Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
File: HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft (raw, json)
Hash identifier: /u/NX6CVgVv/9PGEF3C5oz3DkLdWkB+ix01Hnhtt2P4=
Subject key identifier: 9A:95:85:3C:80:B1:3A:AF:12:8A:1F:2B:05:F0:7E:B5:80:C8:BF:4B
Authority key identifier: 1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93
Certificate issuer: /CN=1ccf33cf78477313c7382e89b17573ed68588b93
Certificate serial: 019F4F8D12D42E27070F088F0DF588DBCA1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
Manifest number: 0606
Signing time: Sat 11 Jul 2026 05:01:13 +0000
Manifest this update: Sat 11 Jul 2026 05:01:13 +0000
Manifest next update: Sun 12 Jul 2026 05:01:13 +0000
Files and hashes: 1: HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl (hash: Zst1OJaZ8YTja/OpJpt7xYUnDsGeU0M+AwV7q3otXIs=)
2: Za9edju3Ak6jIpbbM-dgDTiQRg8.roa (hash: 5PiTVwFMt5aJsM/PWU2Wdhe9NkgdD2qpEw6g00g9GxY=)
3: jv0W7SCTBDV-53bE6y5wuR0tMCc.roa (hash: m2zU6Y/u1fPjFOBkKoXsdbUv/jS40o/TC19x5+7xFPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4f:8d:12:d4:2e:27:07:0f:08:8f:0d:f5:88:db:ca:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccf33cf78477313c7382e89b17573ed68588b93
Validity
Not Before: Jul 11 05:01:13 2026 GMT
Not After : Jul 12 05:01:13 2026 GMT
Subject: CN=9a95853c80b13aaf128a1f2b05f07eb580c8bf4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:af:14:a2:79:54:18:e1:42:4c:bd:74:3d:a2:
d3:f7:96:2c:54:d3:90:71:a6:9e:94:1c:67:96:01:
b1:b0:0e:d7:c2:82:13:0f:0e:4d:8a:35:44:12:78:
b6:6d:64:86:a9:21:11:18:17:17:6e:d6:8f:a1:ff:
35:03:ef:95:d2:36:8c:fa:7f:a2:fb:e3:53:13:00:
b7:fa:a8:6e:20:6b:c4:47:f4:89:36:97:2a:b2:fc:
0f:1e:f8:e7:be:db:89:7b:bc:40:bc:84:64:2d:50:
5e:9a:99:94:87:ed:3e:46:cc:6f:e8:41:87:2d:c4:
53:d8:6c:39:10:33:88:d2:43:6b:3d:0f:7b:9b:78:
fa:33:7d:19:07:d2:7b:af:26:3d:4f:e0:42:ff:95:
6c:87:f3:a8:28:74:83:c6:64:1c:f0:fc:8c:f8:db:
50:39:62:79:79:b8:2f:18:0f:aa:13:e2:d0:fc:2f:
29:e1:86:6d:b4:cd:0a:85:63:f3:cb:b2:9c:a4:32:
50:65:00:85:50:dd:04:79:c4:30:f8:e1:af:dc:fa:
0b:84:3f:4d:d4:52:69:19:57:fc:7d:b2:55:c3:80:
e9:da:a1:7e:e5:d7:aa:79:93:fe:21:2d:24:60:67:
78:49:ad:dd:17:fe:05:48:01:19:d7:dd:dd:69:7d:
ba:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:95:85:3C:80:B1:3A:AF:12:8A:1F:2B:05:F0:7E:B5:80:C8:BF:4B
X509v3 Authority Key Identifier:
keyid:1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:1b:a6:04:35:4a:a9:35:4a:08:cc:10:a6:ff:1b:7b:e3:fc:
15:58:d1:d1:bc:d2:9e:15:fa:46:4e:7f:e4:58:5a:e6:f5:98:
1e:25:c2:30:b4:f8:07:30:a3:65:47:53:bb:cc:eb:ac:8d:8c:
77:b4:fe:2d:3e:04:f9:01:c4:65:b0:f4:59:45:f8:e1:62:4f:
6c:24:82:e6:09:76:05:23:0f:b7:37:4f:c4:26:ea:1e:cd:dc:
a3:a5:0d:eb:3a:dd:c6:f3:79:87:aa:52:92:42:0e:5e:6d:c7:
67:64:cb:ee:99:ff:ed:b0:1c:f9:28:e1:60:e9:68:aa:d3:99:
1d:34:9f:1e:64:29:69:ea:fe:43:03:81:c2:99:ff:c8:b1:7b:
12:c4:51:ce:d1:53:68:c5:bc:d6:fb:e4:4a:3a:16:08:b5:31:
33:60:b1:c2:b5:ed:9a:7b:a5:1e:6b:e0:cc:40:ed:24:69:69:
50:bf:7d:98:fe:ef:44:46:71:de:29:a7:45:2b:9a:d9:d9:8d:
6a:75:b3:37:db:ac:31:37:9a:00:79:35:c4:d5:44:ba:cc:87:
84:85:1c:9f:14:34:39:74:8b:53:f5:d8:db:f6:59:a5:3f:3a:
9b:67:7b:cd:a2:54:fc:c4:26:1b:ea:f4:d1:82:45:1f:24:6d:
e1:03:79:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 11:02:47 2026 by rpki-client