Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/hh8QJbTdZhRYH1DB-FoGc0ulqfk.mft
File: hh8QJbTdZhRYH1DB-FoGc0ulqfk.mft (raw, json)
Hash identifier: 5vz04iOojTtYD1Y2qMI+i6ikq+elcBObXQngltAxCGI=
Subject key identifier: AA:D2:B1:CE:A1:DB:C2:0E:A7:14:47:00:6E:88:0C:34:16:95:B3:39
Authority key identifier: 86:1F:10:25:B4:DD:66:14:58:1F:50:C1:F8:5A:06:73:4B:A5:A9:F9
Certificate issuer: /CN=861f1025b4dd6614581f50c1f85a06734ba5a9f9
Certificate serial: 01A17FCF8EEE2A1749921F188B1F1BF8F842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hh8QJbTdZhRYH1DB-FoGc0ulqfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/hh8QJbTdZhRYH1DB-FoGc0ulqfk.mft
Manifest number: 0140
Signing time: Wed 28 Oct 2026 00:01:11 +0000
Manifest this update: Wed 28 Oct 2026 00:01:11 +0000
Manifest next update: Thu 29 Oct 2026 00:01:11 +0000
Files and hashes: 1: fTTJaw_54nEtImNHGANh9X5pCjU.roa (hash: IDhG7BAffdnYnvyt684I59EEhWvx4nR1U8ujkTq4BHo=)
2: hh8QJbTdZhRYH1DB-FoGc0ulqfk.crl (hash: Bm8N5HweEa38yUdx1paXZbujzra1AHFpgbZHMVLk/sY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/hh8QJbTdZhRYH1DB-FoGc0ulqfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/hh8QJbTdZhRYH1DB-FoGc0ulqfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hh8QJbTdZhRYH1DB-FoGc0ulqfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:cf:8e:ee:2a:17:49:92:1f:18:8b:1f:1b:f8:f8:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861f1025b4dd6614581f50c1f85a06734ba5a9f9
Validity
Not Before: Oct 28 00:01:11 2026 GMT
Not After : Oct 29 00:01:11 2026 GMT
Subject: CN=aad2b1cea1dbc20ea71447006e880c341695b339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:69:bb:71:31:03:30:e2:7f:fd:06:c3:0d:51:
3a:be:7d:51:4a:a0:18:cd:1d:87:64:eb:1c:ed:49:
33:b2:ba:b4:b6:13:4f:99:8d:bd:09:a2:3c:9d:ab:
bc:54:26:f6:4c:2a:9d:f5:47:f7:cf:7c:b4:57:f1:
5a:f5:4b:1e:25:37:e1:8c:65:00:fe:70:f0:bf:d6:
fd:27:e2:3f:24:90:d0:db:6e:7a:7a:d8:1e:d9:e2:
c7:f9:9c:4b:84:de:04:5b:55:a8:32:98:0d:38:b4:
de:c3:df:5f:f2:b3:45:86:90:48:0d:50:b8:b1:c0:
3d:60:43:4a:96:14:2c:8d:20:34:8f:ef:85:8d:1d:
7a:03:2d:f8:7b:fc:65:8f:dd:d3:3a:59:4f:30:53:
34:76:cd:e9:61:0b:4a:32:79:98:04:46:53:67:8a:
1a:42:b9:f2:e6:59:67:01:4a:e8:02:75:c9:f5:19:
c7:71:51:40:07:a0:80:e5:64:60:9d:88:41:a5:ef:
f4:02:e8:c7:e4:77:72:9e:f0:43:3c:e9:d3:9f:1a:
22:a8:91:6c:af:7e:af:ec:5c:f8:fc:3f:85:b3:b5:
43:1e:58:60:27:08:2f:f6:ba:e5:80:40:79:60:fa:
69:b8:c0:81:8f:56:b6:31:dc:4f:3c:ed:63:5a:db:
91:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D2:B1:CE:A1:DB:C2:0E:A7:14:47:00:6E:88:0C:34:16:95:B3:39
X509v3 Authority Key Identifier:
keyid:86:1F:10:25:B4:DD:66:14:58:1F:50:C1:F8:5A:06:73:4B:A5:A9:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hh8QJbTdZhRYH1DB-FoGc0ulqfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/hh8QJbTdZhRYH1DB-FoGc0ulqfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/hh8QJbTdZhRYH1DB-FoGc0ulqfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:9e:c3:79:a9:38:63:a9:cd:1d:42:71:e9:44:c8:39:24:78:
6c:ce:8b:50:18:ca:7e:42:c0:9a:e9:d0:ee:6f:4d:2c:2e:ea:
bc:64:c3:9b:0a:b0:ae:07:be:01:aa:ad:f3:e7:11:49:11:43:
61:34:67:50:a2:87:ff:2e:83:c0:4d:79:11:12:80:d4:a2:2d:
88:4e:19:cb:c9:ea:4f:ba:0b:c3:d5:bc:1d:d4:10:45:fa:40:
83:6d:c2:04:d6:a8:cc:04:39:0c:16:e2:9b:ff:66:7c:7d:4e:
4c:9c:11:2e:71:44:c1:23:57:e0:c5:bb:9c:37:aa:a4:aa:b3:
9f:b7:e0:a6:97:8d:4f:4d:9c:dc:78:09:1b:88:8f:6b:b3:a7:
5c:f5:82:ec:cd:36:2e:ec:4a:d1:9c:67:80:69:85:08:a9:36:
97:89:e6:25:e6:e7:5b:74:ab:99:4e:1c:75:93:4d:9f:04:05:
63:ab:61:b0:a8:a3:18:51:0a:50:b0:2d:06:d1:6c:3f:8e:12:
ab:c1:90:3a:db:04:82:9d:86:53:38:1c:e6:dc:46:30:41:7c:
18:61:59:47:10:da:fa:65:b8:cd:1f:af:39:fd:7d:39:c2:ad:
4a:18:17:2b:a4:e6:ec:b6:45:c4:86:2d:d0:f7:d8:17:9d:82:
00:30:54:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:12:30 2026 by rpki-client