Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
File: HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft (raw, json)
Hash identifier: ZOpfBsgpQo3/xcv8rnqIWZa1Fp308wva59zUZRI/vnI=
Subject key identifier: EC:B7:02:3A:91:19:66:E9:7A:33:DC:EE:50:52:AB:43:24:78:CD:51
Authority key identifier: 1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93
Certificate issuer: /CN=1ccf33cf78477313c7382e89b17573ed68588b93
Certificate serial: 019F93241AFE8082D2C0204E02E7B159EF39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
Manifest number: 0629
Signing time: Fri 24 Jul 2026 08:00:44 +0000
Manifest this update: Fri 24 Jul 2026 08:00:44 +0000
Manifest next update: Sat 25 Jul 2026 08:00:44 +0000
Files and hashes: 1: HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl (hash: y/Opin13qvxjqliY0Lz92EkoFjiZjmPtqs/Aj5Bn6uc=)
2: Za9edju3Ak6jIpbbM-dgDTiQRg8.roa (hash: 5PiTVwFMt5aJsM/PWU2Wdhe9NkgdD2qpEw6g00g9GxY=)
3: jv0W7SCTBDV-53bE6y5wuR0tMCc.roa (hash: m2zU6Y/u1fPjFOBkKoXsdbUv/jS40o/TC19x5+7xFPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:1a:fe:80:82:d2:c0:20:4e:02:e7:b1:59:ef:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccf33cf78477313c7382e89b17573ed68588b93
Validity
Not Before: Jul 24 08:00:44 2026 GMT
Not After : Jul 25 08:00:44 2026 GMT
Subject: CN=ecb7023a911966e97a33dcee5052ab432478cd51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:53:d6:f5:e3:a2:77:15:6f:e2:7b:80:72:e8:
75:a8:55:64:17:80:b9:30:a9:fc:c0:63:4e:77:c3:
c8:02:95:12:63:ae:bf:44:f0:06:7d:a1:09:f8:84:
c4:15:c4:e4:2f:2d:f3:21:d8:11:a4:35:78:ad:de:
5f:5c:cb:eb:15:c9:2a:62:d0:24:5e:80:2d:b6:87:
68:e3:a3:81:23:d5:9a:12:bb:56:5f:0a:a4:82:33:
04:ee:cd:d5:46:62:ad:f9:71:ac:e8:a1:4c:b0:84:
fb:d3:4d:f8:42:50:e9:2b:8d:ef:87:ce:20:bb:8c:
40:8f:d4:0a:6f:f9:b2:61:95:cf:ca:ca:8f:37:ea:
24:a8:97:ad:20:82:21:a2:78:0e:b8:1c:9a:4a:93:
af:24:82:b2:f9:ad:ce:ae:1f:05:78:08:47:b5:c0:
47:b1:c2:7e:a7:4e:74:db:cc:ea:77:e9:36:cc:b1:
59:9e:44:86:bb:66:ea:8d:47:2e:d0:3e:49:cd:a5:
6c:ee:c5:5c:6b:62:2d:5f:5e:54:b1:73:b9:b7:fa:
26:42:f9:73:19:7e:c4:63:7c:6a:f4:e1:9a:0f:e8:
a5:34:19:01:68:45:bd:be:7d:b6:cf:89:c3:7d:f1:
2a:51:93:57:77:53:5d:dd:44:cf:62:0e:3b:c3:e7:
5a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B7:02:3A:91:19:66:E9:7A:33:DC:EE:50:52:AB:43:24:78:CD:51
X509v3 Authority Key Identifier:
keyid:1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:89:8a:f8:9d:60:17:48:2a:e3:9f:6d:7f:7e:37:02:e8:24:
92:de:85:b1:6a:1e:7c:9d:db:3c:4c:0b:06:1f:f4:1c:ff:16:
ec:48:7a:dc:2e:1a:72:8e:24:d5:e5:fd:7c:3f:52:65:f6:95:
2e:cd:27:67:c7:ee:c8:fa:b0:e6:2c:30:0e:32:0f:06:0f:4f:
9c:1a:b3:f3:d6:00:79:10:80:85:f7:ba:07:a9:9c:a7:c6:bd:
d2:d1:85:21:10:8a:23:ff:33:9e:e7:49:f4:c7:f1:95:00:85:
48:02:05:17:ae:38:96:de:e2:11:5c:b9:cb:fe:c0:73:fb:dc:
81:1b:c6:d7:bb:27:89:e9:7c:27:cc:83:ed:d2:56:fd:a3:be:
63:a1:46:1c:ff:c5:56:48:3d:cc:50:94:eb:d4:59:6a:f8:8a:
35:2e:fd:58:e4:8c:b3:2f:ce:84:36:87:7a:9c:a3:ef:9c:fd:
d3:a1:be:45:e9:be:15:09:0b:f7:f1:a7:d1:f1:55:bc:9f:6f:
78:68:9b:5b:06:89:73:da:45:9c:7e:98:4e:37:88:90:47:e8:
64:65:5b:f8:8f:29:7c:bd:d3:78:61:3b:26:d5:4b:86:5e:ee:
90:da:72:be:9a:83:61:52:ad:0e:fa:fe:8b:ca:09:0f:57:23:
07:b9:af:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TJBr+gILSwCBOAuexWe85MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjY2YzM2NmNzg0NzczMTNjNzM4MmU4OWIxNzU3M2VkNjg1
ODhiOTMwHhcNMjYwNzI0MDgwMDQ0WhcNMjYwNzI1MDgwMDQ0WjAzMTEwLwYDVQQD
EyhlY2I3MDIzYTkxMTk2NmU5N2EzM2RjZWU1MDUyYWI0MzI0NzhjZDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8FPW9eOidxVv4nuAcuh1qFVkF4C5
MKn8wGNOd8PIApUSY66/RPAGfaEJ+ITEFcTkLy3zIdgRpDV4rd5fXMvrFckqYtAk
XoAttodo46OBI9WaErtWXwqkgjME7s3VRmKt+XGs6KFMsIT70034QlDpK43vh84g
u4xAj9QKb/myYZXPysqPN+okqJetIIIhongOuByaSpOvJIKy+a3Orh8FeAhHtcBH
scJ+p05028zqd+k2zLFZnkSGu2bqjUcu0D5JzaVs7sVca2ItX15UsXO5t/omQvlz
GX7EY3xq9OGaD+ilNBkBaEW9vn22z4nDffEqUZNXd1Nd3UTPYg47w+daoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOy3AjqRGWbpejPc7lBSq0MkeM1RMB8GA1UdIwQY
MBaAFBzPM894R3MTxzguibF1c+1oWIuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSE04enozaEhjeFBIT0M2SnNYVno3V2hZaTVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9jZWYyN2UtOTkwMy00YzNmLTgwN2Mt
MTI4ZTAwNTNkY2NmLzEvSE04enozaEhjeFBIT0M2SnNYVno3V2hZaTVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9jZWYyN2UtOTkwMy00YzNmLTgwN2MtMTI4ZTAwNTNkY2Nm
LzEvSE04enozaEhjeFBIT0M2SnNYVno3V2hZaTVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApImK+J1g
F0gq459tf343Augkkt6FsWoefJ3bPEwLBh/0HP8W7Eh63C4aco4k1eX9fD9SZfaV
Ls0nZ8fuyPqw5iwwDjIPBg9PnBqz89YAeRCAhfe6B6mcp8a90tGFIRCKI/8znudJ
9MfxlQCFSAIFF644lt7iEVy5y/7Ac/vcgRvG17sniel8J8yD7dJW/aO+Y6FGHP/F
Vkg9zFCU69RZaviKNS79WOSMsy/OhDaHepyj75z906G+Rem+FQkL9/Gn0fFVvJ9v
eGibWwaJc9pFnH6YTjeIkEfoZGVb+I8pfL3TeGE7JtVLhl7ukNpyvpqDYVKtDvr+
i8oJD1cjB7mvow==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:34:51 2026 by rpki-client