Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
File: HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft (raw, json)
Hash identifier: cD4NbDuc2ZOUC3+4qAqu7KAMLK8ou7EhHrcR6T3yatY=
Subject key identifier: E6:D8:FB:F6:74:BA:0A:7F:44:F9:55:0A:F9:86:23:19:C1:A7:E0:5B
Authority key identifier: 1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93
Certificate issuer: /CN=1ccf33cf78477313c7382e89b17573ed68588b93
Certificate serial: 019D3752E4303ADFB52CF13451FBF3497FE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
Manifest number: 04F0
Signing time: Sun 29 Mar 2026 02:01:12 +0000
Manifest this update: Sun 29 Mar 2026 02:01:12 +0000
Manifest next update: Mon 30 Mar 2026 02:01:12 +0000
Files and hashes: 1: HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl (hash: 5JhD4nMCvGC/oj8nyzTccRIgPUFUb+6Si3wQ1xn4j98=)
2: Za9edju3Ak6jIpbbM-dgDTiQRg8.roa (hash: 5PiTVwFMt5aJsM/PWU2Wdhe9NkgdD2qpEw6g00g9GxY=)
3: jIIHIKwEzlntc0Vy_0Y1xdxljqM.roa (hash: RKwW62ZY+qUagcWd9OQWWCF2AiuU+GfnzsEEdx/g/7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:e4:30:3a:df:b5:2c:f1:34:51:fb:f3:49:7f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccf33cf78477313c7382e89b17573ed68588b93
Validity
Not Before: Mar 29 02:01:12 2026 GMT
Not After : Mar 30 02:01:12 2026 GMT
Subject: CN=e6d8fbf674ba0a7f44f9550af9862319c1a7e05b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:46:04:1e:10:ef:bf:89:7d:75:b2:e1:32:57:
52:3b:74:cd:9c:ed:5e:10:f7:8a:6b:e9:36:ad:33:
2f:3e:86:16:3b:1a:bd:68:50:28:52:0a:4a:e8:27:
60:df:a2:67:c8:62:8d:1d:58:bb:08:61:29:43:65:
45:0b:05:04:fd:83:be:77:31:68:8a:13:09:15:52:
0a:80:ee:15:a0:4b:e3:b4:48:3c:71:10:53:b4:0d:
6a:8b:cd:fd:48:eb:25:db:d7:4f:43:bd:b5:b6:0c:
06:f0:07:d2:c5:24:ab:d6:a9:05:5a:c2:07:ef:32:
03:3c:f0:8f:65:98:6a:8f:ee:66:10:b0:34:fe:a3:
0d:05:a5:54:d1:9e:88:2f:6e:d5:b5:e8:75:da:11:
81:86:e6:19:0e:7a:92:0d:66:01:0b:84:cf:7c:4a:
ef:d5:51:26:98:e9:3e:7e:03:d4:1d:91:91:40:87:
8f:26:37:04:dc:89:78:83:40:57:73:c2:54:48:9d:
81:24:0d:72:a6:05:cb:fb:b1:02:8e:f1:c4:7e:48:
21:81:30:be:e0:bd:79:a0:d8:a9:93:38:21:25:99:
fa:50:b5:e0:ae:86:00:18:db:64:d9:26:2b:0d:01:
ed:44:93:c7:94:9e:0e:36:2c:74:52:48:25:54:96:
24:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D8:FB:F6:74:BA:0A:7F:44:F9:55:0A:F9:86:23:19:C1:A7:E0:5B
X509v3 Authority Key Identifier:
keyid:1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:4f:59:62:b0:68:4c:d8:a2:43:37:66:12:5c:d5:25:75:10:
e9:9d:51:ed:60:ed:0a:3a:fe:97:09:96:2a:d1:8f:b2:e0:bb:
12:db:b6:04:8a:c6:76:cb:11:c9:58:d8:cf:fc:d1:8c:12:10:
5a:c1:01:7e:4a:a5:4e:db:cb:59:b4:78:80:9f:88:57:be:94:
03:fb:62:b0:91:da:2d:ea:a6:d2:0b:e5:90:34:5b:dc:db:d8:
1d:00:1f:57:ed:ab:cb:c2:c7:1a:1e:c2:9d:2b:29:ad:db:5c:
95:b3:a8:57:d7:5f:c9:6b:07:ae:03:8b:b0:6a:a6:aa:f7:df:
73:7a:ef:4c:68:48:e6:bc:ef:e5:0e:23:f4:07:49:74:4b:12:
2f:b9:9f:d6:72:1c:df:65:42:13:95:a2:d6:1f:64:e3:7a:40:
00:13:04:a8:81:a4:be:8d:50:11:c4:d5:5c:ea:03:fe:57:ce:
68:9f:b2:99:d9:dc:4a:16:2f:f5:d7:25:7d:79:3e:1d:44:19:
39:48:a7:df:e0:05:8c:06:e0:34:cb:9a:82:53:2a:c2:ae:7c:
57:c6:d1:36:d6:61:ec:bf:89:5d:22:0d:d1:06:ac:60:fc:59:
a5:70:2c:e2:01:20:a6:13:6b:00:63:84:53:ba:de:eb:26:f9:
92:64:c9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:06 2026 by rpki-client