Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
File: hq8scWa7NKaW_eL7rO9AAbCo5-I.mft (raw, json)
Hash identifier: Sv6UIZ9qmCBMN0GNsT8W7j/yzm7YFLSOPGuASyuDIWk=
Subject key identifier: 6F:C9:80:0F:C8:F6:71:FA:BE:8D:03:DE:F5:41:B6:9B:FC:89:2E:9B
Authority key identifier: 86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
Certificate issuer: /CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Certificate serial: 01A0D3B8AE97C4C7B87DEC669C6EDC8486E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
Manifest number: 15F4
Signing time: Thu 24 Sep 2026 14:01:30 +0000
Manifest this update: Thu 24 Sep 2026 14:01:30 +0000
Manifest next update: Fri 25 Sep 2026 14:01:30 +0000
Files and hashes: 1: 3MbENdJT26XzCCTRISyB_iPykiw.roa (hash: kSjcy26IOOyW+caS15k1M32+3TxvbP1k3eV5GVXbdqs=)
2: 93Zo7Pu2h3l6Yl9T9RSBRKnjw20.roa (hash: WXzD03j8xoR9D+l/6kOBvEB/Gim510LMJ3OHuaq0Urg=)
3: hq8scWa7NKaW_eL7rO9AAbCo5-I.crl (hash: /IBdlM2jI2b7lFS1LdqW/WvtnlpW3mXCPIv8Rtw0buI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:ae:97:c4:c7:b8:7d:ec:66:9c:6e:dc:84:86:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Validity
Not Before: Sep 24 14:01:30 2026 GMT
Not After : Sep 25 14:01:30 2026 GMT
Subject: CN=6fc9800fc8f671fabe8d03def541b69bfc892e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2c:32:ff:fb:9a:de:18:5e:8d:0c:45:37:5d:
5a:93:48:ba:bf:c8:a0:3e:6b:6b:53:bf:2e:6f:da:
99:d8:c6:c7:69:68:af:54:70:30:9e:94:12:5a:db:
de:ab:e5:ff:64:c9:16:50:cd:19:2a:88:a5:9a:81:
df:a9:7c:5c:a5:78:47:17:b1:b7:e1:78:0d:b5:80:
78:0f:3a:ae:cb:f9:92:e5:ac:69:79:f2:f9:a1:9f:
4b:ae:af:43:7a:a2:b6:10:eb:1d:cb:ef:5e:3e:a3:
21:4b:fb:eb:48:7d:48:fe:0c:d6:3b:17:4b:b2:ea:
3c:aa:ed:3b:4b:10:53:ea:de:d6:21:57:6d:53:9c:
0b:8f:cf:fa:ec:67:bf:95:d5:0a:8b:a9:cd:d0:7f:
30:12:a7:0a:c2:c1:3d:ba:0d:44:00:93:58:77:79:
a6:a0:83:d0:ff:bb:a6:1b:bc:d8:26:13:6d:75:13:
08:56:41:ca:6c:2e:2a:84:c2:a1:c6:cd:a8:b5:5b:
27:5d:e0:dd:48:6d:a6:70:eb:28:28:d1:5c:7f:7f:
02:99:40:ab:45:08:90:e4:da:72:c8:74:ba:5c:4a:
fb:c5:1b:be:11:83:57:89:47:59:43:14:7b:ff:10:
d9:de:00:e2:c1:9c:6b:c3:43:6d:fb:5c:ef:28:a8:
69:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C9:80:0F:C8:F6:71:FA:BE:8D:03:DE:F5:41:B6:9B:FC:89:2E:9B
X509v3 Authority Key Identifier:
keyid:86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:53:48:3c:19:a7:ee:7b:47:b1:a5:bf:19:7f:79:5d:ce:cc:
49:77:da:e4:b9:a3:9b:d7:f4:9c:da:ca:a2:51:90:6d:de:ea:
7c:d0:a9:6b:33:b8:79:58:51:b0:f4:35:67:00:7c:3e:d4:c4:
4a:7a:29:76:e0:c1:a3:e5:8b:1b:9f:71:69:33:ad:ff:03:ac:
9e:f7:08:cd:2c:68:36:50:c3:cd:1d:c9:4b:4a:22:23:90:d4:
dc:eb:95:ad:9f:ff:8a:bc:46:04:2e:cc:63:7a:90:37:54:f4:
c3:10:ac:16:d9:3e:49:ad:ae:34:c6:a0:5b:a9:07:b1:b4:86:
da:63:b4:87:9e:65:92:7c:b0:7e:76:8b:c3:f7:a9:0f:8a:e5:
59:04:87:71:fb:27:97:43:5c:a8:7e:28:32:43:20:0b:dc:a2:
e9:48:5e:2b:9e:01:f6:41:07:59:a9:f1:0a:54:d7:5a:4c:d2:
ce:07:6c:a8:36:8a:d9:3f:ad:2e:ec:cd:c8:29:51:f4:00:e2:
89:bb:f4:57:85:51:f6:6d:d8:c8:73:66:6e:5d:73:e1:02:ec:
19:23:63:46:a7:73:4e:27:43:77:25:9b:a9:a7:89:cd:4e:d1:
c4:df:89:a5:c0:1b:76:34:a0:00:0f:25:fa:e5:ad:52:59:7c:
36:47:a1:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTuK6XxMe4fexmnG7chIbpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2YWYyYzcxNjZiYjM0YTY5NmZkZTJmYmFjZWY0MDAxYjBh
OGU3ZTIwHhcNMjYwOTI0MTQwMTMwWhcNMjYwOTI1MTQwMTMwWjAzMTEwLwYDVQQD
Eyg2ZmM5ODAwZmM4ZjY3MWZhYmU4ZDAzZGVmNTQxYjY5YmZjODkyZTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniwy//ua3hhejQxFN11ak0i6v8ig
PmtrU78ub9qZ2MbHaWivVHAwnpQSWtveq+X/ZMkWUM0ZKoilmoHfqXxcpXhHF7G3
4XgNtYB4Dzquy/mS5axpefL5oZ9Lrq9DeqK2EOsdy+9ePqMhS/vrSH1I/gzWOxdL
suo8qu07SxBT6t7WIVdtU5wLj8/67Ge/ldUKi6nN0H8wEqcKwsE9ug1EAJNYd3mm
oIPQ/7umG7zYJhNtdRMIVkHKbC4qhMKhxs2otVsnXeDdSG2mcOsoKNFcf38CmUCr
RQiQ5NpyyHS6XEr7xRu+EYNXiUdZQxR7/xDZ3gDiwZxrw0Nt+1zvKKhpYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/JgA/I9nH6vo0D3vVBtpv8iS6bMB8GA1UdIwQY
MBaAFIavLHFmuzSmlv3i+6zvQAGwqOfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHE4c2NXYTdOS2FXX2VMN3JPOUFBYkNvNS1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mOGY2NmQtOGE0Ny00NDMxLWFmNTEt
ZTRmNTg3MDQ4MDRlLzEvaHE4c2NXYTdOS2FXX2VMN3JPOUFBYkNvNS1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9mOGY2NmQtOGE0Ny00NDMxLWFmNTEtZTRmNTg3MDQ4MDRl
LzEvaHE4c2NXYTdOS2FXX2VMN3JPOUFBYkNvNS1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV1NIPBmn
7ntHsaW/GX95Xc7MSXfa5Lmjm9f0nNrKolGQbd7qfNCpazO4eVhRsPQ1ZwB8PtTE
SnopduDBo+WLG59xaTOt/wOsnvcIzSxoNlDDzR3JS0oiI5DU3OuVrZ//irxGBC7M
Y3qQN1T0wxCsFtk+Sa2uNMagW6kHsbSG2mO0h55lknywfnaLw/epD4rlWQSHcfsn
l0NcqH4oMkMgC9yi6UheK54B9kEHWanxClTXWkzSzgdsqDaK2T+tLuzNyClR9ADi
ibv0V4VR9m3YyHNmbl1z4QLsGSNjRqdzTidDdyWbqaeJzU7RxN+JpcAbdjSgAA8l
+uWtUll8NkehVw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 17:13:45 2026 by rpki-client