Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
File: HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft (raw, json)
Hash identifier: km6R0IAXdwTn99rXdAa0AKSdAlt1hIukI9cAv+L69RA=
Subject key identifier: 33:23:5C:A2:3E:EE:9A:DF:62:5A:8A:E2:49:AA:4D:94:B3:D6:9A:27
Authority key identifier: 1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93
Certificate issuer: /CN=1ccf33cf78477313c7382e89b17573ed68588b93
Certificate serial: 019E31BBEF05F473E077D088D065445CC419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
Manifest number: 0572
Signing time: Sat 16 May 2026 17:01:00 +0000
Manifest this update: Sat 16 May 2026 17:01:00 +0000
Manifest next update: Sun 17 May 2026 17:01:00 +0000
Files and hashes: 1: HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl (hash: nxorwK3MENpxx1pNi9FrBcZIZf90a/KoMz31IZ4clkM=)
2: Za9edju3Ak6jIpbbM-dgDTiQRg8.roa (hash: 5PiTVwFMt5aJsM/PWU2Wdhe9NkgdD2qpEw6g00g9GxY=)
3: jv0W7SCTBDV-53bE6y5wuR0tMCc.roa (hash: m2zU6Y/u1fPjFOBkKoXsdbUv/jS40o/TC19x5+7xFPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 17:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:bb:ef:05:f4:73:e0:77:d0:88:d0:65:44:5c:c4:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccf33cf78477313c7382e89b17573ed68588b93
Validity
Not Before: May 16 17:01:00 2026 GMT
Not After : May 17 17:01:00 2026 GMT
Subject: CN=33235ca23eee9adf625a8ae249aa4d94b3d69a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:88:8d:e8:34:d1:82:e4:65:99:52:7e:9f:25:
fd:2a:b2:2e:4d:69:37:a8:65:09:df:56:d2:fd:88:
03:5a:42:7e:38:d8:e9:eb:50:a8:50:a5:7a:6f:5a:
82:59:5c:74:f4:c6:60:db:1a:47:62:8d:c1:70:94:
4b:08:13:58:26:24:f6:a2:50:00:e3:15:7a:51:cb:
d4:09:1a:e3:e9:0c:b4:57:07:79:b7:6d:c2:c3:e0:
50:97:8f:7f:7d:c2:63:20:89:f6:9e:82:aa:97:a9:
9f:df:b0:9d:6f:7f:77:c3:14:e8:4e:39:7b:cb:a2:
1c:e3:27:d8:a2:ad:e8:8c:4b:4d:17:0e:57:b5:ac:
38:90:f5:cd:bc:7b:48:fa:5c:9b:8c:bf:92:6b:68:
cd:c5:57:f7:02:71:29:84:a6:7a:2b:f7:84:f9:42:
7f:ff:d9:b8:63:88:6b:73:af:d8:aa:68:df:5b:75:
3b:0f:37:c0:e1:7a:3f:94:ba:50:6c:28:8e:7c:70:
19:ed:61:68:3b:2e:cd:ef:6a:68:93:0f:59:92:07:
29:9f:b9:eb:c2:12:42:8d:c4:eb:8a:68:e3:3d:99:
43:8f:43:62:4c:00:c3:47:fe:6b:ec:90:2d:32:7d:
ae:87:04:31:24:e7:d8:18:57:f0:1c:79:bb:bc:6e:
1e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:23:5C:A2:3E:EE:9A:DF:62:5A:8A:E2:49:AA:4D:94:B3:D6:9A:27
X509v3 Authority Key Identifier:
keyid:1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ae:00:83:49:06:06:c2:8a:32:56:ea:f9:83:f9:40:e4:40:
