Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
File: hq8scWa7NKaW_eL7rO9AAbCo5-I.mft (raw, json)
Hash identifier: GgXUcNWUeupcZg2w0oH1lxgmAKgmkHv2aOsqnkyF6S0=
Subject key identifier: 31:AB:2C:8C:FE:B8:40:23:B0:BF:50:7C:67:24:45:2C:DE:34:BA:97
Authority key identifier: 86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
Certificate issuer: /CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Certificate serial: 01A0CFDB0F558B0A70BF0D79ED2BEF67792E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
Manifest number: 15F2
Signing time: Wed 23 Sep 2026 20:00:35 +0000
Manifest this update: Wed 23 Sep 2026 20:00:35 +0000
Manifest next update: Thu 24 Sep 2026 20:00:35 +0000
Files and hashes: 1: 3MbENdJT26XzCCTRISyB_iPykiw.roa (hash: kSjcy26IOOyW+caS15k1M32+3TxvbP1k3eV5GVXbdqs=)
2: 93Zo7Pu2h3l6Yl9T9RSBRKnjw20.roa (hash: WXzD03j8xoR9D+l/6kOBvEB/Gim510LMJ3OHuaq0Urg=)
3: hq8scWa7NKaW_eL7rO9AAbCo5-I.crl (hash: WSbzVpSloeRyFZMp70ewRcp9dtDgDVPuR2t4LZioNCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:db:0f:55:8b:0a:70:bf:0d:79:ed:2b:ef:67:79:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Validity
Not Before: Sep 23 20:00:35 2026 GMT
Not After : Sep 24 20:00:35 2026 GMT
Subject: CN=31ab2c8cfeb84023b0bf507c6724452cde34ba97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cb:15:53:ad:58:0d:80:e2:0a:87:ad:74:a5:
1f:d2:b6:bc:25:bb:ca:cb:1c:78:92:2a:9b:4b:8d:
ea:bc:34:a2:cb:cf:c5:c1:03:a0:b2:5b:cf:97:1c:
b6:c1:aa:a3:a5:c7:6e:df:9b:3d:8c:96:f5:44:35:
7d:26:8a:bd:ef:ff:3f:e0:3f:b5:19:4d:cb:f7:aa:
36:aa:f2:37:59:00:c0:d0:ba:c2:4d:1b:90:58:73:
45:43:ad:11:e8:a5:45:d4:78:17:f1:ec:4b:0e:25:
43:a4:a4:a4:37:67:fd:dc:00:2b:e1:95:71:72:06:
e0:70:d3:ad:a6:47:81:2e:e3:77:89:ab:ff:5d:f2:
5d:42:b8:45:3f:96:6d:77:59:b6:92:52:3e:0c:a3:
05:e9:28:4c:3d:6c:8f:e3:3a:79:b7:b4:9e:a7:c1:
10:f7:bd:0b:c9:75:a6:cf:01:d0:c1:85:7e:eb:08:
d6:2e:bd:40:a3:77:dd:34:9e:93:76:86:03:2d:a3:
48:2d:b5:78:4f:60:7d:e8:e5:cd:0e:ad:fd:75:4b:
26:e5:b2:10:73:c7:63:fb:aa:98:bb:f0:5c:2f:d7:
91:6f:7a:b1:a8:d4:f3:45:5d:4f:6e:a2:b2:6d:53:
43:7d:d3:c7:83:22:c8:22:9a:e2:87:31:df:6a:9d:
23:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AB:2C:8C:FE:B8:40:23:B0:BF:50:7C:67:24:45:2C:DE:34:BA:97
X509v3 Authority Key Identifier:
keyid:86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c1:75:23:37:7f:9d:44:e1:92:43:00:ca:69:a6:ae:06:c9:
c9:c5:65:a2:8b:14:d8:b0:92:c5:f8:38:45:7d:74:d3:f9:55:
5c:0c:a7:64:26:03:46:3b:78:c9:5b:05:44:c4:6a:eb:69:0f:
99:d1:f9:22:e0:3a:e8:17:61:06:69:17:2f:25:d3:80:a4:87:
ab:a2:5e:32:49:a5:c2:40:4a:9c:29:5f:93:12:c0:57:26:96:
3f:1c:76:e0:fd:7b:50:4a:e9:4d:3f:c5:81:40:71:a3:cf:f8:
58:3c:30:40:d5:f6:8b:5e:f2:27:3d:37:c6:81:eb:1c:e5:f8:
d9:30:91:0f:68:66:f7:68:bd:f9:c1:5f:d1:a4:f4:74:03:8f:
28:7f:46:da:8f:bd:12:41:11:d2:d6:23:0f:e3:90:74:66:20:
12:0f:35:29:85:04:cd:2f:26:36:82:bd:26:5c:82:ac:3b:15:
37:a3:e0:fd:29:29:99:e2:3f:5d:34:63:30:a2:b1:9c:d7:36:
72:f5:1e:1f:6e:2e:1f:9f:ca:a6:12:b7:26:89:40:0d:5a:28:
a9:8d:dc:fd:4e:8d:fd:57:8a:19:f3:7f:c7:b8:91:83:40:19:
28:7e:f8:7a:fd:39:bc:1e:59:02:f3:e9:c5:25:8e:94:93:af:
35:92:77:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:48:35 2026 by rpki-client