Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
File: HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft (raw, json)
Hash identifier: 1fecvZ8DUwcAlDlHmTsAXOUjXkVsun9i54zwoKNnlCk=
Subject key identifier: 55:FA:8F:0C:40:62:AC:61:9F:70:C9:35:1B:2D:CE:4D:4F:CF:29:EA
Authority key identifier: 1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93
Certificate issuer: /CN=1ccf33cf78477313c7382e89b17573ed68588b93
Certificate serial: 01A04C898ECE7C1062663A77ED336708D104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
Manifest number: 0689
Signing time: Sat 29 Aug 2026 08:01:18 +0000
Manifest this update: Sat 29 Aug 2026 08:01:18 +0000
Manifest next update: Sun 30 Aug 2026 08:01:18 +0000
Files and hashes: 1: HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl (hash: Ne6wxSFo9ljVm0aJrqNGPXXDmjoo+qpW701Lf2CYSlk=)
2: Za9edju3Ak6jIpbbM-dgDTiQRg8.roa (hash: 5PiTVwFMt5aJsM/PWU2Wdhe9NkgdD2qpEw6g00g9GxY=)
3: jv0W7SCTBDV-53bE6y5wuR0tMCc.roa (hash: m2zU6Y/u1fPjFOBkKoXsdbUv/jS40o/TC19x5+7xFPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Aug 2026 02:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4c:89:8e:ce:7c:10:62:66:3a:77:ed:33:67:08:d1:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccf33cf78477313c7382e89b17573ed68588b93
Validity
Not Before: Aug 29 08:01:18 2026 GMT
Not After : Aug 30 08:01:18 2026 GMT
Subject: CN=55fa8f0c4062ac619f70c9351b2dce4d4fcf29ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1b:3e:73:fd:2d:f1:e9:32:48:21:b4:71:a1:
76:6d:b9:5f:a6:fe:3c:04:47:1f:d1:bf:80:1b:82:
3d:5f:8f:45:8d:9d:e7:77:72:a8:e3:f6:94:1f:b4:
7e:b5:11:4b:f7:0e:6b:15:85:5c:c0:b0:3e:22:8e:
05:6b:b5:b5:44:fa:f7:df:5e:c7:20:eb:3f:49:b6:
fb:a9:44:6e:90:58:5e:9c:58:b6:0b:89:28:c2:39:
46:07:69:52:dd:e8:95:0b:fb:b6:5d:f4:d9:8c:e1:
de:cf:03:3f:2e:61:b4:68:25:7f:f6:cc:47:ce:b5:
c3:c1:94:63:22:41:ea:3e:ba:8e:f4:84:66:24:3f:
56:b7:14:63:94:50:a5:f0:fe:c7:a7:cb:2b:13:b7:
22:8f:a9:2a:21:af:3e:b0:4f:2f:38:30:18:7b:d2:
50:05:5b:0d:89:57:1d:55:bd:0a:4c:cb:9c:97:97:
c2:d1:52:ed:8b:b3:16:b2:85:d4:48:dd:d6:6a:54:
c2:b4:c7:4e:c6:d5:7a:f6:13:61:f8:73:d8:4f:ae:
76:c4:5d:9e:f5:fb:9f:a9:d0:eb:48:0d:86:69:34:
5a:93:d5:8d:2f:71:66:e3:a6:3f:7b:59:c5:6b:b9:
00:e7:ac:3f:44:86:51:96:18:f6:7e:0c:f2:36:57:
65:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FA:8F:0C:40:62:AC:61:9F:70:C9:35:1B:2D:CE:4D:4F:CF:29:EA
X509v3 Authority Key Identifier:
keyid:1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e2:29:21:8d:d1:9a:38:f2:e6:c2:27:5e:23:af:b1:9e:09:
cb:03:bb:c7:d3:35:29:5c:e8:24:d0:46:12:e7:b4:95:23:c3:
47:c7:4b:46:46:7f:00:ac:4f:28:81:9a:da:c3:1e:0b:09:92:
a2:30:84:ea:f1:f6:5f:39:76:81:de:6d:00:7d:58:7f:4c:a7:
59:da:16:57:53:d9:78:44:c6:af:2f:76:da:46:82:62:86:be:
71:9e:33:1a:79:21:df:ca:c6:2b:2f:37:dd:f5:3c:51:62:49:
95:94:1a:5e:23:7d:17:39:1f:55:4c:35:25:e5:73:a5:97:ad:
7c:79:a7:c4:57:86:41:c4:73:73:68:65:13:2c:ed:83:5a:97:
25:6d:73:d8:48:3d:a7:da:24:7d:75:d7:5f:9f:ec:be:27:85:
2b:95:e0:d0:41:44:3a:33:46:ed:52:f4:a1:95:40:30:f4:c0:
e0:c9:81:95:2c:a4:25:56:12:f2:9c:34:6a:55:7d:13:13:77:
65:93:28:f8:bd:ee:ed:0f:83:f5:b6:2c:53:f8:f7:9d:7e:cc:
f4:15:8b:58:20:3c:e0:72:59:75:79:83:33:2a:1e:22:93:9f:
a9:1f:62:98:8f:6b:9e:85:02:17:11:b7:54:d9:a6:75:88:c5:
16:6c:1a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 11:53:30 2026 by rpki-client