f8:d1:96:9e:f9:30:13:ff:27:52:19:3e:94:52:ab:be:44:78:
73:46:29:5d:fa:30:eb:7b:ea:a7:fd:fd:03:95:88:ff:19:e3:
1f:c9:f2:05:8e:73:ec:f4:70:49:6b:9d:a2:e7:b7:e0:55:e3:
3f:65:87:7d:dc:ec:3c:3b:7c:91:1d:2d:5c:0a:85:fd:4e:51:
73:77:ed:7e:e6:bf:c2:b5:1e:a7:14:c5:bb:bf:70:25:8f:00:
e0:53:30:7b:bf:bc:00:3b:0c:ee:57:4f:d9:78:8e:2f:7c:97:
d8:d3:d2:c1:43:88:19:52:09:96:c9:c4:73:99:ca:70:7e:c9:
81:fa:17:20:81:41:e9:60:d3:ec:82:14:d2:1d:7b:10:9e:e9:
8d:7c:5d:b7:4a:7b:7e:4d:5e:19:41:9d:fb:2d:8c:ac:79:c1:
6a:89:73:7a:f1:86:8e:64:e3:9f:c1:3a:69:9a:61:9e:78:a5:
29:42:15:e8:63:c5:26:97:c3:49:47:3c:51:c3:cb:5f:7e:2d:
f6:a0:9c:f9:7b:13:21:75:82:40:41:70:21:66:ef:21:16:77:
ba:7c:44:1f:ad:93:c0:11:1b:8c:d6:47:32:4d:67:42:2d:64:
5c:3d:c2:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xu+8F9HPgd9CI0GVEXMQZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjY2YzM2NmNzg0NzczMTNjNzM4MmU4OWIxNzU3M2VkNjg1
ODhiOTMwHhcNMjYwNTE2MTcwMTAwWhcNMjYwNTE3MTcwMTAwWjAzMTEwLwYDVQQD
EygzMzIzNWNhMjNlZWU5YWRmNjI1YThhZTI0OWFhNGQ5NGIzZDY5YTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIiN6DTRguRlmVJ+nyX9KrIuTWk3
qGUJ31bS/YgDWkJ+ONjp61CoUKV6b1qCWVx09MZg2xpHYo3BcJRLCBNYJiT2olAA
4xV6UcvUCRrj6Qy0Vwd5t23Cw+BQl49/fcJjIIn2noKql6mf37Cdb393wxToTjl7
y6Ic4yfYoq3ojEtNFw5Xtaw4kPXNvHtI+lybjL+Sa2jNxVf3AnEphKZ6K/eE+UJ/
/9m4Y4hrc6/YqmjfW3U7DzfA4Xo/lLpQbCiOfHAZ7WFoOy7N72pokw9Zkgcpn7nr
whJCjcTrimjjPZlDj0NiTADDR/5r7JAtMn2uhwQxJOfYGFfwHHm7vG4eVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMjXKI+7prfYlqK4kmqTZSz1ponMB8GA1UdIwQY
MBaAFBzPM894R3MTxzguibF1c+1oWIuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSE04enozaEhjeFBIT0M2SnNYVno3V2hZaTVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9jZWYyN2UtOTkwMy00YzNmLTgwN2Mt
MTI4ZTAwNTNkY2NmLzEvSE04enozaEhjeFBIT0M2SnNYVno3V2hZaTVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9jZWYyN2UtOTkwMy00YzNmLTgwN2MtMTI4ZTAwNTNkY2Nm
LzEvSE04enozaEhjeFBIT0M2SnNYVno3V2hZaTVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeK4Ag0kG
BsKKMlbq+YP5QORA+NGWnvkwE/8nUhk+lFKrvkR4c0YpXfow63vqp/39A5WI/xnj
H8nyBY5z7PRwSWudoue34FXjP2WHfdzsPDt8kR0tXAqF/U5Rc3ftfua/wrUepxTF
u79wJY8A4FMwe7+8ADsM7ldP2XiOL3yX2NPSwUOIGVIJlsnEc5nKcH7JgfoXIIFB
6WDT7IIU0h17EJ7pjXxdt0p7fk1eGUGd+y2MrHnBaolzevGGjmTjn8E6aZphnnil
KUIV6GPFJpfDSUc8UcPLX34t9qCc+XsTIXWCQEFwIWbvIRZ3unxEH62TwBEbjNZH
Mk1nQi1kXD3CPA==
-----END CERTIFICATE-----
Generated at Sun May 17 02:05:46 2026 by rpki-client