Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
File: hq8scWa7NKaW_eL7rO9AAbCo5-I.mft (raw, json)
Hash identifier: 7eGiBVT1D2+7NqeC25AgwbZmApIQc53PaLEbJfKM56E=
Subject key identifier: 22:41:12:8D:46:77:C1:76:70:A4:9C:8E:69:E2:5C:7E:81:AF:08:44
Authority key identifier: 86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
Certificate issuer: /CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Certificate serial: 019F13AF51BC28742803C71650A22480ACCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
Manifest number: 150C
Signing time: Mon 29 Jun 2026 14:01:24 +0000
Manifest this update: Mon 29 Jun 2026 14:01:24 +0000
Manifest next update: Tue 30 Jun 2026 14:01:24 +0000
Files and hashes: 1: 3MbENdJT26XzCCTRISyB_iPykiw.roa (hash: kSjcy26IOOyW+caS15k1M32+3TxvbP1k3eV5GVXbdqs=)
2: 93Zo7Pu2h3l6Yl9T9RSBRKnjw20.roa (hash: WXzD03j8xoR9D+l/6kOBvEB/Gim510LMJ3OHuaq0Urg=)
3: hq8scWa7NKaW_eL7rO9AAbCo5-I.crl (hash: 6e3urEOdxWUT0feSR4gZkOyuiSL7WG5yg6ahAGKUKA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 13:53:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:af:51:bc:28:74:28:03:c7:16:50:a2:24:80:ac:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Validity
Not Before: Jun 29 14:01:24 2026 GMT
Not After : Jun 30 14:01:24 2026 GMT
Subject: CN=2241128d4677c17670a49c8e69e25c7e81af0844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5e:2c:fe:d0:85:23:2e:27:7a:85:8e:dc:06:
e6:46:43:0b:64:e2:0c:eb:e6:b4:0c:da:0b:4a:86:
8c:1a:b6:57:de:b6:7e:54:54:a5:c2:83:88:79:ff:
e0:21:94:3f:ef:ad:aa:2b:e2:99:63:21:ee:62:43:
53:11:8f:ce:91:fd:c1:dd:11:d6:6b:8b:1d:3b:9f:
2d:0f:75:e6:87:d0:16:d0:9e:b3:ee:fd:eb:81:08:
46:02:ba:d7:a1:34:6f:56:af:f5:a0:84:48:24:60:
7c:e3:39:c5:98:12:58:ac:cd:d4:68:ae:7b:ee:98:
dc:af:d5:ea:40:8b:ed:d1:b3:fe:e2:9b:54:17:92:
be:ee:9e:f2:18:3b:db:d6:17:e7:b4:dd:7c:fd:6c:
2e:ff:0b:a9:0d:a6:33:a9:85:2d:4b:e2:72:06:fd:
4d:6d:0d:8e:37:89:e7:aa:23:74:c8:00:ce:49:39:
b4:e7:20:52:d4:bf:24:7f:71:84:85:1e:d9:d7:2d:
a8:31:4c:f7:b4:45:55:59:de:48:3e:4b:8e:cf:d2:
8f:9d:8e:ca:71:0c:81:ee:64:4d:7c:69:33:53:e2:
af:75:61:df:dd:2d:0e:0c:da:b5:ba:b2:d7:8d:c7:
e2:9b:b8:68:11:46:95:e1:be:da:48:71:95:7b:f5:
ff:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:41:12:8D:46:77:C1:76:70:A4:9C:8E:69:E2:5C:7E:81:AF:08:44
X509v3 Authority Key Identifier:
keyid:86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:fd:59:51:b3:d3:e1:1e:31:17:54:59:7e:42:09:49:f5:28:
