Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft
File: HCF8gIa-KdUPg8j9j8kXsAnePIE.mft (raw, json)
Hash identifier: pTad/g84567jvy8GssBzgd6WMX3FvJrVFyEUe0KhFEU=
Subject key identifier: 3F:43:0D:D0:46:1F:9A:D2:B3:8E:A3:80:91:9E:A7:BE:D8:5D:E1:8A
Authority key identifier: 1C:21:7C:80:86:BE:29:D5:0F:83:C8:FD:8F:C9:17:B0:09:DE:3C:81
Certificate issuer: /CN=1c217c8086be29d50f83c8fd8fc917b009de3c81
Certificate serial: 019F86441E3E2D0031A70D85D8C9CC35B2B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCF8gIa-KdUPg8j9j8kXsAnePIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft
Manifest number: 04E7
Signing time: Tue 21 Jul 2026 20:00:38 +0000
Manifest this update: Tue 21 Jul 2026 20:00:38 +0000
Manifest next update: Wed 22 Jul 2026 20:00:38 +0000
Files and hashes: 1: HCF8gIa-KdUPg8j9j8kXsAnePIE.crl (hash: 29fCtdnMlIZc/1KcQ0lVhSLjVTK64FUnV3onHLktfis=)
2: Z5oga0vgbQ3IfY7AuGU9kvMREF8.roa (hash: S/HDTLw/C2HlzUoz5QYaSY1KLwcsf1KpKUZ68xZPy3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCF8gIa-KdUPg8j9j8kXsAnePIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:44:1e:3e:2d:00:31:a7:0d:85:d8:c9:cc:35:b2:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c217c8086be29d50f83c8fd8fc917b009de3c81
Validity
Not Before: Jul 21 20:00:38 2026 GMT
Not After : Jul 22 20:00:38 2026 GMT
Subject: CN=3f430dd0461f9ad2b38ea380919ea7bed85de18a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:54:46:b2:49:2d:5b:99:2e:2b:d7:51:94:af:
e1:67:e9:3a:34:ea:75:a7:9b:94:43:6b:8c:a7:fe:
32:1e:ed:1d:66:51:51:28:a4:98:58:6d:af:d2:a1:
a4:eb:15:31:e1:ae:d3:24:b5:7a:6c:05:21:39:c6:
7b:08:65:a9:2c:aa:11:93:56:04:af:98:51:eb:8b:
17:77:37:f7:fd:50:d5:31:0d:19:01:38:a7:89:ec:
d5:ca:99:2f:1b:4e:db:84:be:74:44:40:28:f1:cb:
f6:fa:1e:e1:0a:89:95:a5:5d:00:92:75:a1:ed:8b:
e1:41:27:08:ab:1d:3d:0c:2a:7e:b9:9d:e7:d1:12:
76:cf:42:ec:bd:97:b9:ac:9d:ce:28:aa:8f:af:48:
28:99:cc:0f:fd:88:23:a5:19:8d:19:15:81:ee:4c:
be:f1:8b:ba:27:16:d7:c8:75:6b:9a:d6:3c:fb:c1:
26:23:ba:50:6b:aa:5e:38:f5:2e:f4:d9:70:56:35:
46:cb:09:71:48:c0:82:26:5c:90:11:dd:e1:a0:f6:
c1:9f:91:f9:45:16:19:10:c3:7e:ce:2d:a1:d4:dd:
e0:5a:05:95:9f:0c:55:08:dc:f2:94:25:1f:b1:31:
bb:68:46:40:4e:2d:db:e1:17:8c:f9:0a:8a:50:e2:
8a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:43:0D:D0:46:1F:9A:D2:B3:8E:A3:80:91:9E:A7:BE:D8:5D:E1:8A
X509v3 Authority Key Identifier:
keyid:1C:21:7C:80:86:BE:29:D5:0F:83:C8:FD:8F:C9:17:B0:09:DE:3C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCF8gIa-KdUPg8j9j8kXsAnePIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:af:28:a6:5a:33:15:de:11:90:4d:66:b7:02:fe:81:cb:63:
43:6b:21:4d:7f:6a:72:f1:d5:be:3a:c0:52:8a:1a:40:4e:36:
a2:06:c5:f0:a9:36:8b:bf:60:63:b4:9a:78:d9:78:39:23:f2:
c7:1c:1b:42:a3:9b:1e:fb:da:3c:0c:f9:50:5d:a1:1a:3f:26:
fa:0a:5c:14:8c:0c:4e:91:eb:ba:ad:9c:2c:0c:53:ef:f8:3c:
94:73:7b:b2:fe:ff:74:e7:d5:06:4b:4b:cf:67:98:d9:e8:b5:
ec:ad:3d:1f:24:c5:43:20:1f:ae:31:bb:10:91:86:30:ca:11:
00:70:9c:80:5d:4a:3b:ba:f4:b7:c4:8b:ac:2d:a3:52:2c:96:
c6:a8:c5:38:67:97:90:0b:c1:43:a0:0f:d2:94:d1:01:ea:18:
45:f2:fb:3d:57:93:f9:4b:39:7e:b5:25:10:5e:d8:cb:1f:2f:
fe:0c:cb:d1:65:3f:1b:17:69:6f:14:b9:d9:1b:6b:1e:3a:ec:
bb:c7:7c:f5:1b:f5:87:49:4e:01:08:db:49:34:7b:95:4b:93:
af:8c:4b:c0:de:1e:e0:05:4d:cf:9e:50:3a:31:5f:14:48:a9:
08:37:ab:e8:7f:8c:18:15:7e:67:f7:17:36:02:5c:39:12:3a:
46:b2:dd:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+GRB4+LQAxpw2F2MnMNbKzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMjE3YzgwODZiZTI5ZDUwZjgzYzhmZDhmYzkxN2IwMDlk
ZTNjODEwHhcNMjYwNzIxMjAwMDM4WhcNMjYwNzIyMjAwMDM4WjAzMTEwLwYDVQQD
EygzZjQzMGRkMDQ2MWY5YWQyYjM4ZWEzODA5MTllYTdiZWQ4NWRlMThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVRGskktW5kuK9dRlK/hZ+k6NOp1
p5uUQ2uMp/4yHu0dZlFRKKSYWG2v0qGk6xUx4a7TJLV6bAUhOcZ7CGWpLKoRk1YE
r5hR64sXdzf3/VDVMQ0ZATiniezVypkvG07bhL50REAo8cv2+h7hComVpV0AknWh
7YvhQScIqx09DCp+uZ3n0RJ2z0LsvZe5rJ3OKKqPr0gomcwP/YgjpRmNGRWB7ky+
8Yu6JxbXyHVrmtY8+8EmI7pQa6peOPUu9NlwVjVGywlxSMCCJlyQEd3hoPbBn5H5
RRYZEMN+zi2h1N3gWgWVnwxVCNzylCUfsTG7aEZATi3b4ReM+QqKUOKKBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9DDdBGH5rSs46jgJGep77YXeGKMB8GA1UdIwQY
MBaAFBwhfICGvinVD4PI/Y/JF7AJ3jyBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSENGOGdJYS1LZFVQZzhqOWo4a1hzQW5lUElFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC84NmJiMDQtMDlkZi00MjJhLWI1Zjkt
ZjM0YjMxZDNiNDNjLzEvSENGOGdJYS1LZFVQZzhqOWo4a1hzQW5lUElFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC84NmJiMDQtMDlkZi00MjJhLWI1ZjktZjM0YjMxZDNiNDNj
LzEvSENGOGdJYS1LZFVQZzhqOWo4a1hzQW5lUElFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY68oploz
Fd4RkE1mtwL+gctjQ2shTX9qcvHVvjrAUooaQE42ogbF8Kk2i79gY7SaeNl4OSPy
xxwbQqObHvvaPAz5UF2hGj8m+gpcFIwMTpHruq2cLAxT7/g8lHN7sv7/dOfVBktL
z2eY2ei17K09HyTFQyAfrjG7EJGGMMoRAHCcgF1KO7r0t8SLrC2jUiyWxqjFOGeX
kAvBQ6AP0pTRAeoYRfL7PVeT+Us5frUlEF7Yyx8v/gzL0WU/GxdpbxS52RtrHjrs
u8d89Rv1h0lOAQjbSTR7lUuTr4xLwN4e4AVNz55QOjFfFEipCDer6H+MGBV+Z/cX
NgJcORI6RrLdOg==
-----END CERTIFICATE-----
Generated at Wed Jul 22 02:37:34 2026 by rpki-client