Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
File: hq8scWa7NKaW_eL7rO9AAbCo5-I.mft (raw, json)
Hash identifier: LxZi1sorheHdjeQDZW2SNZdHkjMCAmKEJ4k7ure0pN4=
Subject key identifier: 91:22:25:6E:C2:E2:DF:AE:80:1D:99:77:4F:6F:E3:F8:64:66:E8:6E
Authority key identifier: 86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
Certificate issuer: /CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Certificate serial: 019D389BBB153A332E1C3359C43F7B7DF0CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
Manifest number: 1416
Signing time: Sun 29 Mar 2026 08:00:23 +0000
Manifest this update: Sun 29 Mar 2026 08:00:23 +0000
Manifest next update: Mon 30 Mar 2026 08:00:23 +0000
Files and hashes: 1: 3MbENdJT26XzCCTRISyB_iPykiw.roa (hash: kSjcy26IOOyW+caS15k1M32+3TxvbP1k3eV5GVXbdqs=)
2: 93Zo7Pu2h3l6Yl9T9RSBRKnjw20.roa (hash: WXzD03j8xoR9D+l/6kOBvEB/Gim510LMJ3OHuaq0Urg=)
3: hq8scWa7NKaW_eL7rO9AAbCo5-I.crl (hash: bJ4YRU1wnRMnZF9YS06cn0sK+iLkldICzAC4nCs1ocI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:bb:15:3a:33:2e:1c:33:59:c4:3f:7b:7d:f0:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Validity
Not Before: Mar 29 08:00:23 2026 GMT
Not After : Mar 30 08:00:23 2026 GMT
Subject: CN=9122256ec2e2dfae801d99774f6fe3f86466e86e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:81:bc:db:cb:c8:51:1e:9e:e5:02:49:3c:cd:
7c:af:3e:15:87:42:d3:da:10:dc:d3:1e:6d:c5:5a:
ae:84:96:21:52:37:4b:b0:80:bb:06:fa:40:30:3b:
c3:a4:7d:95:01:7e:4d:88:9b:d8:29:b4:c3:d2:86:
fb:2c:36:8a:ab:dc:73:0c:3b:58:a1:d3:54:f4:08:
52:f8:3a:36:25:c9:a9:2c:f8:70:49:93:90:4d:46:
50:bd:4d:b0:82:9e:d6:c9:50:3c:3f:94:d4:9b:32:
d6:dd:97:23:7e:a6:07:1a:89:92:e7:87:e3:99:04:
3f:21:42:8a:cd:3e:51:ac:4b:29:88:21:18:f4:52:
55:93:08:2b:d4:a7:16:be:f1:ea:df:d6:e0:cc:d3:
ee:03:c4:59:57:6e:7c:e7:6d:c2:43:77:91:23:b3:
66:df:9f:00:56:4a:28:07:b3:a7:3c:49:b2:a2:a9:
6c:16:6e:b9:fc:c7:31:f6:3f:d1:42:af:fe:0e:4e:
70:7d:07:4c:df:35:2e:85:3c:9a:90:40:2b:b4:32:
7e:90:e7:69:d1:28:c9:43:1f:16:3b:0f:8e:57:f8:
42:93:50:d9:3b:46:8a:a5:11:d3:8b:47:2f:ce:36:
6b:b6:8f:ec:02:dc:a5:8f:69:08:b9:1f:22:7e:94:
80:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:22:25:6E:C2:E2:DF:AE:80:1D:99:77:4F:6F:E3:F8:64:66:E8:6E
X509v3 Authority Key Identifier:
keyid:86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:48:1e:b0:93:a1:b6:d5:c7:2b:fc:3a:73:b9:a5:c0:e0:d2:
62:e8:e8:9e:4a:32:3d:e5:03:28:f6:de:31:4c:ff:20:be:e9:
43:11:67:ee:62:98:d5:a7:e8:f5:83:7e:c5:e3:3a:98:4c:33:
75:5e:70:96:3f:04:c4:9c:0c:b4:63:60:9d:54:03:57:f6:b1:
f1:d7:a1:dc:38:0f:93:4c:4d:2d:f7:5a:28:06:70:aa:7b:b1:
c3:2c:d0:96:03:4a:4d:90:4d:bb:fc:74:f6:be:f6:c4:94:fe:
5c:6a:07:a1:cd:3d:a0:51:ce:13:31:77:49:9e:d1:05:60:24:
3e:a1:09:aa:c6:10:c7:74:d5:f3:eb:ca:48:38:da:7d:f8:65:
8b:ab:c5:43:0b:4b:52:f7:f8:7b:3b:69:2b:62:8c:c9:fc:c5:
1e:1c:46:10:a8:c4:a9:02:b1:c8:5e:b6:68:63:2a:f3:06:af:
b6:d9:5f:3f:4a:69:5c:ea:a7:61:31:f4:e3:75:80:8a:73:98:
b1:ae:7b:51:ca:3c:f4:56:51:51:f7:8d:da:c1:30:17:9b:31:
8a:f6:8f:e1:88:51:98:e0:9e:fc:be:4f:60:d0:df:7a:d9:4d:
34:1e:c1:fb:d8:20:f7:ec:f6:8d:98:11:41:09:0d:ee:a2:93:
bf:98:8a:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m7sVOjMuHDNZxD97ffDKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2YWYyYzcxNjZiYjM0YTY5NmZkZTJmYmFjZWY0MDAxYjBh
OGU3ZTIwHhcNMjYwMzI5MDgwMDIzWhcNMjYwMzMwMDgwMDIzWjAzMTEwLwYDVQQD
Eyg5MTIyMjU2ZWMyZTJkZmFlODAxZDk5Nzc0ZjZmZTNmODY0NjZlODZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoG828vIUR6e5QJJPM18rz4Vh0LT
2hDc0x5txVquhJYhUjdLsIC7BvpAMDvDpH2VAX5NiJvYKbTD0ob7LDaKq9xzDDtY
odNU9AhS+Do2JcmpLPhwSZOQTUZQvU2wgp7WyVA8P5TUmzLW3ZcjfqYHGomS54fj
mQQ/IUKKzT5RrEspiCEY9FJVkwgr1KcWvvHq39bgzNPuA8RZV258523CQ3eRI7Nm
358AVkooB7OnPEmyoqlsFm65/Mcx9j/RQq/+Dk5wfQdM3zUuhTyakEArtDJ+kOdp
0SjJQx8WOw+OV/hCk1DZO0aKpRHTi0cvzjZrto/sAtylj2kIuR8ifpSA6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJEiJW7C4t+ugB2Zd09v4/hkZuhuMB8GA1UdIwQY
MBaAFIavLHFmuzSmlv3i+6zvQAGwqOfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHE4c2NXYTdOS2FXX2VMN3JPOUFBYkNvNS1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mOGY2NmQtOGE0Ny00NDMxLWFmNTEt
ZTRmNTg3MDQ4MDRlLzEvaHE4c2NXYTdOS2FXX2VMN3JPOUFBYkNvNS1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9mOGY2NmQtOGE0Ny00NDMxLWFmNTEtZTRmNTg3MDQ4MDRl
LzEvaHE4c2NXYTdOS2FXX2VMN3JPOUFBYkNvNS1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVEgesJOh
ttXHK/w6c7mlwODSYujonkoyPeUDKPbeMUz/IL7pQxFn7mKY1afo9YN+xeM6mEwz
dV5wlj8ExJwMtGNgnVQDV/ax8deh3DgPk0xNLfdaKAZwqnuxwyzQlgNKTZBNu/x0
9r72xJT+XGoHoc09oFHOEzF3SZ7RBWAkPqEJqsYQx3TV8+vKSDjaffhli6vFQwtL
Uvf4eztpK2KMyfzFHhxGEKjEqQKxyF62aGMq8wavttlfP0ppXOqnYTH043WAinOY
sa57Uco89FZRUfeN2sEwF5sxivaP4YhRmOCe/L5PYNDfetlNNB7B+9gg9+z2jZgR
QQkN7qKTv5iK/A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:02 2026 by rpki-client