Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/hh8QJbTdZhRYH1DB-FoGc0ulqfk.mft
File: hh8QJbTdZhRYH1DB-FoGc0ulqfk.mft (raw, json)
Hash identifier: E86FxIkoc7hT4BlNOW1wZl4Ouxoh9+29iQ90ATE72PY=
Subject key identifier: C5:4E:E0:B2:ED:38:3B:64:F6:E3:08:07:07:FD:1E:C5:84:09:33:42
Authority key identifier: 86:1F:10:25:B4:DD:66:14:58:1F:50:C1:F8:5A:06:73:4B:A5:A9:F9
Certificate issuer: /CN=861f1025b4dd6614581f50c1f85a06734ba5a9f9
Certificate serial: 019F935AE3804FE59D844CAFF0853E7C8522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hh8QJbTdZhRYH1DB-FoGc0ulqfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/hh8QJbTdZhRYH1DB-FoGc0ulqfk.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:00:34 +0000
Manifest this update: Fri 24 Jul 2026 09:00:34 +0000
Manifest next update: Sat 25 Jul 2026 09:00:34 +0000
Files and hashes: 1: fTTJaw_54nEtImNHGANh9X5pCjU.roa (hash: IDhG7BAffdnYnvyt684I59EEhWvx4nR1U8ujkTq4BHo=)
2: hh8QJbTdZhRYH1DB-FoGc0ulqfk.crl (hash: drFZ6al+1Rlmlp6D5cuIlqX7S8PtlVlgj0dcG1OkPlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/hh8QJbTdZhRYH1DB-FoGc0ulqfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/hh8QJbTdZhRYH1DB-FoGc0ulqfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hh8QJbTdZhRYH1DB-FoGc0ulqfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:e3:80:4f:e5:9d:84:4c:af:f0:85:3e:7c:85:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861f1025b4dd6614581f50c1f85a06734ba5a9f9
Validity
Not Before: Jul 24 09:00:34 2026 GMT
Not After : Jul 25 09:00:34 2026 GMT
Subject: CN=c54ee0b2ed383b64f6e3080707fd1ec584093342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3e:83:d9:25:7d:7a:5d:71:26:b6:c1:75:3d:
93:86:f7:ad:73:e9:ec:83:80:25:48:78:e4:75:34:
75:c9:99:92:10:cd:82:2f:2d:e2:a9:fc:12:b1:fd:
28:15:32:c4:73:8d:c4:b9:99:a8:eb:12:2e:04:57:
b1:89:3c:98:16:46:52:b8:e7:36:91:46:c1:22:39:
38:15:55:2d:2e:9c:2d:30:d5:42:77:8e:10:04:24:
d3:68:40:12:53:c5:f7:5d:97:68:18:77:c4:4d:cb:
26:10:65:cf:17:e7:ea:d5:f5:52:ec:23:ff:82:ca:
01:49:3c:a9:04:d2:e7:02:e9:2d:e9:62:3d:a4:02:
90:cc:c6:58:6a:37:0a:cd:11:93:5c:86:bb:4c:aa:
4d:84:d1:92:1d:17:e2:73:21:94:e1:c4:c9:25:29:
49:14:55:34:6e:41:b2:3f:ec:a0:e6:db:40:b5:78:
7e:32:66:26:db:1f:ea:5c:c3:03:25:2f:66:78:c7:
4c:72:1c:f3:86:bb:e0:a7:a6:7f:ac:38:21:6f:b9:
d8:d0:56:59:b4:56:82:a6:8a:6c:de:23:a6:e9:1e:
82:f0:f9:9e:cc:90:99:40:72:53:ed:fb:35:06:33:
e0:af:c9:98:02:6e:a1:a6:b7:19:b5:65:1f:fa:0d:
f4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4E:E0:B2:ED:38:3B:64:F6:E3:08:07:07:FD:1E:C5:84:09:33:42
X509v3 Authority Key Identifier:
keyid:86:1F:10:25:B4:DD:66:14:58:1F:50:C1:F8:5A:06:73:4B:A5:A9:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hh8QJbTdZhRYH1DB-FoGc0ulqfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/hh8QJbTdZhRYH1DB-FoGc0ulqfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/hh8QJbTdZhRYH1DB-FoGc0ulqfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:94:c7:76:4b:ed:60:79:29:4a:f3:af:1f:4b:08:30:e8:89:
6f:fe:c0:d3:23:a7:fc:32:4b:d4:99:80:0e:8a:05:c9:8c:3d:
11:78:f3:fd:0f:60:e2:ee:63:29:04:5b:6d:81:21:ef:25:b0:
ad:68:92:ec:3b:82:8c:e3:22:85:be:bc:41:47:31:e7:9b:69:
2a:d1:4a:ee:72:0f:99:c1:f6:0a:d2:e4:a8:94:c8:4c:28:6e:
bf:54:e3:45:fb:91:2e:e6:0f:88:56:52:e9:a4:f4:e0:6c:22:
09:fb:d5:72:a9:e7:d4:7b:77:17:6b:2d:ee:29:39:2a:12:f3:
c2:e6:cc:a2:25:b9:dd:5d:ec:9f:fa:16:86:79:cc:f1:24:ad:
cf:dd:a3:be:fe:73:44:91:6b:d8:93:c9:28:5f:6c:b8:da:39:
94:8b:03:5a:0e:b4:1d:5f:5c:ff:a2:36:76:54:0c:c1:f2:42:
cb:6a:a9:4b:fb:1c:8a:03:44:87:80:3b:e4:24:88:e8:01:79:
c2:90:93:44:25:2d:9a:40:65:8a:fc:c5:82:0c:bb:a0:be:ba:
80:db:f3:11:11:c7:40:b9:f7:ea:57:03:23:c8:db:1f:69:e9:
e7:c3:24:bb:e2:3b:6a:3a:a7:e8:36:69:d8:80:00:dc:37:fc:
b5:b5:16:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:07:07 2026 by rpki-client