Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft
File: HCF8gIa-KdUPg8j9j8kXsAnePIE.mft (raw, json)
Hash identifier: Qh8WfaMzoM/aQ3vUhOSC9vlhW5HobL0Bxrqeyoj2tfM=
Subject key identifier: 21:33:CB:BB:D8:57:D7:20:60:D8:2A:CB:3E:43:F7:84:1D:CB:F1:2C
Authority key identifier: 1C:21:7C:80:86:BE:29:D5:0F:83:C8:FD:8F:C9:17:B0:09:DE:3C:81
Certificate issuer: /CN=1c217c8086be29d50f83c8fd8fc917b009de3c81
Certificate serial: 01A12D32786A23AB8CF6DF2259923BDC406C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCF8gIa-KdUPg8j9j8kXsAnePIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft
Manifest number: 05C2
Signing time: Sun 11 Oct 2026 23:00:44 +0000
Manifest this update: Sun 11 Oct 2026 23:00:44 +0000
Manifest next update: Mon 12 Oct 2026 23:00:44 +0000
Files and hashes: 1: HCF8gIa-KdUPg8j9j8kXsAnePIE.crl (hash: 8+4plUB5MNQq4cV936hLzMFP9Cw3C4iaw5dfxenM5Jk=)
2: Z5oga0vgbQ3IfY7AuGU9kvMREF8.roa (hash: S/HDTLw/C2HlzUoz5QYaSY1KLwcsf1KpKUZ68xZPy3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCF8gIa-KdUPg8j9j8kXsAnePIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:32:78:6a:23:ab:8c:f6:df:22:59:92:3b:dc:40:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c217c8086be29d50f83c8fd8fc917b009de3c81
Validity
Not Before: Oct 11 23:00:44 2026 GMT
Not After : Oct 12 23:00:44 2026 GMT
Subject: CN=2133cbbbd857d72060d82acb3e43f7841dcbf12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a7:2e:af:d7:f0:7f:62:83:7f:d0:1b:86:df:
5d:7e:e0:cb:3c:1e:e7:da:99:8f:ec:11:3e:1a:b4:
2a:50:93:7f:49:e6:f0:43:c3:4f:19:64:82:1f:42:
11:7d:7b:e4:6b:f5:9e:e1:ba:e8:94:07:65:79:94:
ac:a8:f3:ed:24:36:64:6c:01:4a:da:4e:8a:3e:83:
33:e5:ae:87:ed:fe:f8:68:14:c9:9d:b9:1d:69:c8:
df:ae:c9:d7:79:9b:5c:84:69:4f:6d:76:df:f4:98:
9b:35:05:54:87:6d:8e:44:21:4f:7b:c1:5f:ba:cc:
7a:11:f1:bc:e8:4c:dc:b0:70:c3:93:b1:ee:ca:39:
31:4c:31:11:cb:8e:63:5a:41:7d:e4:81:90:25:36:
4d:f4:df:d5:5d:84:37:ff:45:40:ab:2a:36:3d:c3:
cb:fc:ab:89:96:5a:5e:4f:ca:1e:b9:8d:3d:bd:3e:
c8:13:40:f7:10:14:77:50:d2:5b:c1:4e:91:d9:37:
ee:14:8c:c0:d8:26:bd:6c:e2:94:e3:6b:95:6d:a1:
28:9f:78:77:fd:e1:4f:9c:86:96:b2:48:7e:a0:1b:
8e:1d:f5:0e:22:98:64:58:45:29:f4:72:6a:da:99:
e4:7c:31:b5:c4:90:d9:1e:a9:25:94:8c:fb:1f:ae:
c9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:33:CB:BB:D8:57:D7:20:60:D8:2A:CB:3E:43:F7:84:1D:CB:F1:2C
X509v3 Authority Key Identifier:
keyid:1C:21:7C:80:86:BE:29:D5:0F:83:C8:FD:8F:C9:17:B0:09:DE:3C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCF8gIa-KdUPg8j9j8kXsAnePIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:42:c1:9e:05:43:c5:9b:6f:75:1c:68:1f:de:e0:96:14:fd:
22:f2:6a:11:2b:0c:af:31:47:d8:54:50:53:d0:08:32:af:51:
40:d1:2a:85:c3:85:0c:29:ca:6c:a3:0c:9f:29:c5:08:16:76:
f4:df:98:19:e9:2e:1d:1f:95:31:c8:c3:f9:9d:22:7e:d3:fd:
53:ec:36:4c:cb:b9:5e:a4:1a:b9:29:02:a0:9b:fa:ee:5e:ca:
3f:ae:e9:7c:f0:f6:87:7e:2c:6d:a6:50:73:6e:0e:25:3c:03:
77:a7:74:a4:ce:c8:54:e3:ff:34:c5:c6:5d:69:ab:7c:f4:9f:
1d:b5:81:7e:34:99:8b:ca:d7:7c:7c:70:a3:18:82:f1:ee:e1:
e1:43:4a:24:c4:1a:17:78:fe:62:05:99:c6:9e:1f:de:36:42:
33:05:65:f1:5a:eb:83:cd:cc:d4:9f:61:c6:4a:bc:fe:d0:55:
7c:23:97:ae:2b:64:af:19:9c:59:7e:0e:a2:f3:04:4a:ca:84:
9a:5d:ba:83:b7:c6:a8:b8:92:dd:de:1c:54:7b:33:c1:f1:d2:
4c:16:f6:c4:37:70:2e:f0:f9:83:65:04:7c:08:a9:49:8c:85:
61:a6:94:06:38:3b:c9:2c:76:df:d0:3b:8d:e5:63:0f:5d:17:
80:4e:da:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:29:52 2026 by rpki-client