Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/hh8QJbTdZhRYH1DB-FoGc0ulqfk.mft
File: hh8QJbTdZhRYH1DB-FoGc0ulqfk.mft (raw, json)
Hash identifier: FMcD8nl3CZSfwV6gr7wmyVaQMfqsiwlmH+Xh5qbvC4w=
Subject key identifier: 9B:B4:F1:FA:67:B6:5E:DB:84:5E:6E:62:67:82:00:F2:98:67:20:91
Authority key identifier: 86:1F:10:25:B4:DD:66:14:58:1F:50:C1:F8:5A:06:73:4B:A5:A9:F9
Certificate issuer: /CN=861f1025b4dd6614581f50c1f85a06734ba5a9f9
Certificate serial: 01A113AA228437EEDAF6F271813A7511805E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hh8QJbTdZhRYH1DB-FoGc0ulqfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/hh8QJbTdZhRYH1DB-FoGc0ulqfk.mft
Manifest number: 0108
Signing time: Wed 07 Oct 2026 00:01:19 +0000
Manifest this update: Wed 07 Oct 2026 00:01:19 +0000
Manifest next update: Thu 08 Oct 2026 00:01:19 +0000
Files and hashes: 1: fTTJaw_54nEtImNHGANh9X5pCjU.roa (hash: IDhG7BAffdnYnvyt684I59EEhWvx4nR1U8ujkTq4BHo=)
2: hh8QJbTdZhRYH1DB-FoGc0ulqfk.crl (hash: 1vNjzhBRIUyE5vgYSw1Eyb3ZWYAUhOoOOKlc4ifr4TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/hh8QJbTdZhRYH1DB-FoGc0ulqfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/hh8QJbTdZhRYH1DB-FoGc0ulqfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hh8QJbTdZhRYH1DB-FoGc0ulqfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:aa:22:84:37:ee:da:f6:f2:71:81:3a:75:11:80:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861f1025b4dd6614581f50c1f85a06734ba5a9f9
Validity
Not Before: Oct 7 00:01:19 2026 GMT
Not After : Oct 8 00:01:19 2026 GMT
Subject: CN=9bb4f1fa67b65edb845e6e62678200f298672091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f6:ae:b7:fe:de:d4:f8:ba:06:bc:e3:31:0b:
f4:9d:c1:60:7e:9e:22:3e:81:d2:71:d9:93:a1:c0:
4c:7e:49:de:2c:56:09:ae:83:89:e1:35:89:85:10:
fa:5a:28:6a:7d:45:28:8c:40:d3:67:c6:05:68:e5:
90:4e:05:e6:43:71:c6:c2:44:f1:70:72:2a:29:c8:
2d:64:3d:42:99:ac:f4:9c:3f:ed:73:8d:08:db:25:
62:b3:d1:56:6b:10:38:8b:f9:99:8f:9c:45:2a:ad:
9e:93:0a:a6:1e:93:f7:f5:f0:c4:cb:b4:4a:fe:f9:
a4:cc:eb:b8:3a:54:83:e6:95:13:d5:0c:f0:d8:54:
92:3a:70:39:da:d7:2c:b5:49:64:86:19:cd:0d:e2:
18:f6:40:73:bb:23:15:5e:54:8a:6f:26:ff:56:d7:
b1:cb:bf:d6:c4:30:70:f7:e3:37:95:75:52:0f:8f:
57:cd:7d:18:46:e7:67:99:00:14:b9:32:64:4c:d1:
53:43:e0:28:e7:5b:cf:3a:10:5b:9c:cb:3e:55:42:
ee:b2:25:27:fb:7f:ae:cb:2f:5b:7a:ff:e4:31:0e:
9c:cf:52:ea:cf:59:8b:ad:86:a5:69:d4:db:24:90:
82:d7:7b:55:c6:58:22:23:01:2f:c6:4f:c8:8c:17:
e6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B4:F1:FA:67:B6:5E:DB:84:5E:6E:62:67:82:00:F2:98:67:20:91
X509v3 Authority Key Identifier:
