Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
File: zHLmM99WNan5jS9optKty0QVXNw.mft (raw, json)
Hash identifier: +9GPGkpQg2ha3/24jCpj+XgX2SovDQmvoBm5GjqD/Pk=
Subject key identifier: DC:12:CF:AD:70:1B:BD:A8:7F:CE:31:AA:62:DD:26:46:D6:F5:F5:8E
Authority key identifier: CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
Certificate issuer: /CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Certificate serial: 019EC14934F8DCA27D7494876684DF2D8F25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
Manifest number: 195E
Signing time: Sat 13 Jun 2026 14:01:00 +0000
Manifest this update: Sat 13 Jun 2026 14:01:00 +0000
Manifest next update: Sun 14 Jun 2026 14:01:00 +0000
Files and hashes: 1: MaDSTN6Q7CFLTp6SIW6KUIRqSLY.roa (hash: qjTXYKs6k3XUTzqlyyhuKa9TKSebMAZ83ecmNwpA4d4=)
2: x5tgECJAP6fckf75oremz0-3QKM.roa (hash: HEVb3Ub0oIq5xOKjyrV77VxFtUue3E7fb6XdS69sJHM=)
3: zHLmM99WNan5jS9optKty0QVXNw.crl (hash: ILkMgPAN2ijLjV8FDRUSnkGJjpyPIbRE7Egm6FuaRcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:34:f8:dc:a2:7d:74:94:87:66:84:df:2d:8f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Validity
Not Before: Jun 13 14:01:00 2026 GMT
Not After : Jun 14 14:01:00 2026 GMT
Subject: CN=dc12cfad701bbda87fce31aa62dd2646d6f5f58e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:aa:bf:3c:d9:bf:e4:13:97:9c:95:53:f0:47:
d1:9f:98:88:ca:28:4f:ac:0b:35:12:87:e1:2d:4d:
79:d0:6b:5e:74:8a:1d:71:50:b3:6a:c9:f3:65:ed:
01:17:7b:36:11:36:88:d0:07:8f:8a:86:14:66:5e:
62:27:58:fc:5a:c2:24:65:62:67:ed:a4:38:6b:a8:
56:dc:5e:cd:ad:20:5c:82:52:be:8f:af:7f:ba:21:
c5:32:3d:be:4b:4f:08:cb:46:52:58:28:e2:af:d0:
77:ee:ce:85:ab:13:2a:8b:f3:a4:c1:91:2c:ff:2b:
58:53:db:c9:4c:51:3a:a4:ed:7b:64:a9:86:f0:f4:
68:54:73:61:9c:61:49:05:b7:20:01:01:bd:8e:53:
fb:ab:f8:ea:a4:89:85:7f:dc:47:b6:60:41:74:65:
be:cd:8f:4f:98:a6:0d:49:44:12:c0:0b:9d:d6:a3:
8a:39:8b:21:18:e2:88:15:81:36:e0:44:3f:0d:b4:
07:26:fb:a0:1a:1c:ac:7d:d0:83:97:9f:3b:b2:c6:
bf:77:b7:f3:36:50:2d:47:43:95:ae:38:f5:ce:ba:
3f:7e:fe:f0:00:ac:79:ae:c3:b8:15:47:45:87:1d:
95:79:e8:ef:9c:52:3e:f7:3d:ae:47:1c:3d:ef:13:
8d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:12:CF:AD:70:1B:BD:A8:7F:CE:31:AA:62:DD:26:46:D6:F5:F5:8E
X509v3 Authority Key Identifier:
keyid:CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:11:d3:ec:ba:19:f9:81:11:73:34:6f:ac:d3:53:cf:b9:74:
5f:77:30:0b:45:d3:ec:2f:1e:dc:4a:92:cc:dd:84:42:cd:0f:
8e:88:97:05:f0:b3:c4:e7:e8:da:f9:95:b5:6a:41:ec:98:24:
36:8b:1a:20:e0:9a:ee:77:e5:79:7d:5a:28:29:bb:38:6e:fa:
9c:7a:03:f4:43:46:7a:0d:c2:3d:6c:cc:09:a3:11:7d:87:80:
83:91:b6:92:34:73:70:62:4c:5c:64:29:12:44:a4:15:bd:b9:
ac:ef:8b:58:ca:04:75:7a:d5:27:74:ea:8d:cf:69:f6:6a:f2:
36:3d:57:d2:e5:fe:2c:d1:7f:9c:88:b0:7e:ba:72:6e:db:70:
c2:66:7e:c9:19:1d:0b:b6:b9:02:bd:6b:d7:83:66:20:fb:2f:
50:f3:fd:65:59:61:0f:31:b4:6f:2d:91:60:d3:7a:fe:03:ee:
bb:d8:3a:b4:ae:0d:2c:71:04:46:b2:f2:af:25:42:a0:d8:be:
d4:67:7d:f8:6f:66:51:00:14:0b:32:ef:47:83:ff:b3:63:50:
ca:d2:85:40:16:2d:e4:1c:b1:45:c4:44:85:98:9f:59:96:96:
ca:75:67:ce:b3:2f:dd:92:79:58:7d:c8:92:83:6a:fb:db:41:
bd:87:50:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:39:10 2026 by rpki-client