Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft
File: HCF8gIa-KdUPg8j9j8kXsAnePIE.mft (raw, json)
Hash identifier: bHCtbcReVtLWkP6HNdvpZ1BJQECu0bO5j2iqYqv1TH8=
Subject key identifier: F8:53:F4:C1:D6:76:EF:A3:D5:64:18:89:FE:4C:7E:A7:FA:B8:A6:4D
Authority key identifier: 1C:21:7C:80:86:BE:29:D5:0F:83:C8:FD:8F:C9:17:B0:09:DE:3C:81
Certificate issuer: /CN=1c217c8086be29d50f83c8fd8fc917b009de3c81
Certificate serial: 019D25F146648FD8B2401531EF34E56D4665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCF8gIa-KdUPg8j9j8kXsAnePIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft
Manifest number: 03AC
Signing time: Wed 25 Mar 2026 17:01:02 +0000
Manifest this update: Wed 25 Mar 2026 17:01:02 +0000
Manifest next update: Thu 26 Mar 2026 17:01:02 +0000
Files and hashes: 1: HCF8gIa-KdUPg8j9j8kXsAnePIE.crl (hash: YlG5NGkkYnBqKKemEECUq4HB1U010KGGrdIlzMtI4rc=)
2: Z5oga0vgbQ3IfY7AuGU9kvMREF8.roa (hash: S/HDTLw/C2HlzUoz5QYaSY1KLwcsf1KpKUZ68xZPy3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCF8gIa-KdUPg8j9j8kXsAnePIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:46:64:8f:d8:b2:40:15:31:ef:34:e5:6d:46:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c217c8086be29d50f83c8fd8fc917b009de3c81
Validity
Not Before: Mar 25 17:01:02 2026 GMT
Not After : Mar 26 17:01:02 2026 GMT
Subject: CN=f853f4c1d676efa3d5641889fe4c7ea7fab8a64d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5b:df:05:5a:6b:11:6d:c2:df:73:a5:3e:af:
71:88:ed:62:1e:7b:b1:18:3c:b3:d5:cb:d9:e2:67:
0d:fa:01:65:01:15:d5:6f:4d:7b:62:26:9f:5a:a8:
c9:e5:25:86:a7:8c:73:04:ea:b9:b9:61:2c:f2:38:
90:46:b0:14:d9:cc:9b:ed:36:3b:c7:00:b0:2d:fa:
a3:23:61:ed:57:2b:3e:d1:49:50:5d:c7:d6:be:47:
f1:aa:a8:d4:fd:3e:b4:5a:56:1e:ec:6e:35:86:ee:
fb:32:82:21:a2:70:a9:2e:13:7e:36:8c:c8:9e:ab:
72:67:15:7f:9d:da:62:77:36:13:ae:3e:33:f9:95:
83:df:3c:cb:be:c0:ed:f7:11:70:ea:9d:4b:3f:1c:
ba:5f:23:03:7e:3a:7c:ab:93:a3:dc:c2:15:94:5c:
3f:be:23:17:55:e2:1b:7d:dc:21:bb:9b:e7:f2:22:
0f:56:51:52:b1:be:63:74:2c:3c:68:44:38:fa:a6:
4d:db:21:d5:da:62:b1:6e:db:73:58:2c:5b:1b:c1:
9b:63:e6:6a:f5:47:e0:f6:44:d4:0a:d3:1f:d3:5c:
b6:50:c6:d8:83:c1:9d:12:74:ab:56:18:1c:68:0a:
fd:dc:83:9e:c9:06:0f:50:5c:ea:2b:bf:1d:07:b7:
d3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:53:F4:C1:D6:76:EF:A3:D5:64:18:89:FE:4C:7E:A7:FA:B8:A6:4D
X509v3 Authority Key Identifier:
keyid:1C:21:7C:80:86:BE:29:D5:0F:83:C8:FD:8F:C9:17:B0:09:DE:3C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCF8gIa-KdUPg8j9j8kXsAnePIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:39:a8:1d:0d:38:f0:30:91:2a:ed:9a:54:e1:74:5e:62:62:
5f:7f:a2:6c:22:d2:b8:56:c3:cd:5f:ef:da:e8:dc:0d:12:73:
b4:be:8f:b6:60:ab:0f:73:33:38:7b:04:4e:ed:03:9c:7e:67:
c3:87:c3:04:3c:31:78:ac:6c:9a:74:e0:0f:e1:04:aa:76:15:
5b:3f:80:42:aa:d3:6d:2c:98:64:14:34:04:a1:c9:51:b9:98:
35:59:cc:8f:4f:53:74:3e:f4:17:0c:37:60:08:37:c1:78:11:
39:60:41:37:1c:4f:51:aa:ba:f4:49:b5:6e:60:cd:25:83:43:
be:03:53:b5:6d:04:03:97:3d:ee:65:ff:ac:1d:6e:8d:ee:12:
c0:18:6f:2f:5e:42:31:a9:b0:4d:3a:06:0f:7e:41:7f:7c:0a:
e4:61:2e:87:ed:0d:c0:80:12:66:e9:cf:10:86:4c:2c:86:63:
9c:c4:43:00:da:fd:e4:a6:b5:39:c0:7c:e1:50:72:7a:21:35:
3f:86:7d:d2:04:3c:82:4b:13:91:35:37:2d:42:66:b8:d0:30:
fd:d5:3b:65:4f:e1:13:88:11:29:ab:ad:b3:25:29:cc:ac:a4:
09:51:6a:c2:61:e2:74:d6:f4:be:ba:5f:f3:96:bb:3c:22:b4:
12:d1:c8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:06 2026 by rpki-client