Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
File: HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft (raw, json)
Hash identifier: 2zr1YY2rsaA06BJCjZvgEEX0nCtQnW0Iefo/Ho5Zs3s=
Subject key identifier: 93:86:AC:1B:DB:75:AA:F8:F2:61:63:CF:4F:CA:AF:D0:A9:C6:1D:4B
Authority key identifier: 1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93
Certificate issuer: /CN=1ccf33cf78477313c7382e89b17573ed68588b93
Certificate serial: 01A1667D6AD0D8E6C387ABCC655EEFF83598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
Manifest number: 071B
Signing time: Fri 23 Oct 2026 02:00:57 +0000
Manifest this update: Fri 23 Oct 2026 02:00:57 +0000
Manifest next update: Sat 24 Oct 2026 02:00:57 +0000
Files and hashes: 1: HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl (hash: 50fUy+oDa5SPzzwwpLn0G4lnGDkejNw8FIfRk0TFEoc=)
2: Za9edju3Ak6jIpbbM-dgDTiQRg8.roa (hash: 5PiTVwFMt5aJsM/PWU2Wdhe9NkgdD2qpEw6g00g9GxY=)
3: jv0W7SCTBDV-53bE6y5wuR0tMCc.roa (hash: m2zU6Y/u1fPjFOBkKoXsdbUv/jS40o/TC19x5+7xFPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:66:7d:6a:d0:d8:e6:c3:87:ab:cc:65:5e:ef:f8:35:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccf33cf78477313c7382e89b17573ed68588b93
Validity
Not Before: Oct 23 02:00:57 2026 GMT
Not After : Oct 24 02:00:57 2026 GMT
Subject: CN=9386ac1bdb75aaf8f26163cf4fcaafd0a9c61d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2d:14:40:c6:0e:09:52:35:43:2e:86:2d:be:
70:0d:95:8a:8b:11:d1:90:5b:84:11:47:f4:eb:d8:
d4:09:eb:85:24:78:5e:5b:7b:c6:87:3a:cb:8b:17:
81:a4:9b:45:52:78:12:f5:1a:28:f0:8f:aa:49:59:
07:93:cb:a7:32:8f:b1:8d:ac:45:fc:e9:5a:31:31:
ea:81:58:a0:b4:29:a6:3e:06:58:81:0b:ac:96:81:
9a:5a:69:b2:50:fa:02:7e:57:27:19:71:04:eb:03:
f3:ec:a1:f2:86:81:85:8c:14:7b:27:eb:41:22:ca:
5b:a1:01:8c:1c:4e:82:49:dc:cb:e7:eb:cc:93:6c:
fe:0b:e7:80:b6:70:30:f3:07:5e:74:b7:1b:8b:5a:
63:88:db:d4:f4:ff:ba:26:a5:39:b0:a1:60:28:64:
f4:14:b7:9f:4e:93:b6:d0:a3:92:f5:de:d0:43:38:
39:35:ee:13:47:f7:4b:e4:a9:77:bb:98:c4:0f:27:
5e:c3:5a:67:22:ac:70:21:06:d4:c7:62:05:18:c6:
3d:c5:24:89:a4:21:34:72:bd:31:a2:71:86:4d:02:
62:71:f5:18:45:4b:ec:0a:37:71:bb:0d:e6:8b:d7:
2c:e1:2a:ad:53:2b:56:74:68:62:bd:6d:8e:45:a4:
7d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:86:AC:1B:DB:75:AA:F8:F2:61:63:CF:4F:CA:AF:D0:A9:C6:1D:4B
X509v3 Authority Key Identifier:
keyid:1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:97:7f:b8:97:ec:44:0a:d8:e5:b2:be:1a:ac:2e:7c:54:0f:
