Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/hh8QJbTdZhRYH1DB-FoGc0ulqfk.mft
File: hh8QJbTdZhRYH1DB-FoGc0ulqfk.mft (raw, json)
Hash identifier: PaWlcK7j3koHedHaG6zvi3V/fjrlPrEPyl++sB/pl0k=
Subject key identifier: 89:F0:83:80:98:F8:48:DC:0C:25:C2:6A:55:46:49:1E:23:74:F2:A6
Authority key identifier: 86:1F:10:25:B4:DD:66:14:58:1F:50:C1:F8:5A:06:73:4B:A5:A9:F9
Certificate issuer: /CN=861f1025b4dd6614581f50c1f85a06734ba5a9f9
Certificate serial: 019F85D631D7F35CE1EF2A240A06CCDFE72A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hh8QJbTdZhRYH1DB-FoGc0ulqfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/hh8QJbTdZhRYH1DB-FoGc0ulqfk.mft
Manifest number: 3A
Signing time: Tue 21 Jul 2026 18:00:34 +0000
Manifest this update: Tue 21 Jul 2026 18:00:34 +0000
Manifest next update: Wed 22 Jul 2026 18:00:34 +0000
Files and hashes: 1: fTTJaw_54nEtImNHGANh9X5pCjU.roa (hash: IDhG7BAffdnYnvyt684I59EEhWvx4nR1U8ujkTq4BHo=)
2: hh8QJbTdZhRYH1DB-FoGc0ulqfk.crl (hash: QsbGKOa0I2K436rssHrh4GqGUlDijIgXdDQXEhaXeKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/hh8QJbTdZhRYH1DB-FoGc0ulqfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/hh8QJbTdZhRYH1DB-FoGc0ulqfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hh8QJbTdZhRYH1DB-FoGc0ulqfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:31:d7:f3:5c:e1:ef:2a:24:0a:06:cc:df:e7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861f1025b4dd6614581f50c1f85a06734ba5a9f9
Validity
Not Before: Jul 21 18:00:34 2026 GMT
Not After : Jul 22 18:00:34 2026 GMT
Subject: CN=89f0838098f848dc0c25c26a5546491e2374f2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:19:4e:ec:8e:0f:73:fe:16:7b:45:79:06:72:
bb:5b:43:73:9e:15:57:be:a0:18:a0:83:95:f9:93:
e8:19:8b:48:3d:94:d2:e7:61:30:31:80:07:b5:c5:
9c:a8:5b:ba:20:25:b7:b7:ae:1a:72:2d:de:8c:b8:
9f:cb:37:ae:83:9b:75:d3:82:cb:8a:75:f4:fc:55:
dd:be:40:4d:a7:99:d7:ae:51:ff:d5:8b:40:92:13:
b0:bd:3d:ca:de:cf:67:0c:af:d0:b6:e6:d8:9a:0f:
fd:d9:2a:b5:1c:47:78:bb:98:f2:49:62:c8:f9:d1:
03:29:09:eb:8e:3a:70:37:5f:0c:61:04:16:47:e7:
8f:33:01:d3:d2:0a:09:8b:03:ac:fe:57:ca:4c:b7:
e5:c9:da:33:60:81:e2:0a:60:40:fa:f1:ea:29:a6:
a1:67:11:f1:48:76:50:3a:33:ba:0a:bd:7b:69:bf:
24:31:84:00:9b:23:dd:ef:10:7b:a7:ec:3f:47:67:
87:02:e5:16:11:74:48:f9:1d:b3:b1:0b:19:4b:52:
91:b2:6b:69:c8:68:81:b4:67:1f:56:30:f8:94:de:
0a:06:78:e4:f8:f2:e8:93:33:16:84:78:f1:1e:85:
f2:03:2c:f7:17:10:1e:2d:ed:11:1b:72:89:81:2a:
1b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F0:83:80:98:F8:48:DC:0C:25:C2:6A:55:46:49:1E:23:74:F2:A6
X509v3 Authority Key Identifier:
keyid:86:1F:10:25:B4:DD:66:14:58:1F:50:C1:F8:5A:06:73:4B:A5:A9:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hh8QJbTdZhRYH1DB-FoGc0ulqfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/hh8QJbTdZhRYH1DB-FoGc0ulqfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/hh8QJbTdZhRYH1DB-FoGc0ulqfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:89:a0:33:b0:31:54:4a:a4:29:89:93:9e:99:e4:c3:25:43:
cb:ac:a1:6f:6c:dc:d3:f7:0f:4f:a9:ec:fc:b2:19:9e:b3:30:
9d:77:15:ed:99:d3:14:2d:c2:7a:bb:bc:82:8a:ec:5d:69:6d:
e3:82:9e:a9:5a:3c:96:47:9a:87:01:05:5f:9b:9c:5e:f2:ef:
a4:27:ac:23:dd:5e:1b:74:0e:12:bc:b2:b1:de:c7:c5:8b:d7:
c2:dd:94:e4:8f:91:b9:c0:5d:e5:e2:a7:4d:88:31:5f:f1:6b:
43:7a:7e:95:8f:11:fc:dd:5f:33:b3:67:34:af:93:9a:c2:00:
0e:46:eb:f6:97:cf:65:a9:2a:52:c3:63:d5:d0:52:ee:de:8a:
b9:f5:4d:49:18:71:ff:46:ec:ef:9d:1d:76:b5:09:d3:95:03:
8a:76:3a:02:ad:ff:0d:78:f4:e4:7e:74:9d:73:d2:c2:ec:a5:
fd:53:19:9e:a5:df:ad:86:4f:1c:6f:30:1a:c0:78:98:55:eb:
f1:ff:8c:61:25:3d:2c:5c:17:40:16:61:75:eb:60:dc:b6:8c:
ae:a1:a8:53:0c:f6:ef:34:6f:a0:4e:ff:85:fc:b4:fd:8c:e8:
82:38:b3:36:6a:83:c2:6a:52:39:ee:f9:46:29:86:34:5d:46:
5c:10:8d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:29:03 2026 by rpki-client