Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
File: hq8scWa7NKaW_eL7rO9AAbCo5-I.mft (raw, json)
Hash identifier: zc6tlGtx/reRGoWJ9aXSiVhhT2OWLpgr/4+MvtD+hBo=
Subject key identifier: 7B:5D:74:1A:B4:41:A4:CA:6B:08:4D:51:B2:AE:44:24:9E:8A:F0:07
Authority key identifier: 86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
Certificate issuer: /CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Certificate serial: 01A00326E5698F9B9CDFBCF34064BC0DEAEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
Manifest number: 1588
Signing time: Sat 15 Aug 2026 02:01:15 +0000
Manifest this update: Sat 15 Aug 2026 02:01:15 +0000
Manifest next update: Sun 16 Aug 2026 02:01:15 +0000
Files and hashes: 1: 3MbENdJT26XzCCTRISyB_iPykiw.roa (hash: kSjcy26IOOyW+caS15k1M32+3TxvbP1k3eV5GVXbdqs=)
2: 93Zo7Pu2h3l6Yl9T9RSBRKnjw20.roa (hash: WXzD03j8xoR9D+l/6kOBvEB/Gim510LMJ3OHuaq0Urg=)
3: hq8scWa7NKaW_eL7rO9AAbCo5-I.crl (hash: nxlSdEvdUSvlpqOvghZpdGqn0y4QNw+4n2GepU8RUE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:26:e5:69:8f:9b:9c:df:bc:f3:40:64:bc:0d:ea:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Validity
Not Before: Aug 15 02:01:15 2026 GMT
Not After : Aug 16 02:01:15 2026 GMT
Subject: CN=7b5d741ab441a4ca6b084d51b2ae44249e8af007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d2:3b:fe:6a:ee:e4:fe:86:e3:b3:a9:9b:9b:
f6:e1:0d:76:68:1a:1c:eb:a5:00:cb:cb:69:8c:19:
13:52:d7:78:c8:20:85:bc:96:1a:55:5e:5c:28:9b:
cf:03:5c:9a:75:b6:88:e4:eb:3c:06:38:b6:a3:90:
d2:bc:8b:5b:14:15:14:97:e2:2d:50:e0:96:27:44:
21:93:3f:4d:b0:c5:98:55:80:30:40:18:40:25:be:
b3:29:ef:fd:33:42:49:d9:94:46:0b:fd:39:18:86:
bd:8e:e4:72:b3:3b:5f:ab:bb:e0:4f:df:6c:56:b1:
50:66:71:3e:13:3c:ba:e0:bd:77:bb:23:1a:0f:dd:
3f:98:e6:0a:e3:cb:ae:b7:4e:52:76:28:06:43:ad:
c7:de:a2:6d:dd:ad:71:ed:a2:4e:18:f4:f1:3d:6b:
36:e5:d6:19:46:2c:d3:fd:37:e3:b9:6a:85:7c:f1:
56:2f:42:71:90:a1:2c:e9:d9:e8:98:c3:78:a2:ab:
64:d3:45:7e:5d:26:63:53:9b:a7:2d:cc:4b:96:5b:
56:c0:4b:dc:a7:b6:b4:8c:63:91:26:15:35:8d:9f:
68:92:f9:8e:53:a3:7c:0c:e2:1b:31:81:fa:22:87:
41:44:41:33:61:25:be:f3:08:30:6d:1f:78:56:41:
35:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:5D:74:1A:B4:41:A4:CA:6B:08:4D:51:B2:AE:44:24:9E:8A:F0:07
X509v3 Authority Key Identifier:
keyid:86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:74:3a:18:31:88:66:8d:70:1b:0c:0e:f2:74:97:45:1a:c8:
e5:71:80:76:a5:bb:74:b6:6e:ef:4a:ea:d3:12:ee:ab:b0:0f:
db:16:67:ee:93:f5:21:a5:40:96:85:d3:5c:b8:2d:75:2a:09:
4d:11:f9:6b:dc:68:b2:c7:7f:02:a6:aa:11:94:6e:bb:d3:24:
7a:3d:d5:3b:1c:75:91:c0:30:0e:51:83:7c:89:0a:3f:e4:1b:
42:ca:6f:19:8c:bf:a6:21:ad:e4:a4:80:fc:54:5c:1b:79:92:
6f:dd:79:81:67:49:5e:df:61:24:da:14:3a:6d:76:7e:33:f4:
5d:74:68:69:63:4b:1d:c5:3a:25:d1:d2:f6:e3:62:e6:e6:0c:
f1:42:ba:12:56:9d:9d:a4:5f:e2:de:d2:9d:b0:bc:6d:66:38:
f9:7f:34:f2:a6:f2:1f:7d:49:fd:e0:14:49:dc:b2:3a:af:35:
ac:d9:17:2f:6c:01:54:f9:26:bf:b1:44:dc:5b:ee:a3:71:a9:
56:46:0f:08:e7:72:71:9d:38:00:59:51:2e:b6:8a:4b:dd:f0:
8b:28:62:e2:75:c3:cf:c8:4e:8a:fb:74:54:9d:e1:ec:76:4d:
58:cc:52:fa:cc:5c:0c:8f:6d:ea:e1:47:af:14:bd:19:dd:6a:
26:df:f1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:22:46 2026 by rpki-client