Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
File: HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft (raw, json)
Hash identifier: u4eEJMxtmGrR791HsbcPQALXNARxWKh/etVUwO0QGoY=
Subject key identifier: 92:66:1A:B2:83:E3:68:4F:8A:97:0A:30:B9:E8:C6:A2:3F:F1:A3:0D
Authority key identifier: 1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93
Certificate issuer: /CN=1ccf33cf78477313c7382e89b17573ed68588b93
Certificate serial: 019E1E6C0F2E373CEBAAB7FA740C25ABCC61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
Manifest number: 0568
Signing time: Tue 12 May 2026 23:00:58 +0000
Manifest this update: Tue 12 May 2026 23:00:58 +0000
Manifest next update: Wed 13 May 2026 23:00:58 +0000
Files and hashes: 1: HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl (hash: 7/W7aadTcO9O8LjT71V5D6lubL+z2g+DZIroJrkmcBY=)
2: Za9edju3Ak6jIpbbM-dgDTiQRg8.roa (hash: 5PiTVwFMt5aJsM/PWU2Wdhe9NkgdD2qpEw6g00g9GxY=)
3: jv0W7SCTBDV-53bE6y5wuR0tMCc.roa (hash: m2zU6Y/u1fPjFOBkKoXsdbUv/jS40o/TC19x5+7xFPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:0f:2e:37:3c:eb:aa:b7:fa:74:0c:25:ab:cc:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccf33cf78477313c7382e89b17573ed68588b93
Validity
Not Before: May 12 23:00:58 2026 GMT
Not After : May 13 23:00:58 2026 GMT
Subject: CN=92661ab283e3684f8a970a30b9e8c6a23ff1a30d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b5:4e:d0:78:35:25:d5:0a:f1:16:0e:39:22:
55:23:0a:9c:56:85:9e:df:40:cf:b7:46:9a:78:08:
5d:8c:0b:37:3f:b7:4f:9b:7e:1e:ed:ba:4f:6a:10:
d6:12:c2:2f:44:0b:30:8b:27:8b:9f:b2:3e:7b:d2:
ed:ef:93:d7:d2:88:d2:d2:8b:ba:8f:3f:b1:44:6c:
68:c8:f9:76:30:73:ac:4e:c7:6a:e8:d7:a0:70:68:
5b:bd:0e:8c:c9:bd:ab:9d:77:67:33:71:24:5f:b1:
55:cb:3c:78:4f:1b:14:9d:90:8c:04:c4:67:55:d7:
67:9b:8d:8a:ec:95:4d:39:05:57:9b:25:80:6d:b1:
a5:21:63:f7:0c:df:fa:85:dc:93:5e:a6:26:e9:b2:
9b:0b:05:6f:bd:86:6e:ed:be:76:b7:ab:c4:f9:b6:
6d:c4:b7:63:e1:7d:65:3b:70:cb:5d:30:cf:a0:ff:
19:66:1e:9a:ae:13:48:a4:3c:2e:52:cb:5b:00:ca:
3e:63:8f:c2:a7:e5:8d:22:13:2c:a2:b7:27:ee:58:
0f:b2:e2:37:18:7d:1e:0b:04:be:c4:93:ec:0a:36:
85:e7:ba:db:67:16:c8:8a:75:a4:63:d1:ce:ef:6e:
12:8f:d9:f7:88:2d:ea:99:0d:56:41:90:e4:9d:1c:
63:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:66:1A:B2:83:E3:68:4F:8A:97:0A:30:B9:E8:C6:A2:3F:F1:A3:0D
X509v3 Authority Key Identifier:
keyid:1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:af:1f:96:c4:d3:2d:58:9c:fb:a7:6c:da:4c:ee:05:af:26:
98:8f:09:b3:ae:50:05:4e:5b:a2:2e:1a:49:7d:0a:cc:24:e6:
75:28:38:97:a4:33:6f:cb:f7:71:99:ed:be:79:71:6f:c7:96:
75:a3:23:df:4b:80:41:38:21:5a:cd:0d:fa:1a:29:b8:72:85:
5e:60:2a:eb:a4:8d:83:13:34:6f:c7:aa:fd:61:d0:dc:aa:99:
72:d2:79:81:93:ec:46:ac:d0:9e:50:20:25:46:14:e3:05:69:
43:06:b4:f4:8f:8e:a7:64:e2:69:23:27:d2:31:70:9a:e8:d1:
27:b7:24:fc:6c:b5:42:93:9c:e4:76:ae:b5:bc:ee:32:46:2b:
f1:89:2f:dc:fb:8c:5f:c2:da:ad:8a:76:4a:41:5a:39:4b:59:
f4:26:ce:91:7f:9d:b3:19:79:c2:7e:df:3a:f6:b9:12:2b:9a:
10:ea:9c:2c:c8:43:ea:82:6e:aa:99:70:bf:95:49:76:14:29:
b6:06:35:08:69:a9:dc:19:98:c7:0a:ee:50:f4:82:0c:c7:93:
d9:5c:04:18:0a:fe:5e:06:fe:23:89:1e:b0:6d:5a:c3:c4:6a:
2a:a6:b6:46:16:f7:c8:62:21:b7:13:99:11:ae:57:e4:17:27:
89:6f:0a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:30:58 2026 by rpki-client