Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/hh8QJbTdZhRYH1DB-FoGc0ulqfk.mft
File: hh8QJbTdZhRYH1DB-FoGc0ulqfk.mft (raw, json)
Hash identifier: rl5nYaXFQXe/26NQ5akQFV3uLV0qAYd4r92BVn581ak=
Subject key identifier: 33:45:0D:7E:EE:F8:1A:B4:C9:B4:47:E5:AA:40:A2:E8:AD:C9:2B:81
Authority key identifier: 86:1F:10:25:B4:DD:66:14:58:1F:50:C1:F8:5A:06:73:4B:A5:A9:F9
Certificate issuer: /CN=861f1025b4dd6614581f50c1f85a06734ba5a9f9
Certificate serial: 01A06F831EEDA218B2637E6788BFE30C4D04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hh8QJbTdZhRYH1DB-FoGc0ulqfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/hh8QJbTdZhRYH1DB-FoGc0ulqfk.mft
Manifest number: B3
Signing time: Sat 05 Sep 2026 03:00:58 +0000
Manifest this update: Sat 05 Sep 2026 03:00:58 +0000
Manifest next update: Sun 06 Sep 2026 03:00:58 +0000
Files and hashes: 1: fTTJaw_54nEtImNHGANh9X5pCjU.roa (hash: IDhG7BAffdnYnvyt684I59EEhWvx4nR1U8ujkTq4BHo=)
2: hh8QJbTdZhRYH1DB-FoGc0ulqfk.crl (hash: UJ7fCak+2ZbO1fKeJ/HRM0z3ULL9s3k7fdtPQLgSlLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/hh8QJbTdZhRYH1DB-FoGc0ulqfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/hh8QJbTdZhRYH1DB-FoGc0ulqfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hh8QJbTdZhRYH1DB-FoGc0ulqfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:83:1e:ed:a2:18:b2:63:7e:67:88:bf:e3:0c:4d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861f1025b4dd6614581f50c1f85a06734ba5a9f9
Validity
Not Before: Sep 5 03:00:58 2026 GMT
Not After : Sep 6 03:00:58 2026 GMT
Subject: CN=33450d7eeef81ab4c9b447e5aa40a2e8adc92b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d0:3e:92:e7:eb:d3:ed:70:04:e4:bb:bb:45:
93:f7:96:f5:f6:cc:8c:c5:51:84:10:30:5f:1b:00:
71:ad:75:4a:d2:68:d1:19:79:3f:a3:ef:bc:b9:62:
d2:11:7b:64:2d:39:91:2e:eb:62:f7:cf:28:02:19:
a6:e8:eb:cd:10:37:63:14:d6:a6:41:03:af:de:aa:
d8:b4:2f:79:71:40:6d:9a:d5:be:2e:7c:af:dd:7e:
8e:cb:ed:ed:d5:08:7a:47:7c:bf:06:cc:34:84:e3:
fa:f8:09:1f:2e:e7:4f:a2:ba:a2:71:bd:ab:11:84:
e7:f9:a3:0d:17:20:88:c9:f0:77:bd:cf:ca:ee:c8:
d9:dd:8d:41:27:e4:f0:96:97:c8:24:81:87:bd:8f:
f6:13:dd:ed:32:95:d6:03:81:b2:3b:80:bf:91:5d:
ee:48:28:c7:84:cd:41:76:69:d4:3c:3a:1e:26:8b:
06:e5:8e:9a:f4:49:f5:d4:b4:52:f3:13:04:95:57:
d7:99:34:25:92:37:18:80:bc:e0:95:fd:54:40:d1:
26:40:59:08:81:c7:81:4d:0d:37:9d:6d:74:19:ef:
3e:b1:e0:df:7f:f3:84:fb:e8:e2:d3:a6:55:d6:e2:
f2:c5:ba:44:de:96:07:b4:53:7f:81:b7:09:a0:c2:
d9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:45:0D:7E:EE:F8:1A:B4:C9:B4:47:E5:AA:40:A2:E8:AD:C9:2B:81
X509v3 Authority Key Identifier:
keyid:86:1F:10:25:B4:DD:66:14:58:1F:50:C1:F8:5A:06:73:4B:A5:A9:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hh8QJbTdZhRYH1DB-FoGc0ulqfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/hh8QJbTdZhRYH1DB-FoGc0ulqfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/hh8QJbTdZhRYH1DB-FoGc0ulqfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ca:00:01:54:e3:42:80:92:7d:cc:7c:f6:be:d6:5b:86:f9:
86:fb:56:b4:1a:8a:2d:e5:36:41:8f:81:69:af:bb:96:30:8c:
76:ba:6b:56:c7:d8:c7:8b:a1:ff:fb:7d:40:c1:b2:c9:34:ec:
92:c9:db:12:6d:c9:db:3d:47:90:11:cc:02:21:8f:d0:ea:31:
92:7b:ea:11:4b:64:3a:cd:35:c4:8f:59:a6:7a:2b:34:e2:fe:
70:01:74:c8:ca:a4:71:42:90:28:42:0d:83:a3:e9:39:01:5b:
a4:15:64:73:b6:e1:bc:7f:d6:38:94:c7:fc:ae:3d:c2:55:39:
91:9a:0a:b3:f4:81:62:2d:b5:81:87:c3:40:cd:17:34:4d:a7:
1d:fe:6a:d1:3c:26:96:6b:98:1f:fa:31:75:0f:73:f1:75:51:
c9:04:ab:06:ea:c8:f3:47:43:dc:95:e1:da:88:4b:ff:25:1a:
09:32:51:73:b7:cc:74:28:92:1d:36:cb:fa:3f:2c:2d:86:0f:
50:6f:20:1b:f7:24:3e:15:07:8e:fc:14:35:87:ae:95:1f:10:
ae:5c:cf:47:1e:95:a9:ca:74:7d:3d:b2:93:5f:6f:ba:ca:69:
fa:76:f2:fd:f4:32:33:3b:16:2d:f2:1a:34:91:08:c7:ab:7c:
3c:4b:82:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:44:23 2026 by rpki-client