Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
File: hq8scWa7NKaW_eL7rO9AAbCo5-I.mft (raw, json)
Hash identifier: grQXsIAxSe+bcScEbRj8oKpKXzn2q+fLU3ujpSA3yps=
Subject key identifier: 45:82:70:78:8F:A0:0A:FD:83:8B:1C:C5:76:D8:7D:A8:1A:FA:5D:06
Authority key identifier: 86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
Certificate issuer: /CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Certificate serial: 019E2A020B93C862378C34C3D73037A07169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
Manifest number: 1493
Signing time: Fri 15 May 2026 05:00:37 +0000
Manifest this update: Fri 15 May 2026 05:00:37 +0000
Manifest next update: Sat 16 May 2026 05:00:37 +0000
Files and hashes: 1: 3MbENdJT26XzCCTRISyB_iPykiw.roa (hash: kSjcy26IOOyW+caS15k1M32+3TxvbP1k3eV5GVXbdqs=)
2: 93Zo7Pu2h3l6Yl9T9RSBRKnjw20.roa (hash: WXzD03j8xoR9D+l/6kOBvEB/Gim510LMJ3OHuaq0Urg=)
3: hq8scWa7NKaW_eL7rO9AAbCo5-I.crl (hash: xfaTtKkdHZpxuFl0AYirPxftYZVH646HJyX6DPIsxvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:02:0b:93:c8:62:37:8c:34:c3:d7:30:37:a0:71:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Validity
Not Before: May 15 05:00:37 2026 GMT
Not After : May 16 05:00:37 2026 GMT
Subject: CN=458270788fa00afd838b1cc576d87da81afa5d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ed:b3:73:a3:ab:69:d4:a3:0d:72:0b:f6:5f:
fe:7d:d0:50:fb:3d:14:37:ef:a6:ba:4a:d7:b2:77:
ad:2a:1a:fc:f7:36:33:39:04:6f:29:e0:82:a8:48:
74:db:b8:1d:f9:7e:03:b9:d6:45:6e:53:61:11:94:
e5:bc:05:a8:87:b9:2e:b8:d3:ca:34:cc:13:46:83:
fe:3c:ce:f7:eb:ac:4d:cd:2b:9c:3b:8b:78:90:fb:
4f:bb:94:a7:ee:af:0c:b7:ba:ae:55:e1:ba:ca:a8:
40:e2:55:cd:bc:21:9c:39:3c:19:c8:86:fb:1d:78:
c0:1f:ae:b6:36:06:43:7c:97:a5:ed:06:7b:4a:b3:
e0:0a:e3:a9:f5:ce:3c:e2:e6:cf:62:26:a1:2a:64:
c5:c0:98:33:df:1a:1f:c0:b2:61:04:06:26:50:5c:
dc:09:4b:f2:f8:16:d6:2b:af:45:7b:f4:22:fa:d3:
1b:95:3c:38:fa:7c:35:c3:38:e6:c3:d3:da:2f:cb:
ea:dc:96:f5:89:57:6a:9c:25:14:de:aa:cb:f2:5f:
6f:fa:af:61:be:81:ee:39:dd:c7:d8:22:64:e6:f7:
e7:26:fa:56:b6:04:f2:43:2a:19:e2:fb:c5:e8:3b:
be:ab:fd:a4:b4:13:60:09:42:78:ee:fb:a0:c0:3d:
db:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:82:70:78:8F:A0:0A:FD:83:8B:1C:C5:76:D8:7D:A8:1A:FA:5D:06
X509v3 Authority Key Identifier:
keyid:86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:eb:74:c2:b4:6d:40:bf:51:27:ad:b2:53:a4:59:34:8d:19:
fa:94:34:ea:d9:c8:82:77:df:1d:45:64:45:f2:aa:45:2c:42:
79:e8:85:07:da:67:ce:17:a7:6c:3a:63:3e:63:46:cf:44:cd:
f5:e0:90:c1:39:80:b1:fa:52:73:78:83:c2:ef:8d:f6:91:6f:
ad:a1:69:52:bd:ba:d1:20:15:ca:ba:00:55:34:3b:33:24:04:
cf:81:7b:f4:ff:82:0f:78:7d:aa:f7:ab:f8:55:00:52:c5:84:
77:cd:4e:72:10:77:01:14:d6:4e:4c:83:05:4a:d1:c2:3a:f2:
16:03:ee:f0:f0:30:24:1b:97:a6:73:12:ad:86:6a:b8:b6:56:
8e:61:87:c6:24:da:5a:a4:c9:5b:1a:6e:31:51:b8:0c:05:ed:
59:df:f0:59:55:c6:7b:1d:44:8b:8d:87:c0:d7:1b:84:ba:c2:
6d:01:e7:3c:57:84:89:46:08:ed:b7:a1:4f:a2:00:77:ec:81:
59:f5:84:78:c0:17:00:60:b1:9d:30:e9:69:3d:79:af:43:b0:
90:5e:bf:57:d3:67:dc:f9:67:99:17:a7:df:94:ff:ed:39:eb:
f8:63:7d:58:2f:6d:6e:16:f8:d0:d3:04:0f:46:e3:28:a1:21:
51:1d:cf:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 11:15:04 2026 by rpki-client