Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft
File: HCF8gIa-KdUPg8j9j8kXsAnePIE.mft (raw, json)
Hash identifier: JHP5JJ71jua6ajaHDH2G+X+Tkrnsghy6T63rxepHMHE=
Subject key identifier: 97:A4:AF:A3:4D:DF:19:70:8E:E0:39:2E:EF:EF:3D:9E:98:9D:BB:D8
Authority key identifier: 1C:21:7C:80:86:BE:29:D5:0F:83:C8:FD:8F:C9:17:B0:09:DE:3C:81
Certificate issuer: /CN=1c217c8086be29d50f83c8fd8fc917b009de3c81
Certificate serial: 01A12B4413C847325C787CFDBD201843989F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCF8gIa-KdUPg8j9j8kXsAnePIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft
Manifest number: 05C1
Signing time: Sun 11 Oct 2026 14:00:44 +0000
Manifest this update: Sun 11 Oct 2026 14:00:44 +0000
Manifest next update: Mon 12 Oct 2026 14:00:44 +0000
Files and hashes: 1: HCF8gIa-KdUPg8j9j8kXsAnePIE.crl (hash: 7wak9EkIjeGd/NblNOiYFxSZmkkegmCvwGOFSkyFBsM=)
2: Z5oga0vgbQ3IfY7AuGU9kvMREF8.roa (hash: S/HDTLw/C2HlzUoz5QYaSY1KLwcsf1KpKUZ68xZPy3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCF8gIa-KdUPg8j9j8kXsAnePIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:44:13:c8:47:32:5c:78:7c:fd:bd:20:18:43:98:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c217c8086be29d50f83c8fd8fc917b009de3c81
Validity
Not Before: Oct 11 14:00:44 2026 GMT
Not After : Oct 12 14:00:44 2026 GMT
Subject: CN=97a4afa34ddf19708ee0392eefef3d9e989dbbd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3f:19:2f:0f:18:bb:c1:98:24:7b:03:cb:eb:
ef:5d:75:8d:a6:55:62:18:1d:80:e7:7d:d1:ef:4d:
9c:aa:05:cd:67:b3:2d:b3:72:c5:ff:ed:10:0f:30:
e9:44:fc:3d:d0:d3:b2:62:ff:7b:64:6b:28:be:52:
86:43:da:62:13:be:eb:23:33:e4:5b:ba:6e:57:86:
3f:90:6b:b2:53:30:d6:0d:2b:7c:f3:68:f2:f7:0d:
a4:46:5b:35:e4:1f:22:59:66:c7:4e:be:ae:3b:92:
27:f2:b0:c9:b1:45:ea:0c:de:a8:01:20:cf:1d:e7:
e7:6c:62:00:41:0e:b3:d9:ea:4b:65:3f:1b:56:68:
d8:4c:e0:c3:f9:fc:36:66:9d:fb:ee:c8:34:25:71:
c2:87:bf:b9:fe:df:ac:26:0c:4a:6d:c8:08:ae:61:
3a:69:ce:a7:53:1b:5d:46:a1:7a:c6:0b:d2:dc:e3:
5d:db:50:71:4e:f6:98:08:27:6d:d0:8e:dd:59:ed:
b3:9e:00:9f:7e:e9:9f:fa:f7:c5:94:14:7e:64:95:
1c:d8:d3:5a:1e:c7:77:69:28:50:ef:de:bb:a4:3c:
9e:ee:57:42:eb:3d:23:6e:e2:8e:41:c5:6c:33:b1:
36:e4:70:e9:93:88:97:d6:2c:92:15:60:83:ea:a9:
0d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A4:AF:A3:4D:DF:19:70:8E:E0:39:2E:EF:EF:3D:9E:98:9D:BB:D8
X509v3 Authority Key Identifier:
keyid:1C:21:7C:80:86:BE:29:D5:0F:83:C8:FD:8F:C9:17:B0:09:DE:3C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCF8gIa-KdUPg8j9j8kXsAnePIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ec:53:ba:9b:7a:05:29:0f:58:30:cc:ea:66:16:9d:9f:72:
7f:ca:27:f1:7b:c8:9d:ba:5a:bf:e6:4a:04:1b:c6:5b:ba:ec:
a4:54:e3:16:34:b0:57:8a:fb:25:b8:ba:1f:9b:c5:7c:f1:06:
a9:98:0a:31:a7:c4:5c:da:b0:f2:b9:83:59:fb:eb:17:32:bf:
c9:4c:0a:1b:ac:f5:09:1c:88:90:16:86:10:c0:bb:fd:25:0f:
85:40:85:44:3a:df:3b:91:66:0c:ea:4d:ad:32:d9:ca:1a:a0:
8e:88:c6:31:9e:8b:8b:8d:03:42:0f:86:f9:26:75:53:bb:b5:
2b:1b:45:f0:d8:7c:a0:2b:62:65:57:87:c6:b8:55:6b:85:c6:
c8:42:54:d3:ca:4c:86:0c:b0:8a:a0:52:bb:c6:a9:c4:cb:c0:
a6:19:09:0a:38:30:a7:a9:0d:0f:79:aa:5b:31:58:48:6a:b4:
56:63:63:50:91:e3:60:49:ee:42:06:93:fa:15:73:56:32:37:
12:7b:1c:b4:64:2c:4d:a4:dc:14:3a:7d:53:80:3a:4b:59:ea:
3d:a1:8b:b4:ae:4a:df:58:a1:d1:6c:c6:bf:d7:1a:2c:38:e4:
bd:99:83:63:04:c6:65:2c:ea:22:26:7c:94:16:27:33:bf:c4:
0b:02:85:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:55:33 2026 by rpki-client