Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
File: hq8scWa7NKaW_eL7rO9AAbCo5-I.mft (raw, json)
Hash identifier: iQzyjDKpgN7m/HIti8+8EtgJTf275b5GgMKq/wuxe+k=
Subject key identifier: BA:08:A3:B5:8E:D0:20:29:26:C5:F5:EB:08:65:8F:B0:91:86:7F:88
Authority key identifier: 86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
Certificate issuer: /CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Certificate serial: 019D273A8351EBF19F2E17AC94B8DAE05299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
Manifest number: 140D
Signing time: Wed 25 Mar 2026 23:00:39 +0000
Manifest this update: Wed 25 Mar 2026 23:00:39 +0000
Manifest next update: Thu 26 Mar 2026 23:00:39 +0000
Files and hashes: 1: 3MbENdJT26XzCCTRISyB_iPykiw.roa (hash: kSjcy26IOOyW+caS15k1M32+3TxvbP1k3eV5GVXbdqs=)
2: 93Zo7Pu2h3l6Yl9T9RSBRKnjw20.roa (hash: WXzD03j8xoR9D+l/6kOBvEB/Gim510LMJ3OHuaq0Urg=)
3: hq8scWa7NKaW_eL7rO9AAbCo5-I.crl (hash: ZvD62HOVmttGSOJAel0+0rUgyGXVn69mU6QdyQVoGy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:83:51:eb:f1:9f:2e:17:ac:94:b8:da:e0:52:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Validity
Not Before: Mar 25 23:00:39 2026 GMT
Not After : Mar 26 23:00:39 2026 GMT
Subject: CN=ba08a3b58ed0202926c5f5eb08658fb091867f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:22:de:e3:29:87:72:2b:10:e3:9f:ef:54:82:
a3:e6:0e:e9:0d:ae:6f:5a:e1:56:26:79:6e:ff:7c:
06:f8:6f:7f:70:89:1a:35:17:e6:23:78:1b:f5:53:
24:a1:d2:3d:e6:c1:39:c8:aa:49:e9:30:76:93:32:
ae:8d:c0:3e:99:97:4b:66:b0:e3:71:e4:e9:bb:76:
f4:9c:01:de:4d:f2:23:04:6e:14:4e:3d:5e:af:09:
c7:fd:24:85:83:49:7d:42:e4:2d:48:86:00:7a:9b:
4c:ba:06:31:e9:76:95:1c:ee:9a:5d:bf:27:42:1a:
60:67:ba:6d:56:34:6c:56:ca:1e:90:10:14:bf:18:
a5:23:46:25:16:81:a9:ed:cc:07:15:0f:39:be:68:
91:06:b6:ec:83:3a:12:92:03:36:c1:1d:3b:09:5e:
4b:06:67:a6:f5:3a:da:e1:a4:da:c1:e0:12:d5:e7:
c6:09:be:51:da:e2:db:84:38:56:64:52:b2:39:3f:
40:62:c6:11:a5:b6:2f:2e:c7:92:81:d4:bc:e5:ad:
bb:ee:60:2d:ba:b6:f9:91:0b:34:04:0d:1d:cd:ed:
87:42:43:e5:b4:02:62:13:9c:be:2f:6d:41:6a:0e:
5f:fd:90:45:93:c1:b7:c9:68:00:6e:d0:e1:44:9d:
0e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:08:A3:B5:8E:D0:20:29:26:C5:F5:EB:08:65:8F:B0:91:86:7F:88
X509v3 Authority Key Identifier:
keyid:86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:16:7c:3e:46:4b:8d:44:8d:60:5b:c6:3b:cf:6f:f4:a3:f0:
