Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
File: hq8scWa7NKaW_eL7rO9AAbCo5-I.mft (raw, json)
Hash identifier: jWpQ+G92NUtfBaRgT7sWN88ksfqpSgNlwFCNLm40n4E=
Subject key identifier: DA:A1:28:FC:48:91:27:D4:94:DB:0E:3A:19:4A:DD:29:C8:04:4E:D6
Authority key identifier: 86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
Certificate issuer: /CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Certificate serial: 01A1DC4AF736092DDE388706B569B23D0BA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
Manifest number: 167D
Signing time: Sat 14 Nov 2026 23:01:02 +0000
Manifest this update: Sat 14 Nov 2026 23:01:02 +0000
Manifest next update: Sun 15 Nov 2026 23:01:02 +0000
Files and hashes: 1: 3MbENdJT26XzCCTRISyB_iPykiw.roa (hash: kSjcy26IOOyW+caS15k1M32+3TxvbP1k3eV5GVXbdqs=)
2: 93Zo7Pu2h3l6Yl9T9RSBRKnjw20.roa (hash: WXzD03j8xoR9D+l/6kOBvEB/Gim510LMJ3OHuaq0Urg=)
3: hq8scWa7NKaW_eL7rO9AAbCo5-I.crl (hash: 8f8Xxqr3GQcMko9eWC7s66f+X2bvk3+Hj2RtWgy4Jdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:4a:f7:36:09:2d:de:38:87:06:b5:69:b2:3d:0b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Validity
Not Before: Nov 14 23:01:02 2026 GMT
Not After : Nov 15 23:01:02 2026 GMT
Subject: CN=daa128fc489127d494db0e3a194add29c8044ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:65:60:65:3d:70:79:d2:5d:c0:38:4a:74:50:
15:dc:be:f2:57:9b:52:99:4c:e9:b8:1b:ea:2b:87:
10:64:d8:39:df:05:8c:56:69:ca:85:23:37:e4:e3:
36:e0:d9:fe:54:61:f9:c1:e5:fe:95:6d:39:64:81:
46:61:60:84:f9:a3:70:bb:a3:e5:d6:6d:a4:e4:05:
a6:b5:77:b2:32:25:c4:a8:e7:b7:f0:b3:cf:14:a5:
df:3f:41:e1:f7:b0:94:2b:e9:06:f5:83:7f:0e:e1:
d6:0e:2b:1b:e2:9f:4b:c3:b0:44:7e:87:72:42:bc:
ad:25:a4:6b:b5:2e:76:fa:c3:6d:50:94:57:df:21:
c1:53:15:77:94:52:d8:55:20:2e:67:79:68:70:f3:
4f:23:3a:89:c6:7e:a5:a6:e5:34:c8:f8:b8:eb:51:
f2:19:cb:b1:e2:83:10:f7:cd:60:39:bf:6c:52:d1:
63:d7:56:cc:5a:5a:a1:4d:e7:9a:76:f9:31:78:20:
a9:9d:02:a5:8e:2c:b2:a7:cd:e1:35:c1:06:79:57:
aa:ca:c1:30:ec:c7:3b:5b:e5:38:f6:d0:e5:1d:ba:
53:bd:8e:31:0c:f8:6d:ac:98:42:e3:e3:33:38:cf:
f6:14:93:ac:64:9b:9a:1f:98:80:8f:50:3f:04:3c:
76:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A1:28:FC:48:91:27:D4:94:DB:0E:3A:19:4A:DD:29:C8:04:4E:D6
X509v3 Authority Key Identifier:
keyid:86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:20:96:d3:8f:e0:7c:ac:2b:87:d4:0c:6e:d9:85:0e:11:0d:
5d:84:ac:e6:59:fe:0b:2d:86:f5:51:88:dd:d6:c1:14:df:77:
51:7a:88:3f:55:3d:84:fd:2a:be:f8:b6:76:9a:ae:56:5b:6f:
17:84:12:97:f9:c7:de:6c:f2:a0:e1:8d:9b:da:a1:97:bf:68:
76:e0:72:ce:75:e3:25:1d:44:42:f5:bb:d3:7d:09:c5:b1:6f:
4e:1c:d2:12:63:27:a5:0a:b4:fb:ac:4a:69:9b:6a:f7:f2:ce:
c3:56:e0:aa:31:ca:8f:e0:57:52:8f:32:48:3e:bd:4c:a8:9b:
24:8c:54:20:08:93:a4:31:a2:6c:3c:43:28:5b:b8:e7:5b:07:
80:19:7a:e8:a8:16:c4:47:b2:d2:9a:3f:d9:3c:aa:2d:e9:ac:
e9:cd:d9:4c:85:1e:d9:42:8d:22:2d:d1:f1:a3:fe:bc:b7:d9:
ac:da:20:26:7c:7e:4f:d4:14:5d:f1:27:8e:1c:d2:ab:ff:91:
a8:ff:12:b6:c5:ae:47:e4:13:82:ac:29:89:6b:b0:f9:84:9c:
6b:c6:40:bd:5c:b8:32:da:65:35:80:6a:bb:52:22:9a:3a:1c:
c2:67:e9:4f:71:2c:ef:fc:7d:e3:08:4d:7f:17:4b:3a:ae:94:
f8:86:e8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 04:36:12 2026 by rpki-client