Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
File: hq8scWa7NKaW_eL7rO9AAbCo5-I.mft (raw, json)
Hash identifier: OuRQAUoJ/Fq4KIQE6LYczzuNB9DPlIsL8shqIlQfnuA=
Subject key identifier: 0D:B2:6F:76:E8:ED:3C:98:D7:9C:3C:34:4A:E2:9B:71:A3:CB:70:52
Authority key identifier: 86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
Certificate issuer: /CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Certificate serial: 01A1156100A2DE6D2D9638C03626729FCAC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
Manifest number: 1616
Signing time: Wed 07 Oct 2026 08:00:41 +0000
Manifest this update: Wed 07 Oct 2026 08:00:41 +0000
Manifest next update: Thu 08 Oct 2026 08:00:41 +0000
Files and hashes: 1: 3MbENdJT26XzCCTRISyB_iPykiw.roa (hash: kSjcy26IOOyW+caS15k1M32+3TxvbP1k3eV5GVXbdqs=)
2: 93Zo7Pu2h3l6Yl9T9RSBRKnjw20.roa (hash: WXzD03j8xoR9D+l/6kOBvEB/Gim510LMJ3OHuaq0Urg=)
3: hq8scWa7NKaW_eL7rO9AAbCo5-I.crl (hash: PN5L8XTgueP8bgg/Q6ImabqD6371Aiizw2bE3f5mXLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:61:00:a2:de:6d:2d:96:38:c0:36:26:72:9f:ca:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Validity
Not Before: Oct 7 08:00:41 2026 GMT
Not After : Oct 8 08:00:41 2026 GMT
Subject: CN=0db26f76e8ed3c98d79c3c344ae29b71a3cb7052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:30:cf:68:fa:e7:0a:30:11:00:16:4b:54:6f:
84:e7:95:c9:fd:45:a9:52:88:a6:82:7e:64:55:d6:
04:78:e6:9e:28:00:95:2f:e5:56:9e:45:27:7b:df:
78:44:b0:14:94:12:84:1f:23:16:39:af:68:8a:d2:
f2:bc:0b:53:d6:7d:72:97:32:b6:a0:62:1b:ee:5f:
cd:4d:11:83:bc:71:82:29:42:b2:3c:83:bb:2f:76:
ce:2e:49:13:6b:29:d2:f5:84:ad:97:a3:85:91:15:
e7:46:97:b3:0c:13:99:67:2f:4c:f5:c5:93:5e:6d:
45:66:4c:56:d6:13:28:20:4f:b4:20:f7:aa:62:bc:
7e:f3:3c:bc:96:ec:f5:46:37:c2:01:ad:b5:c6:9a:
bd:e9:cd:18:81:3f:d2:5e:22:aa:3a:7a:fb:6f:fc:
8d:b6:00:84:2c:13:53:f1:a6:cb:42:40:f0:5d:26:
c7:c4:6a:5f:f3:31:fc:38:1d:50:ad:14:ec:ce:7e:
06:70:c7:79:22:1b:24:c8:cb:f7:b0:98:63:7c:53:
ce:97:ac:14:16:1b:5f:02:f1:6b:c2:db:44:8d:dc:
f2:fb:da:ac:1b:b3:0a:a0:59:1c:e2:c1:46:81:1c:
44:54:cf:5e:af:8f:78:4e:ff:6a:7a:ea:03:24:2c:
e8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B2:6F:76:E8:ED:3C:98:D7:9C:3C:34:4A:E2:9B:71:A3:CB:70:52
X509v3 Authority Key Identifier:
keyid:86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:81:2a:15:e7:41:aa:e3:9e:eb:14:61:19:51:91:09:54:a4:
8f:7b:58:01:fb:93:05:21:47:fc:c9:27:0c:a0:61:10:58:4a:
40:76:21:74:b1:63:4e:c3:7e:b9:8a:e9:c9:2e:70:ff:9c:67:
97:ae:3c:2c:04:99:95:63:82:a5:fb:43:ab:ba:6d:bd:07:cd:
5b:cf:44:91:53:a7:45:2d:3a:33:47:7d:88:1c:7d:b9:4c:4b:
0e:07:00:ac:68:6f:8e:44:ea:69:f5:0a:6a:50:3f:4a:b0:5d:
91:1c:a8:ff:ee:39:bf:1d:3a:68:30:3a:48:e2:3f:61:db:fa:
b8:fc:20:09:db:ed:8b:0d:3c:ed:32:bb:2e:46:5f:c6:8a:73:
4c:0a:e1:2b:42:18:52:e0:6f:e2:c0:95:91:de:7f:86:75:f8:
b7:13:e9:aa:38:d8:9b:89:62:ae:e5:cf:b9:02:e4:12:08:e4:
b0:7a:e1:63:5e:b3:c3:d8:e5:6d:fa:f9:ff:fd:49:8d:7c:06:
5d:49:ff:93:49:4d:8f:f6:21:28:ea:b3:a4:65:9b:d6:82:f7:
ef:3f:7c:82:02:ed:14:fe:04:af:66:72:41:17:36:84:24:04:
51:64:67:ea:19:c8:eb:58:4a:79:64:97:00:57:3e:d0:5a:2c:
62:90:ee:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 12:04:26 2026 by rpki-client