6:e3:
de:9b:73:7f:db:df:d5:40:7d:a7:e2:9f:56:61:3e:
9c:d5:d3:85:b9:e7:1f:ec:97:4b:b1:12:97:8b:88:
42:f1:ca:d6:85:39:d0:cf:98:d4:60:a1:f5:9d:60:
62:c1:b1:74:4d:8a:a0:db:99:a5:b0:d5:dd:14:86:
91:1a:bc:d0:7d:79:30:a8:86:c9:d3:73:c3:de:e9:
66:ad:ac:a7:df:0f:ec:6d:a1:0f:81:cc:65:eb:22:
d6:57:cc:ee:86:6d:45:49:6a:9f:e7:9b:8c:9a:ad:
93:f7:e2:ec:9c:b1:35:2f:7d:9e:b0:26:d8:08:40:
43:15:6c:3e:59:b3:14:b6:89:32:1a:06:0c:80:69:
d7:3a:fa:fb:73:49:75:5f:4f:ab:0e:4b:40:e3:5f:
6f:49:7b:62:40:b7:2e:31:74:09:9e:1b:2f:89:03:
10:b1:64:d5:98:d1:d1:33:45:b4:e3:07:cc:3f:5b:
92:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FC:E9:54:B4:B5:CF:FD:B6:F7:52:5B:04:B4:49:21:78:C9:FF:9C
X509v3 Authority Key Identifier:
keyid:86:4F:30:1E:59:0B:83:EA:A3:8F:C1:21:B6:60:9F:F6:FE:52:B8:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hk8wHlkLg-qjj8EhtmCf9v5SuGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:1b:89:87:3c:0b:31:ef:c3:06:38:dd:f8:47:03:7d:08:c4:
c6:4b:99:33:9f:b5:99:c2:f6:d0:14:9d:8b:f3:67:85:54:ab:
dd:95:9b:2b:95:d3:59:ce:af:65:63:0c:92:93:bd:09:5d:02:
1c:a5:7d:6a:58:3f:c7:eb:9d:92:8d:4a:6d:de:02:7e:73:4c:
dd:7c:58:d4:15:1e:c6:93:c2:69:38:6a:a5:55:39:f5:a2:54:
d8:e7:e6:25:bf:06:78:79:2f:f5:0a:94:8c:50:1e:98:09:1e:
99:a2:e6:20:37:a8:3d:c6:3f:55:84:2b:74:90:a9:1e:02:22:
ff:46:c0:16:1d:fa:4c:4a:f4:b3:74:60:94:f8:a9:f7:58:aa:
90:46:9f:62:1b:1d:1d:63:1c:d0:e0:60:2d:57:1d:69:c5:3c:
a3:0e:f9:7c:fc:19:27:ea:97:a4:5e:d4:d2:5b:71:1c:ea:f3:
b9:23:e3:8e:52:93:36:71:f9:4c:3c:e9:f8:92:56:6c:ef:ce:
80:40:63:07:2a:13:3e:b8:89:2e:03:c9:52:49:d1:3c:f0:c9:
4d:a1:43:a1:a4:a6:9f:01:f4:bb:30:f3:0d:2a:82:eb:91:eb:
38:47:b0:7d:13:fa:65:88:46:34:0d:fc:2c:7d:95:22:0e:82:
7c:88:8d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:15:30 2026 by rpki-client