9e:c2:3d:db:4f:08:07:56:bd:8d:83:50:d1:90:21:15:de:1b:
bf:54:a4:01:65:16:cc:93:60:24:15:ed:04:8c:a0:be:12:2c:
f4:f6:7e:be:1d:2f:1d:11:a6:c9:ca:48:bd:5e:b4:16:50:13:
37:c0:05:9a:b1:8f:89:5f:23:1e:53:36:bd:aa:fb:42:ff:fc:
77:71:35:9c:07:8e:f9:b5:cd:b2:a0:57:bf:86:c9:52:e6:98:
dd:27:a5:43:73:d0:7f:24:5e:b9:a9:d8:17:2b:a9:86:77:c6:
4d:79:88:f5:f2:54:8b:3d:2e:f9:92:cc:f3:ce:b8:ea:1f:7d:
8c:3a:4b:b0:03:6a:59:0d:e0:49:8e:3c:bf:09:2e:de:f6:86:
f3:79:b0:be:d5:a5:31:6b:26:02:2b:ba:7b:aa:db:8f:f0:b0:
84:8e:78:23:51:21:c3:7c:47:48:c1:09:0e:f4:47:15:40:a5:
94:98:bd:42:af:d5:b7:a1:ea:f4:22:29:70:01:7f:15:e6:a8:
79:b0:e5:94:29:c3:e3:a5:c5:5c:fd:85:da:0b:e7:91:6c:82:
5b:8b:ba:38:6e:f3:55:a8:ae:a5:3d:19:7d:fa:a9:41:1d:bb:
73:d8:e3:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOoNR6/GfLheslLja4FKZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2YWYyYzcxNjZiYjM0YTY5NmZkZTJmYmFjZWY0MDAxYjBh
OGU3ZTIwHhcNMjYwMzI1MjMwMDM5WhcNMjYwMzI2MjMwMDM5WjAzMTEwLwYDVQQD
EyhiYTA4YTNiNThlZDAyMDI5MjZjNWY1ZWIwODY1OGZiMDkxODY3Zjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SLe4ymHcisQ45/vVIKj5g7pDa5v
WuFWJnlu/3wG+G9/cIkaNRfmI3gb9VMkodI95sE5yKpJ6TB2kzKujcA+mZdLZrDj
ceTpu3b0nAHeTfIjBG4UTj1erwnH/SSFg0l9QuQtSIYAeptMugYx6XaVHO6aXb8n
QhpgZ7ptVjRsVsoekBAUvxilI0YlFoGp7cwHFQ85vmiRBrbsgzoSkgM2wR07CV5L
Bmem9Tra4aTaweAS1efGCb5R2uLbhDhWZFKyOT9AYsYRpbYvLseSgdS85a277mAt
urb5kQs0BA0dze2HQkPltAJiE5y+L21Bag5f/ZBFk8G3yWgAbtDhRJ0O5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLoIo7WO0CApJsX16whlj7CRhn+IMB8GA1UdIwQY
MBaAFIavLHFmuzSmlv3i+6zvQAGwqOfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHE4c2NXYTdOS2FXX2VMN3JPOUFBYkNvNS1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mOGY2NmQtOGE0Ny00NDMxLWFmNTEt
ZTRmNTg3MDQ4MDRlLzEvaHE4c2NXYTdOS2FXX2VMN3JPOUFBYkNvNS1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9mOGY2NmQtOGE0Ny00NDMxLWFmNTEtZTRmNTg3MDQ4MDRl
LzEvaHE4c2NXYTdOS2FXX2VMN3JPOUFBYkNvNS1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANRZ8PkZL
jUSNYFvGO89v9KPwnsI9208IB1a9jYNQ0ZAhFd4bv1SkAWUWzJNgJBXtBIygvhIs
9PZ+vh0vHRGmycpIvV60FlATN8AFmrGPiV8jHlM2var7Qv/8d3E1nAeO+bXNsqBX
v4bJUuaY3SelQ3PQfyReuanYFyuphnfGTXmI9fJUiz0u+ZLM88646h99jDpLsANq
WQ3gSY48vwku3vaG83mwvtWlMWsmAiu6e6rbj/CwhI54I1Ehw3xHSMEJDvRHFUCl
lJi9Qq/Vt6Hq9CIpcAF/FeaoebDllCnD46XFXP2F2gvnkWyCW4u6OG7zVaiupT0Z
ffqpQR27c9jjxw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:46 2026 by rpki-client