keyid:86:1F:10:25:B4:DD:66:14:58:1F:50:C1:F8:5A:06:73:4B:A5:A9:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hh8QJbTdZhRYH1DB-FoGc0ulqfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/hh8QJbTdZhRYH1DB-FoGc0ulqfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/hh8QJbTdZhRYH1DB-FoGc0ulqfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:d5:4c:58:95:38:65:cc:8c:50:8f:3a:ef:f2:be:b7:4b:58:
dc:30:28:ab:64:50:c3:51:33:15:bc:d6:0f:97:3c:5e:8d:98:
0a:9c:5f:43:ba:e2:c6:5b:39:c5:7e:ff:96:c7:b5:5e:97:02:
d4:49:76:ec:88:51:54:37:84:1c:52:22:1a:18:33:9a:f7:b5:
88:4f:b4:c7:91:08:73:9e:6b:e9:9e:50:78:87:4c:e7:76:61:
48:d3:c9:2c:d2:0e:d4:63:b1:6c:b2:b9:c4:44:ae:5f:53:49:
08:74:1e:f6:e2:4c:7a:3c:69:fc:94:c5:63:d9:8d:56:2a:40:
2a:6d:40:68:cc:01:4b:b3:cc:4d:ff:30:53:7a:63:e0:f3:12:
b4:2f:e0:aa:a7:a7:c3:3a:5c:67:09:dc:f1:a2:7c:ec:c8:a1:
03:9e:15:6c:aa:4e:40:6b:b2:1c:44:0c:5e:a8:7c:d6:61:58:
11:f2:34:19:d5:dd:7f:f3:53:48:b1:99:28:eb:76:c9:8d:8d:
a8:08:f1:d1:42:d7:c6:96:55:de:a5:6f:3b:79:14:53:22:24:
f6:18:ed:63:5a:35:92:cc:dc:b2:17:b4:5c:82:d0:49:56:eb:
a0:e8:e2:9e:6d:85:05:12:2d:70:b7:cf:05:40:93:36:1a:a6:
e6:b1:ef:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaETqiKEN+7a9vJxgTp1EYBeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MWYxMDI1YjRkZDY2MTQ1ODFmNTBjMWY4NWEwNjczNGJh
NWE5ZjkwHhcNMjYxMDA3MDAwMTE5WhcNMjYxMDA4MDAwMTE5WjAzMTEwLwYDVQQD
Eyg5YmI0ZjFmYTY3YjY1ZWRiODQ1ZTZlNjI2NzgyMDBmMjk4NjcyMDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/aut/7e1Pi6BrzjMQv0ncFgfp4i
PoHScdmTocBMfkneLFYJroOJ4TWJhRD6WihqfUUojEDTZ8YFaOWQTgXmQ3HGwkTx
cHIqKcgtZD1Cmaz0nD/tc40I2yVis9FWaxA4i/mZj5xFKq2ekwqmHpP39fDEy7RK
/vmkzOu4OlSD5pUT1Qzw2FSSOnA52tcstUlkhhnNDeIY9kBzuyMVXlSKbyb/Vtex
y7/WxDBw9+M3lXVSD49XzX0YRudnmQAUuTJkTNFTQ+Ao51vPOhBbnMs+VULusiUn
+3+uyy9bev/kMQ6cz1Lqz1mLrYaladTbJJCC13tVxlgiIwEvxk/IjBfmowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJu08fpntl7bhF5uYmeCAPKYZyCRMB8GA1UdIwQY
MBaAFIYfECW03WYUWB9QwfhaBnNLpan5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGg4UUpiVGRaaFJZSDFEQi1Gb0djMHVscWZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8yZmMyNjYtMTI0Ny00ZjAwLWIxNjEt
NmViOWEyMjEyOWUxLzEvaGg4UUpiVGRaaFJZSDFEQi1Gb0djMHVscWZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8yZmMyNjYtMTI0Ny00ZjAwLWIxNjEtNmViOWEyMjEyOWUx
LzEvaGg4UUpiVGRaaFJZSDFEQi1Gb0djMHVscWZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzNVMWJU4
ZcyMUI867/K+t0tY3DAoq2RQw1EzFbzWD5c8Xo2YCpxfQ7rixls5xX7/lse1XpcC
1El27IhRVDeEHFIiGhgzmve1iE+0x5EIc55r6Z5QeIdM53ZhSNPJLNIO1GOxbLK5
xESuX1NJCHQe9uJMejxp/JTFY9mNVipAKm1AaMwBS7PMTf8wU3pj4PMStC/gqqen
wzpcZwnc8aJ87MihA54VbKpOQGuyHEQMXqh81mFYEfI0GdXdf/NTSLGZKOt2yY2N
qAjx0ULXxpZV3qVvO3kUUyIk9hjtY1o1kszcshe0XILQSVbroOjinm2FBRItcLfP
BUCTNhqm5rHv9A==
-----END CERTIFICATE-----
Generated at Wed Oct 7 04:06:14 2026 by rpki-client