Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/hh8QJbTdZhRYH1DB-FoGc0ulqfk.mft
File: hh8QJbTdZhRYH1DB-FoGc0ulqfk.mft (raw, json)
Hash identifier: Fkp+Ce5UWRoTUTjjVRA+JhLwP1SZ1U5RubcpOPJi5cE=
Subject key identifier: D7:3B:2A:13:06:1B:72:F2:01:96:85:3A:DC:E2:08:34:93:C7:B8:C2
Authority key identifier: 86:1F:10:25:B4:DD:66:14:58:1F:50:C1:F8:5A:06:73:4B:A5:A9:F9
Certificate issuer: /CN=861f1025b4dd6614581f50c1f85a06734ba5a9f9
Certificate serial: 01A17DE1351562977E49BB7354DD7D3AC6D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hh8QJbTdZhRYH1DB-FoGc0ulqfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/hh8QJbTdZhRYH1DB-FoGc0ulqfk.mft
Manifest number: 013F
Signing time: Tue 27 Oct 2026 15:01:13 +0000
Manifest this update: Tue 27 Oct 2026 15:01:13 +0000
Manifest next update: Wed 28 Oct 2026 15:01:13 +0000
Files and hashes: 1: fTTJaw_54nEtImNHGANh9X5pCjU.roa (hash: IDhG7BAffdnYnvyt684I59EEhWvx4nR1U8ujkTq4BHo=)
2: hh8QJbTdZhRYH1DB-FoGc0ulqfk.crl (hash: oa6OjWvwyWoC5VlBeocO0gjVLcObb9Ke66J4KG3Gjwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/hh8QJbTdZhRYH1DB-FoGc0ulqfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/hh8QJbTdZhRYH1DB-FoGc0ulqfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hh8QJbTdZhRYH1DB-FoGc0ulqfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e1:35:15:62:97:7e:49:bb:73:54:dd:7d:3a:c6:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861f1025b4dd6614581f50c1f85a06734ba5a9f9
Validity
Not Before: Oct 27 15:01:13 2026 GMT
Not After : Oct 28 15:01:13 2026 GMT
Subject: CN=d73b2a13061b72f20196853adce2083493c7b8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8a:6c:dd:5e:a9:fd:d1:eb:55:3f:60:1b:17:
50:0c:05:bb:2b:10:4e:2c:9d:d0:66:05:c4:fe:a7:
81:f2:dc:70:ac:88:17:d4:8e:cc:64:0b:fe:b3:a7:
01:c4:8e:b5:55:89:57:82:6c:63:b7:2b:c9:f5:97:
57:d8:80:17:af:d4:0d:45:50:f9:72:82:88:1b:f9:
d8:05:8d:25:5d:17:5f:97:58:6d:44:8f:65:b3:4a:
3f:11:0b:2c:b7:d1:b6:0a:fb:21:34:2f:de:91:37:
40:9e:47:45:85:a8:6f:d0:0f:22:6e:80:d1:2b:b5:
14:9c:6d:91:c9:e9:86:ee:79:31:d1:aa:2e:d2:a6:
61:dc:16:43:ca:d2:ca:67:dd:28:35:11:69:1b:ff:
c3:16:23:6c:9f:34:9f:9a:6c:b8:3c:c3:bf:d7:d0:
31:a3:01:e7:8d:9e:de:1f:ca:58:d0:7c:64:88:d2:
29:8f:28:d3:7d:72:4a:15:c8:4d:85:ba:5f:0c:d3:
16:29:fc:03:23:e8:69:7c:02:d5:8d:c2:38:da:9b:
51:53:72:97:f7:0d:00:da:67:95:fa:33:cb:d5:9c:
a8:4c:4a:85:ef:a6:d4:e6:31:77:a3:ce:a0:5b:bb:
fc:cd:c3:41:57:18:54:cd:33:6e:82:11:32:b5:7f:
9f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3B:2A:13:06:1B:72:F2:01:96:85:3A:DC:E2:08:34:93:C7:B8:C2
X509v3 Authority Key Identifier:
keyid:86:1F:10:25:B4:DD:66:14:58:1F:50:C1:F8:5A:06:73:4B:A5:A9:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hh8QJbTdZhRYH1DB-FoGc0ulqfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/hh8QJbTdZhRYH1DB-FoGc0ulqfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/hh8QJbTdZhRYH1DB-FoGc0ulqfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:b7:a3:fd:f8:9c:03:6b:d8:c1:74:46:7c:2f:5c:d9:6b:d1:
dc:4d:3b:36:31:6a:a1:a3:3d:8e:ac:98:82:49:81:a7:47:e1:
ed:89:c3:74:e6:af:14:2c:66:a0:81:d3:ac:2e:43:5c:fa:e4:
61:85:d5:33:6a:e5:02:79:58:ac:f0:24:7f:b2:46:4c:45:89:
2b:b0:61:11:78:61:eb:cb:bb:43:b7:01:51:8e:1a:fc:bf:7c:
63:77:43:8d:df:69:82:f0:1a:21:e6:7a:e1:bc:d0:20:ff:15:
5d:53:5b:bc:cc:b9:a8:ba:2d:bd:37:6b:1a:35:2b:ce:3e:de:
2e:a4:0d:69:63:75:5b:bf:c5:f7:64:e0:6f:ed:21:a7:3b:51:
b9:ad:20:82:31:55:59:d2:76:d5:a1:07:70:d8:31:e4:b8:20:
7d:62:68:d0:7a:80:48:eb:c6:9f:f7:3b:3d:31:3e:2f:6d:f0:
7e:16:38:7c:ec:f2:bb:9f:60:fe:93:ab:c2:b8:6a:0a:ab:29:
6d:d2:3a:b8:25:30:d8:8e:a1:e3:23:40:c6:ba:54:a6:27:fd:
e8:e8:62:5d:78:5d:09:6f:43:16:5c:94:7b:bc:69:b1:c1:93:
c7:f6:f1:d5:96:65:b7:30:a3:8b:0b:b8:4c:80:b7:a8:51:67:
6a:8b:8d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:29:38 2026 by rpki-client