1c:9f:a6:b4:9a:91:59:cb:18:6b:de:42:f3:c7:f8:aa:08:05:
3b:cc:aa:30:1f:f2:58:68:97:55:fa:46:ea:8f:72:f0:5c:44:
f6:ca:f9:02:fe:eb:7b:43:80:d1:52:fc:15:37:89:c0:25:ee:
75:2c:11:79:31:5d:b1:27:3e:c6:89:01:f2:fe:00:8b:0d:88:
f7:c0:30:ad:d3:b9:c4:b3:8e:87:b0:04:84:47:b6:02:99:58:
c6:31:7d:af:4d:da:56:f8:65:a9:3d:08:63:5c:0d:82:9a:66:
e3:4c:7d:bb:8d:5e:0f:38:36:92:f6:86:e6:11:66:c2:a0:d2:
75:95:6e:d4:b5:c2:19:66:f6:20:8a:66:75:cd:79:1d:89:b8:
24:32:a9:e3:c0:ea:b2:bc:c4:25:aa:b1:26:ef:b0:c3:d2:44:
c5:6c:19:7b:f3:e8:66:01:11:82:bd:fd:eb:8a:93:ca:f9:82:
e2:81:45:1a:9e:3e:b6:90:c1:e3:2f:01:7f:fd:32:30:33:97:
49:2e:bf:ab:c1:8f:7d:c4:5d:b1:19:fb:10:e4:af:65:01:6b:
0e:d0:99:66:5a:12:44:20:8c:46:3f:1c:6b:81:9c:24:26:47:
ea:31:6e:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Tr1G8KHQoA8cWUKIkgKzPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2YWYyYzcxNjZiYjM0YTY5NmZkZTJmYmFjZWY0MDAxYjBh
OGU3ZTIwHhcNMjYwNjI5MTQwMTI0WhcNMjYwNjMwMTQwMTI0WjAzMTEwLwYDVQQD
EygyMjQxMTI4ZDQ2NzdjMTc2NzBhNDljOGU2OWUyNWM3ZTgxYWYwODQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwF4s/tCFIy4neoWO3AbmRkMLZOIM
6+a0DNoLSoaMGrZX3rZ+VFSlwoOIef/gIZQ/762qK+KZYyHuYkNTEY/Okf3B3RHW
a4sdO58tD3Xmh9AW0J6z7v3rgQhGArrXoTRvVq/1oIRIJGB84znFmBJYrM3UaK57
7pjcr9XqQIvt0bP+4ptUF5K+7p7yGDvb1hfntN18/Wwu/wupDaYzqYUtS+JyBv1N
bQ2ON4nnqiN0yADOSTm05yBS1L8kf3GEhR7Z1y2oMUz3tEVVWd5IPkuOz9KPnY7K
cQyB7mRNfGkzU+KvdWHf3S0ODNq1urLXjcfim7hoEUaV4b7aSHGVe/X/ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJBEo1Gd8F2cKScjmniXH6BrwhEMB8GA1UdIwQY
MBaAFIavLHFmuzSmlv3i+6zvQAGwqOfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHE4c2NXYTdOS2FXX2VMN3JPOUFBYkNvNS1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mOGY2NmQtOGE0Ny00NDMxLWFmNTEt
ZTRmNTg3MDQ4MDRlLzEvaHE4c2NXYTdOS2FXX2VMN3JPOUFBYkNvNS1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9mOGY2NmQtOGE0Ny00NDMxLWFmNTEtZTRmNTg3MDQ4MDRl
LzEvaHE4c2NXYTdOS2FXX2VMN3JPOUFBYkNvNS1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUv1ZUbPT
4R4xF1RZfkIJSfUoHJ+mtJqRWcsYa95C88f4qggFO8yqMB/yWGiXVfpG6o9y8FxE
9sr5Av7re0OA0VL8FTeJwCXudSwReTFdsSc+xokB8v4Aiw2I98AwrdO5xLOOh7AE
hEe2AplYxjF9r03aVvhlqT0IY1wNgppm40x9u41eDzg2kvaG5hFmwqDSdZVu1LXC
GWb2IIpmdc15HYm4JDKp48DqsrzEJaqxJu+ww9JExWwZe/PoZgERgr3964qTyvmC
4oFFGp4+tpDB4y8Bf/0yMDOXSS6/q8GPfcRdsRn7EOSvZQFrDtCZZloSRCCMRj8c
a4GcJCZH6jFu0g==
-----END CERTIFICATE-----
Generated at Mon Jun 29 15:41:52 2026 by rpki-client