Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
File: hq8scWa7NKaW_eL7rO9AAbCo5-I.mft (raw, json)
Hash identifier: aALU4xDYsGQn2uDN6ASiGF0vwbD1twp86HGgGBJVhTs=
Subject key identifier: EA:46:AA:B7:E0:86:6D:3E:63:B3:FB:AB:CD:7A:15:14:9E:08:39:E9
Authority key identifier: 86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
Certificate issuer: /CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Certificate serial: 01A001388059F4E42DDE94CD368D4BD0E8DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
Manifest number: 1587
Signing time: Fri 14 Aug 2026 17:01:15 +0000
Manifest this update: Fri 14 Aug 2026 17:01:15 +0000
Manifest next update: Sat 15 Aug 2026 17:01:15 +0000
Files and hashes: 1: 3MbENdJT26XzCCTRISyB_iPykiw.roa (hash: kSjcy26IOOyW+caS15k1M32+3TxvbP1k3eV5GVXbdqs=)
2: 93Zo7Pu2h3l6Yl9T9RSBRKnjw20.roa (hash: WXzD03j8xoR9D+l/6kOBvEB/Gim510LMJ3OHuaq0Urg=)
3: hq8scWa7NKaW_eL7rO9AAbCo5-I.crl (hash: UhMgNjNOhCFE47XzwAtcsZiEbPzA4zRkFeJsSJCiaUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 17:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:80:59:f4:e4:2d:de:94:cd:36:8d:4b:d0:e8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Validity
Not Before: Aug 14 17:01:15 2026 GMT
Not After : Aug 15 17:01:15 2026 GMT
Subject: CN=ea46aab7e0866d3e63b3fbabcd7a15149e0839e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:01:a8:b9:58:f6:7d:50:62:d8:cd:14:5a:cc:
17:35:76:d5:a0:8b:99:44:00:0d:67:30:bb:34:72:
8c:fc:66:b3:9c:c1:2a:45:23:dc:bb:11:78:20:04:
46:e1:28:4d:e3:d5:8e:db:c0:38:2a:07:65:e3:aa:
4c:70:2a:95:75:05:37:80:40:3b:43:be:c4:60:ba:
ed:c7:8a:aa:48:ce:8c:95:18:45:23:37:92:59:8b:
94:47:1f:6a:1a:d6:6c:46:7c:17:d1:ff:07:7e:54:
b4:ce:76:bb:f7:62:6f:80:09:cd:06:58:22:25:19:
07:10:d2:df:3d:e8:00:95:7d:a4:36:88:29:bb:21:
39:9c:15:d1:7a:92:9d:a6:19:7e:8d:92:b4:85:fa:
4a:a3:8f:a0:52:fd:ad:e1:b5:e1:76:12:9c:a4:a7:
4c:40:9b:6b:a0:22:fd:20:e4:19:88:32:b1:01:7e:
59:b3:5f:6f:23:a7:97:34:24:ce:4d:f6:bd:17:a6:
0f:1c:04:35:5c:4a:d4:75:53:70:b9:b0:02:93:bd:
71:db:15:32:81:d8:e8:17:d3:d4:2c:18:2d:1f:37:
81:72:10:7a:40:94:ad:9a:2e:cf:02:95:68:31:99:
20:6c:99:7d:3e:6d:fd:5a:86:bf:74:ed:46:61:7d:
13:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:46:AA:B7:E0:86:6D:3E:63:B3:FB:AB:CD:7A:15:14:9E:08:39:E9
X509v3 Authority Key Identifier:
keyid:86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:58:2f:ec:f2:60:03:99:17:de:d6:34:74:90:40:a5:d3:ea:
40:7e:ec:7d:34:b3:82:b1:95:ce:9a:d8:6d:13:83:8c:f3:ca:
23:58:23:46:09:6c:b7:64:85:2e:27:96:21:ec:8b:bb:f9:5b:
fb:38:2a:f3:e6:c0:77:97:34:a9:88:0d:d3:73:f6:84:ce:e0:
b6:46:41:48:54:90:5f:7d:88:0e:64:1f:fc:36:06:41:48:35:
47:1a:60:f6:6c:d9:04:a3:c4:8b:13:25:15:b4:97:c9:cb:9f:
5b:de:5c:25:27:b2:93:85:1f:c6:dd:23:98:0b:ca:57:73:82:
7d:45:d3:b3:d7:52:6a:0c:38:d1:47:90:a5:50:b4:0c:5f:85:
e9:89:51:96:30:dc:75:fa:f2:79:9d:a5:dc:a0:85:61:b6:c3:
8c:a6:66:fd:88:94:36:ad:04:ed:79:39:f0:ec:70:f5:82:41:
5e:86:c6:8f:25:29:40:f0:9d:3f:cb:89:29:65:20:8c:37:c4:
1d:02:af:61:a0:85:4e:4f:65:c0:53:59:0d:7e:7d:a9:d1:44:
c5:ae:cf:97:ef:e9:84:ba:cd:d3:d4:03:9d:8d:53:73:ec:be:
85:72:e9:4f:94:3e:dc:39:c7:ff:0a:fb:2b:e9:56:7b:2f:e5:
f1:e0:9d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:28:18 2026 by rpki-client