Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft
File: HCF8gIa-KdUPg8j9j8kXsAnePIE.mft (raw, json)
Hash identifier: JJV1Hn5KYejzkEIXTkQPx7vo3/jazciSrss4IaA9dn0=
Subject key identifier: 96:FC:BC:7D:67:9F:09:00:E4:8B:49:C3:F1:56:7D:33:24:26:1D:39
Authority key identifier: 1C:21:7C:80:86:BE:29:D5:0F:83:C8:FD:8F:C9:17:B0:09:DE:3C:81
Certificate issuer: /CN=1c217c8086be29d50f83c8fd8fc917b009de3c81
Certificate serial: 01A13CA5A5C0E12A660AFE131B66B8375BA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCF8gIa-KdUPg8j9j8kXsAnePIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft
Manifest number: 05CA
Signing time: Wed 14 Oct 2026 23:00:51 +0000
Manifest this update: Wed 14 Oct 2026 23:00:51 +0000
Manifest next update: Thu 15 Oct 2026 23:00:51 +0000
Files and hashes: 1: HCF8gIa-KdUPg8j9j8kXsAnePIE.crl (hash: MWOpnnFWTJC8wVimPOoGSrIRpYkPX1ttRfg2OydbyUc=)
2: Z5oga0vgbQ3IfY7AuGU9kvMREF8.roa (hash: S/HDTLw/C2HlzUoz5QYaSY1KLwcsf1KpKUZ68xZPy3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCF8gIa-KdUPg8j9j8kXsAnePIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:a5:a5:c0:e1:2a:66:0a:fe:13:1b:66:b8:37:5b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c217c8086be29d50f83c8fd8fc917b009de3c81
Validity
Not Before: Oct 14 23:00:51 2026 GMT
Not After : Oct 15 23:00:51 2026 GMT
Subject: CN=96fcbc7d679f0900e48b49c3f1567d3324261d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c3:91:4e:38:d3:19:33:a9:a5:1f:41:35:2e:
2f:dc:68:0c:ba:30:85:51:60:bf:64:fc:7a:7f:be:
5f:01:d7:9c:f4:43:18:f8:88:ce:14:71:a5:b6:47:
a5:be:76:cb:36:3e:bc:df:05:92:93:aa:b7:61:b6:
e0:60:6c:e3:4f:b8:8d:c5:49:db:62:93:9f:30:bc:
bb:76:0b:b1:c6:d5:0a:d2:ad:6b:d2:2c:df:32:e8:
7c:e0:c5:af:78:8f:18:dc:2c:cd:a5:ac:c2:2c:d0:
df:94:a6:25:e1:52:53:8f:92:0e:20:56:b0:3c:cc:
11:fe:be:cc:4e:be:be:07:ad:75:62:ed:86:65:9f:
5a:c3:56:e4:85:eb:52:de:3a:b6:3c:62:dd:0b:0b:
32:ba:3f:dc:9c:d3:88:f8:ab:bd:a5:69:12:52:b3:
65:7a:f4:7a:ec:a6:8e:ba:ed:ec:32:a9:55:4c:9d:
b6:15:8e:04:5c:3e:cf:dd:c7:40:22:51:4e:59:8b:
4c:fd:1d:c8:52:b8:c8:63:c5:22:76:d2:16:71:e8:
14:04:0a:22:a8:7c:95:ed:0c:f6:7f:68:7f:1e:10:
70:26:78:5a:8f:c8:30:f2:45:f6:40:e7:6c:a5:01:
cd:da:2c:73:16:92:90:8d:38:8e:e5:81:b6:30:e6:
93:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FC:BC:7D:67:9F:09:00:E4:8B:49:C3:F1:56:7D:33:24:26:1D:39
X509v3 Authority Key Identifier:
keyid:1C:21:7C:80:86:BE:29:D5:0F:83:C8:FD:8F:C9:17:B0:09:DE:3C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCF8gIa-KdUPg8j9j8kXsAnePIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:3b:12:76:f4:34:67:6e:bc:de:94:4d:c6:bd:d0:a2:63:1a:
a5:93:1c:2b:7c:aa:e4:f7:14:b0:72:bd:0b:f0:03:17:65:e7:
00:6d:d8:ac:a0:35:42:ab:a0:46:33:63:dd:80:a4:26:b0:1f:
f4:a3:3c:8b:37:af:14:be:03:5f:c1:ff:16:e3:76:c1:95:d9:
3c:db:42:b7:11:4c:d5:42:7a:5e:42:67:49:80:91:13:6d:f3:
b1:78:4d:4d:80:fe:cf:49:02:ca:37:3e:7c:66:91:15:ca:b6:
75:e4:a4:55:9e:07:32:ba:a1:73:c5:52:3a:bf:bd:c8:92:f7:
ee:08:9e:31:81:a1:f7:0f:f8:98:47:f0:4c:51:fd:85:7d:5e:
3b:0f:9e:c1:5e:3d:de:d3:c0:15:f9:07:70:33:1b:3e:ad:20:
8e:dd:eb:0b:50:25:36:8e:f9:f2:d5:c6:49:38:ab:99:4e:9f:
42:44:82:0b:e5:8a:08:67:0c:c5:59:9e:98:a3:28:eb:19:95:
5d:d6:54:07:43:83:f9:5d:9f:ce:a4:d7:dd:55:42:97:82:74:
33:0e:b9:17:e2:6f:d7:2d:a6:77:61:7a:f2:9e:cc:a6:5d:09:
2d:91:ff:46:5a:18:60:49:29:90:e3:e2:91:5c:17:63:fa:0a:
e0:77:f4:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE8paXA4SpmCv4TG2a4N1ugMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMjE3YzgwODZiZTI5ZDUwZjgzYzhmZDhmYzkxN2IwMDlk
ZTNjODEwHhcNMjYxMDE0MjMwMDUxWhcNMjYxMDE1MjMwMDUxWjAzMTEwLwYDVQQD
Eyg5NmZjYmM3ZDY3OWYwOTAwZTQ4YjQ5YzNmMTU2N2QzMzI0MjYxZDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8ORTjjTGTOppR9BNS4v3GgMujCF
UWC/ZPx6f75fAdec9EMY+IjOFHGltkelvnbLNj683wWSk6q3YbbgYGzjT7iNxUnb
YpOfMLy7dguxxtUK0q1r0izfMuh84MWveI8Y3CzNpazCLNDflKYl4VJTj5IOIFaw
PMwR/r7MTr6+B611Yu2GZZ9aw1bkhetS3jq2PGLdCwsyuj/cnNOI+Ku9pWkSUrNl
evR67KaOuu3sMqlVTJ22FY4EXD7P3cdAIlFOWYtM/R3IUrjIY8UidtIWcegUBAoi
qHyV7Qz2f2h/HhBwJnhaj8gw8kX2QOdspQHN2ixzFpKQjTiO5YG2MOaTMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJb8vH1nnwkA5ItJw/FWfTMkJh05MB8GA1UdIwQY
MBaAFBwhfICGvinVD4PI/Y/JF7AJ3jyBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSENGOGdJYS1LZFVQZzhqOWo4a1hzQW5lUElFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC84NmJiMDQtMDlkZi00MjJhLWI1Zjkt
ZjM0YjMxZDNiNDNjLzEvSENGOGdJYS1LZFVQZzhqOWo4a1hzQW5lUElFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC84NmJiMDQtMDlkZi00MjJhLWI1ZjktZjM0YjMxZDNiNDNj
LzEvSENGOGdJYS1LZFVQZzhqOWo4a1hzQW5lUElFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVTsSdvQ0
Z2683pRNxr3QomMapZMcK3yq5PcUsHK9C/ADF2XnAG3YrKA1QqugRjNj3YCkJrAf
9KM8izevFL4DX8H/FuN2wZXZPNtCtxFM1UJ6XkJnSYCRE23zsXhNTYD+z0kCyjc+
fGaRFcq2deSkVZ4HMrqhc8VSOr+9yJL37gieMYGh9w/4mEfwTFH9hX1eOw+ewV49
3tPAFfkHcDMbPq0gjt3rC1AlNo758tXGSTirmU6fQkSCC+WKCGcMxVmemKMo6xmV
XdZUB0OD+V2fzqTX3VVCl4J0Mw65F+Jv1y2md2F68p7Mpl0JLZH/RloYYEkpkOPi
kVwXY/oK4Hf0pQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 08:20:16 2026 by rpki-client