1a:ba:6d:9a:cc:c8:0b:c6:a0:ce:05:15:27:28:b4:09:4d:8b:
45:01:9e:8f:ba:5e:60:49:38:85:e8:1c:6d:77:da:ed:2d:42:
4c:76:20:bd:6b:b7:f4:2f:02:2a:65:96:3b:49:7f:00:bd:71:
ec:20:5a:6e:00:f3:a2:d0:06:76:d7:92:f1:d7:a6:02:04:30:
6e:42:65:5d:47:37:ba:14:2d:22:d0:a6:fe:71:52:eb:71:95:
eb:a9:ce:59:3b:ab:21:27:ad:b0:0f:9e:9d:f9:cc:aa:9a:dc:
e8:e8:c3:4d:b5:f8:77:14:86:f7:e2:5c:5d:c8:26:20:e5:41:
cc:43:72:b4:8e:20:7c:72:c0:b3:79:0a:a2:61:40:c7:66:6d:
b2:21:57:4a:89:41:ee:a7:a4:9b:1e:0e:11:86:d3:39:2b:e3:
23:3a:b9:e7:4e:6a:9a:10:89:01:df:f5:30:2a:85:18:11:42:
f9:78:a2:f6:12:9f:38:c6:c7:91:09:db:a5:ca:56:c0:f5:fb:
4b:49:1c:68:d2:82:cf:64:c5:6d:27:c7:f1:39:01:dc:1e:58:
4c:1b:20:50:41:72:bb:2a:43:e9:44:5f:ea:35:f9:ef:39:6a:
53:e3:dd:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFmfWrQ2ObDh6vMZV7v+DWYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjY2YzM2NmNzg0NzczMTNjNzM4MmU4OWIxNzU3M2VkNjg1
ODhiOTMwHhcNMjYxMDIzMDIwMDU3WhcNMjYxMDI0MDIwMDU3WjAzMTEwLwYDVQQD
Eyg5Mzg2YWMxYmRiNzVhYWY4ZjI2MTYzY2Y0ZmNhYWZkMGE5YzYxZDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjS0UQMYOCVI1Qy6GLb5wDZWKixHR
kFuEEUf069jUCeuFJHheW3vGhzrLixeBpJtFUngS9Roo8I+qSVkHk8unMo+xjaxF
/OlaMTHqgVigtCmmPgZYgQusloGaWmmyUPoCflcnGXEE6wPz7KHyhoGFjBR7J+tB
IspboQGMHE6CSdzL5+vMk2z+C+eAtnAw8wdedLcbi1pjiNvU9P+6JqU5sKFgKGT0
FLefTpO20KOS9d7QQzg5Ne4TR/dL5Kl3u5jEDydew1pnIqxwIQbUx2IFGMY9xSSJ
pCE0cr0xonGGTQJicfUYRUvsCjdxuw3mi9cs4SqtUytWdGhivW2ORaR94QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJOGrBvbdar48mFjz0/Kr9Cpxh1LMB8GA1UdIwQY
MBaAFBzPM894R3MTxzguibF1c+1oWIuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSE04enozaEhjeFBIT0M2SnNYVno3V2hZaTVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9jZWYyN2UtOTkwMy00YzNmLTgwN2Mt
MTI4ZTAwNTNkY2NmLzEvSE04enozaEhjeFBIT0M2SnNYVno3V2hZaTVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9jZWYyN2UtOTkwMy00YzNmLTgwN2MtMTI4ZTAwNTNkY2Nm
LzEvSE04enozaEhjeFBIT0M2SnNYVno3V2hZaTVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgJd/uJfs
RArY5bK+GqwufFQPGrptmszIC8agzgUVJyi0CU2LRQGej7peYEk4hegcbXfa7S1C
THYgvWu39C8CKmWWO0l/AL1x7CBabgDzotAGdteS8demAgQwbkJlXUc3uhQtItCm
/nFS63GV66nOWTurISetsA+enfnMqprc6OjDTbX4dxSG9+JcXcgmIOVBzENytI4g
fHLAs3kKomFAx2ZtsiFXSolB7qekmx4OEYbTOSvjIzq5505qmhCJAd/1MCqFGBFC
+Xii9hKfOMbHkQnbpcpWwPX7S0kcaNKCz2TFbSfH8TkB3B5YTBsgUEFyuypD6URf
6jX57zlqU+PdCg==
-----END CERTIFICATE-----
Generated at Fri Oct 23 06:07:14 2026 by rpki-client