Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
File: HCcW7wn65JDMfNvTYJTbXz0KHHI.mft (raw, json)
Hash identifier: YAco+pv8sd8R8pfqwS1CBKdKNJfnbAyZwG/N0ITfUtM=
Subject key identifier: FC:FD:13:ED:1A:CF:DD:EB:9E:A3:52:8D:A1:A1:08:06:1A:B1:E5:58
Authority key identifier: 1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
Certificate issuer: /CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Certificate serial: 019F946E0F67F3293F8EA088FFE78B1A83E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
Manifest number: 0939
Signing time: Fri 24 Jul 2026 14:01:08 +0000
Manifest this update: Fri 24 Jul 2026 14:01:08 +0000
Manifest next update: Sat 25 Jul 2026 14:01:08 +0000
Files and hashes: 1: HCcW7wn65JDMfNvTYJTbXz0KHHI.crl (hash: JPQWZyZFepWdcEF1tHSzTADHPul4+n2bbZ1XWV0aVpg=)
2: Kl7ksgdkf5mddCaAPgAWOeKhVvg.roa (hash: rOa18GJtuQqpcGIrwGnhcp3m4z08/3Ol4xsmgiWc0ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6e:0f:67:f3:29:3f:8e:a0:88:ff:e7:8b:1a:83:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Validity
Not Before: Jul 24 14:01:08 2026 GMT
Not After : Jul 25 14:01:08 2026 GMT
Subject: CN=fcfd13ed1acfddeb9ea3528da1a108061ab1e558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:43:ee:70:54:e1:8f:2e:18:a9:30:70:31:35:
ba:14:61:01:a6:38:c6:60:96:e7:db:ac:e7:43:a2:
d1:a9:c3:91:40:50:ac:e4:4c:1e:44:81:8e:35:ce:
67:21:a4:21:7a:82:8d:3a:cc:c8:fe:73:55:2f:7a:
58:94:d1:2f:e1:94:4d:67:75:28:34:34:7c:92:5d:
5b:b7:81:a0:77:7a:09:d4:46:20:e0:35:24:39:70:
39:8c:53:f3:f6:08:b4:34:50:d2:e3:1d:70:e3:f4:
96:dc:d2:d2:6f:73:4b:ff:be:e0:a8:00:29:6a:ab:
00:ff:b5:b6:c2:bf:20:f1:0f:ee:9b:65:16:68:dd:
98:d0:1f:59:2d:48:09:b0:83:f9:83:37:4f:c2:c9:
4c:a0:89:c2:5d:b2:64:8d:8b:c3:30:cc:fe:7f:c5:
11:0e:3f:b9:92:02:28:60:ec:1a:15:bf:03:b7:21:
a7:46:21:45:86:91:de:4f:be:9b:01:54:da:f1:fe:
1b:a9:84:2f:79:0d:05:34:55:96:46:1f:df:87:2e:
bd:89:cb:5e:58:76:19:db:a9:2b:2d:97:40:9a:15:
c3:37:75:54:7c:0e:c1:6b:ca:35:f1:5d:f8:be:e4:
2b:7a:46:ac:e7:d4:56:59:e0:2a:4a:af:88:66:e0:
57:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FD:13:ED:1A:CF:DD:EB:9E:A3:52:8D:A1:A1:08:06:1A:B1:E5:58
X509v3 Authority Key Identifier:
keyid:1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:fd:f3:ca:65:35:3e:ff:4c:d8:1a:cf:9d:59:bb:90:a5:28:
c9:55:9d:89:65:fe:e8:fd:0f:e9:d3:42:31:f8:b2:84:38:53:
68:30:9b:0f:41:0f:a1:10:81:f1:0e:97:22:c8:7e:5d:b3:d5:
b6:54:cf:4b:91:3d:3d:cc:07:9c:cd:0f:a2:20:1e:be:c8:70:
5d:f8:cf:cb:ca:65:c0:cd:10:60:15:f5:31:9c:0d:47:a7:d4:
6d:95:6b:39:8d:a6:22:fb:ff:b5:e3:13:13:5c:fc:0a:47:0c:
80:33:80:5a:05:6a:f5:66:7d:27:e6:f1:5a:30:1f:f6:6a:9e:
c1:56:dc:cb:d1:d7:b7:3c:81:97:4c:b2:31:1a:70:3f:ff:61:
0a:54:c5:0b:df:6d:67:ff:e7:d7:f4:2c:0a:e1:a7:2d:6a:76:
6e:96:55:6b:19:3c:6f:31:2c:4c:a7:c7:61:4d:e0:47:e8:99:
c9:40:32:e1:b3:ed:43:99:c9:49:3e:e3:77:ce:2b:23:cd:07:
79:74:bf:b4:01:aa:20:54:81:5d:4d:54:c7:d6:62:5a:d1:d7:
5f:04:65:31:ec:27:91:2f:b5:b4:62:51:cc:36:a2:a8:f7:70:
ef:65:0d:6b:c8:d9:bf:06:d8:0f:ed:b0:da:5b:99:6d:f6:96:
58:99:e9:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ubg9n8yk/jqCI/+eLGoPnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMjcxNmVmMDlmYWU0OTBjYzdjZGJkMzYwOTRkYjVmM2Qw
YTFjNzIwHhcNMjYwNzI0MTQwMTA4WhcNMjYwNzI1MTQwMTA4WjAzMTEwLwYDVQQD
EyhmY2ZkMTNlZDFhY2ZkZGViOWVhMzUyOGRhMWExMDgwNjFhYjFlNTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkPucFThjy4YqTBwMTW6FGEBpjjG
YJbn26znQ6LRqcORQFCs5EweRIGONc5nIaQheoKNOszI/nNVL3pYlNEv4ZRNZ3Uo
NDR8kl1bt4Ggd3oJ1EYg4DUkOXA5jFPz9gi0NFDS4x1w4/SW3NLSb3NL/77gqAAp
aqsA/7W2wr8g8Q/um2UWaN2Y0B9ZLUgJsIP5gzdPwslMoInCXbJkjYvDMMz+f8UR
Dj+5kgIoYOwaFb8DtyGnRiFFhpHeT76bAVTa8f4bqYQveQ0FNFWWRh/fhy69icte
WHYZ26krLZdAmhXDN3VUfA7Ba8o18V34vuQrekas59RWWeAqSq+IZuBXjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPz9E+0az93rnqNSjaGhCAYaseVYMB8GA1UdIwQY
MBaAFBwnFu8J+uSQzHzb02CU2189ChxyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSENjVzd3bjY1SkRNZk52VFlKVGJYejBLSEhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82YTdlYTItYWJmZC00NGQyLWE3YWUt
MTRkMWFjMzRhNWYyLzEvSENjVzd3bjY1SkRNZk52VFlKVGJYejBLSEhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC82YTdlYTItYWJmZC00NGQyLWE3YWUtMTRkMWFjMzRhNWYy
LzEvSENjVzd3bjY1SkRNZk52VFlKVGJYejBLSEhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYv3zymU1
Pv9M2BrPnVm7kKUoyVWdiWX+6P0P6dNCMfiyhDhTaDCbD0EPoRCB8Q6XIsh+XbPV
tlTPS5E9PcwHnM0PoiAevshwXfjPy8plwM0QYBX1MZwNR6fUbZVrOY2mIvv/teMT
E1z8CkcMgDOAWgVq9WZ9J+bxWjAf9mqewVbcy9HXtzyBl0yyMRpwP/9hClTFC99t
Z//n1/QsCuGnLWp2bpZVaxk8bzEsTKfHYU3gR+iZyUAy4bPtQ5nJST7jd84rI80H
eXS/tAGqIFSBXU1Ux9ZiWtHXXwRlMewnkS+1tGJRzDaiqPdw72UNa8jZvwbYD+2w
2luZbfaWWJnp+Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:53:17 2026 by rpki-client