Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
File: HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft (raw, json)
Hash identifier: SfRLUSLNYsni3SCw2WdLMZBEXhIPBiH+Pqk8KUVy9CU=
Subject key identifier: 75:B4:AD:67:0D:9D:AC:B8:40:1A:E7:FA:FA:8F:24:38:74:B0:4C:E2
Authority key identifier: 1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93
Certificate issuer: /CN=1ccf33cf78477313c7382e89b17573ed68588b93
Certificate serial: 01A1DE39D29986DCEC62D0008B07519E8FC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
Manifest number: 0759
Signing time: Sun 15 Nov 2026 08:01:33 +0000
Manifest this update: Sun 15 Nov 2026 08:01:33 +0000
Manifest next update: Mon 16 Nov 2026 08:01:33 +0000
Files and hashes: 1: HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl (hash: cnIPnDfl0HW33ivSUbWVUjHnXbOLnAJmMOwU7jO+jRk=)
2: Za9edju3Ak6jIpbbM-dgDTiQRg8.roa (hash: 5PiTVwFMt5aJsM/PWU2Wdhe9NkgdD2qpEw6g00g9GxY=)
3: jv0W7SCTBDV-53bE6y5wuR0tMCc.roa (hash: m2zU6Y/u1fPjFOBkKoXsdbUv/jS40o/TC19x5+7xFPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:d2:99:86:dc:ec:62:d0:00:8b:07:51:9e:8f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccf33cf78477313c7382e89b17573ed68588b93
Validity
Not Before: Nov 15 08:01:33 2026 GMT
Not After : Nov 16 08:01:33 2026 GMT
Subject: CN=75b4ad670d9dacb8401ae7fafa8f243874b04ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d9:00:c9:7c:a4:ff:7d:36:fa:93:d3:a0:89:
c5:69:f1:55:ed:b8:85:9b:dc:a6:00:d2:2c:1d:88:
b6:36:55:61:2d:10:0d:a3:e6:82:0b:8b:d6:6a:b4:
b2:41:78:6f:1c:fe:9d:26:b8:db:51:18:ce:44:c7:
ff:f2:19:f1:46:7c:60:e2:53:ee:95:3f:b9:82:72:
f1:b2:a6:a4:57:f9:53:be:3a:e9:1f:96:57:9f:1a:
31:ac:aa:34:ef:6b:4f:94:6a:f2:cf:1f:ba:87:37:
57:a7:af:e8:d3:88:96:37:19:c5:77:19:e6:e7:cc:
55:b8:cb:8d:b4:ab:fd:98:78:cb:e4:2d:e0:cd:9b:
a7:97:20:ec:95:92:b9:33:dc:8e:67:60:e8:01:dc:
42:cc:a7:8f:56:de:4d:29:4b:ea:74:8d:3f:a4:78:
fb:a3:e8:06:51:ce:92:1e:8b:e7:ca:93:3f:0b:6c:
a1:75:8a:bf:46:da:40:5f:fc:31:28:30:7a:1a:d7:
df:7d:d9:92:68:0d:4b:eb:77:5a:cc:1e:7e:9f:f1:
36:4e:ef:d3:f8:00:08:3d:7c:19:03:13:cd:45:e9:
92:4b:df:72:86:9f:b1:90:cf:97:4e:f3:99:f7:e4:
c4:ef:14:47:e3:29:77:12:d3:60:03:d2:b0:25:22:
12:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B4:AD:67:0D:9D:AC:B8:40:1A:E7:FA:FA:8F:24:38:74:B0:4C:E2
X509v3 Authority Key Identifier:
keyid:1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:36:6e:10:53:b3:24:8a:90:33:4a:31:82:1a:a6:a2:16:64:
9a:ba:69:51:fc:cb:39:5b:b7:55:94:55:aa:b3:61:ef:aa:94:
75:e8:90:30:dd:5f:cc:f6:1b:4b:47:6c:04:62:02:a7:f7:9b:
67:58:d8:89:7c:50:7b:05:3b:20:75:22:48:7c:70:27:09:ce:
e8:6e:65:37:f1:27:74:17:e2:bc:29:29:01:1a:00:1f:ba:07:
9d:f5:75:e3:5d:09:31:92:c4:d4:7f:be:62:98:fe:45:04:e9:
0e:d4:a7:a8:72:e9:22:af:c5:00:b2:89:62:cb:ad:99:db:ca:
55:fd:b8:ab:df:dd:34:ab:3a:29:e8:8e:50:4c:25:13:54:91:
c6:31:63:cc:c8:b4:75:7f:23:58:29:b2:6d:97:34:72:1c:c8:
de:63:d2:9a:39:be:40:26:69:ab:b1:ed:56:38:de:eb:03:66:
a6:86:a5:fe:b8:3f:80:65:4d:03:57:68:c2:22:82:17:81:38:
76:cd:38:eb:91:c7:35:5a:d4:d2:f2:55:33:5f:83:e8:b7:15:
cf:ce:10:b6:0a:19:a8:c0:83:42:78:0e:41:01:78:8e:d8:c0:
f7:ea:42:e7:6e:b4:bd:f5:26:f6:6f:0c:4b:c9:60:00:b5:06:
c6:e4:c4:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHeOdKZhtzsYtAAiwdRno/GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjY2YzM2NmNzg0NzczMTNjNzM4MmU4OWIxNzU3M2VkNjg1
ODhiOTMwHhcNMjYxMTE1MDgwMTMzWhcNMjYxMTE2MDgwMTMzWjAzMTEwLwYDVQQD
Eyg3NWI0YWQ2NzBkOWRhY2I4NDAxYWU3ZmFmYThmMjQzODc0YjA0Y2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNkAyXyk/302+pPToInFafFV7biF
m9ymANIsHYi2NlVhLRANo+aCC4vWarSyQXhvHP6dJrjbURjORMf/8hnxRnxg4lPu
lT+5gnLxsqakV/lTvjrpH5ZXnxoxrKo072tPlGryzx+6hzdXp6/o04iWNxnFdxnm
58xVuMuNtKv9mHjL5C3gzZunlyDslZK5M9yOZ2DoAdxCzKePVt5NKUvqdI0/pHj7
o+gGUc6SHovnypM/C2yhdYq/RtpAX/wxKDB6GtfffdmSaA1L63dazB5+n/E2Tu/T
+AAIPXwZAxPNRemSS99yhp+xkM+XTvOZ9+TE7xRH4yl3EtNgA9KwJSISAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHW0rWcNnay4QBrn+vqPJDh0sEziMB8GA1UdIwQY
MBaAFBzPM894R3MTxzguibF1c+1oWIuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSE04enozaEhjeFBIT0M2SnNYVno3V2hZaTVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9jZWYyN2UtOTkwMy00YzNmLTgwN2Mt
MTI4ZTAwNTNkY2NmLzEvSE04enozaEhjeFBIT0M2SnNYVno3V2hZaTVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9jZWYyN2UtOTkwMy00YzNmLTgwN2MtMTI4ZTAwNTNkY2Nm
LzEvSE04enozaEhjeFBIT0M2SnNYVno3V2hZaTVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGDZuEFOz
JIqQM0oxghqmohZkmrppUfzLOVu3VZRVqrNh76qUdeiQMN1fzPYbS0dsBGICp/eb
Z1jYiXxQewU7IHUiSHxwJwnO6G5lN/EndBfivCkpARoAH7oHnfV1410JMZLE1H++
Ypj+RQTpDtSnqHLpIq/FALKJYsutmdvKVf24q9/dNKs6KeiOUEwlE1SRxjFjzMi0
dX8jWCmybZc0chzI3mPSmjm+QCZpq7HtVjje6wNmpoal/rg/gGVNA1dowiKCF4E4
ds0465HHNVrU0vJVM1+D6LcVz84QtgoZqMCDQngOQQF4jtjA9+pC5260vfUm9m8M
S8lgALUGxuTEmQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:45:04 2026 by rpki-client