Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
File: zHLmM99WNan5jS9optKty0QVXNw.mft (raw, json)
Hash identifier: QFhMnZ+EjLoGBTuEE35SS6v/ipEFRQYP8/S4DxsVb40=
Subject key identifier: 7C:63:C6:8A:CA:9E:4F:AA:80:22:8D:C2:D8:40:6A:2D:80:E3:42:98
Authority key identifier: CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
Certificate issuer: /CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Certificate serial: 01A0D08069087CFAF08F9BC28A63AF6883BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
Manifest number: 1A6F
Signing time: Wed 23 Sep 2026 23:01:11 +0000
Manifest this update: Wed 23 Sep 2026 23:01:11 +0000
Manifest next update: Thu 24 Sep 2026 23:01:11 +0000
Files and hashes: 1: MaDSTN6Q7CFLTp6SIW6KUIRqSLY.roa (hash: qjTXYKs6k3XUTzqlyyhuKa9TKSebMAZ83ecmNwpA4d4=)
2: x5tgECJAP6fckf75oremz0-3QKM.roa (hash: HEVb3Ub0oIq5xOKjyrV77VxFtUue3E7fb6XdS69sJHM=)
3: zHLmM99WNan5jS9optKty0QVXNw.crl (hash: s7QQU7IEX4E/gM/Nb7HywDEbZrYqZ3wjITM+6pNszDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:80:69:08:7c:fa:f0:8f:9b:c2:8a:63:af:68:83:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Validity
Not Before: Sep 23 23:01:11 2026 GMT
Not After : Sep 24 23:01:11 2026 GMT
Subject: CN=7c63c68aca9e4faa80228dc2d8406a2d80e34298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:25:97:c3:64:2d:cf:c5:95:0a:0b:27:3d:d8:
67:8d:72:1b:51:c8:d9:29:32:d5:49:85:29:f2:c7:
97:e7:27:3f:f9:57:c9:bf:4a:03:c3:6e:9c:a7:36:
71:fd:11:fe:fc:91:38:5b:5b:62:b1:97:43:d4:fc:
98:f6:c6:a1:3c:13:51:a8:cb:8f:79:2e:b9:57:ff:
8c:6d:3b:5e:22:7f:05:3e:b0:3b:ea:8f:0b:15:b8:
ae:6d:06:b6:5d:44:77:91:46:98:e3:6f:ac:7e:d7:
29:5f:77:eb:c3:5b:82:0a:2b:da:2f:4f:82:91:50:
b5:8e:e0:67:17:68:e7:dc:4d:ea:05:ad:fc:fe:0b:
f8:ee:34:26:1b:84:5f:7c:59:3c:1f:ff:fe:c6:51:
da:be:cd:27:16:c4:a7:e0:1f:d6:4e:5a:7d:e2:89:
b8:0b:14:df:c0:54:b6:0e:32:0a:c0:e8:37:3a:9f:
49:c0:4e:a9:57:3e:d0:92:df:cf:e4:88:da:ee:2c:
bf:9a:37:62:c5:28:17:a2:90:00:1a:fe:71:43:10:
d9:42:91:4e:4f:c6:ec:8b:c5:5c:8b:4a:a0:12:e5:
6c:1d:81:47:5e:a9:41:e8:58:91:b6:75:1d:f9:d9:
5e:af:32:d4:50:33:f9:77:a3:c0:c6:68:eb:25:6b:
50:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:63:C6:8A:CA:9E:4F:AA:80:22:8D:C2:D8:40:6A:2D:80:E3:42:98
X509v3 Authority Key Identifier:
keyid:CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ef:a2:a7:1a:49:9b:28:69:69:e1:54:f5:03:ba:6c:de:02:
77:13:ad:da:ef:d0:c0:37:e2:52:54:51:62:90:89:47:60:ef:
e6:05:4b:24:cb:bb:c4:0e:4e:72:02:f6:6d:c0:0d:19:2d:4e:
1e:9e:18:ee:60:a0:a7:8e:13:26:67:43:47:71:4c:b1:28:8f:
1f:5a:2f:ad:43:a9:7b:1b:2f:6a:2d:08:53:00:ec:f5:d5:40:
5d:16:7d:25:0a:a6:da:16:ca:b0:7e:96:41:84:52:17:e4:c5:
12:41:15:a0:47:bf:ce:91:f1:3c:ff:fd:0c:11:2e:71:4c:44:
bf:c0:38:39:65:a7:dc:62:76:8f:e9:dd:ee:e7:81:9f:b9:78:
37:90:dd:1f:77:6e:96:19:85:6e:97:e8:20:43:8e:42:54:8c:
78:26:46:d2:37:28:09:0b:4a:e3:ff:9c:97:56:11:b7:27:c8:
a1:fd:4e:92:2c:bd:3d:2a:02:ca:19:54:b4:8f:44:da:8b:c3:
3a:6e:6f:a4:c2:1a:b6:af:2e:61:44:85:7c:86:9d:c7:13:ba:
20:1f:a9:3c:78:2e:52:cf:d0:a7:14:ba:b2:21:a4:67:a5:6e:
07:96:87:37:c8:3e:60:9b:43:c1:53:cc:16:c1:d5:92:1b:dc:
a1:87:bd:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQgGkIfPrwj5vCimOvaIO7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNzJlNjMzZGY1NjM1YTlmOThkMmY2OGE2ZDJhZGNiNDQx
NTVjZGMwHhcNMjYwOTIzMjMwMTExWhcNMjYwOTI0MjMwMTExWjAzMTEwLwYDVQQD
Eyg3YzYzYzY4YWNhOWU0ZmFhODAyMjhkYzJkODQwNmEyZDgwZTM0Mjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+CWXw2Qtz8WVCgsnPdhnjXIbUcjZ
KTLVSYUp8seX5yc/+VfJv0oDw26cpzZx/RH+/JE4W1tisZdD1PyY9sahPBNRqMuP
eS65V/+MbTteIn8FPrA76o8LFbiubQa2XUR3kUaY42+sftcpX3frw1uCCivaL0+C
kVC1juBnF2jn3E3qBa38/gv47jQmG4RffFk8H//+xlHavs0nFsSn4B/WTlp94om4
CxTfwFS2DjIKwOg3Op9JwE6pVz7Qkt/P5Ija7iy/mjdixSgXopAAGv5xQxDZQpFO
T8bsi8Vci0qgEuVsHYFHXqlB6FiRtnUd+dlerzLUUDP5d6PAxmjrJWtQrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxjxorKnk+qgCKNwthAai2A40KYMB8GA1UdIwQY
MBaAFMxy5jPfVjWp+Y0vaKbSrctEFVzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekhMbU05OVdOYW41alM5b3B0S3R5MFFWWE53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8wMjcwMzYtODJiMy00MTI4LWI5NTQt
ZDAxMmNhOWVjMTk3LzEvekhMbU05OVdOYW41alM5b3B0S3R5MFFWWE53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8wMjcwMzYtODJiMy00MTI4LWI5NTQtZDAxMmNhOWVjMTk3
LzEvekhMbU05OVdOYW41alM5b3B0S3R5MFFWWE53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWu+ipxpJ
myhpaeFU9QO6bN4CdxOt2u/QwDfiUlRRYpCJR2Dv5gVLJMu7xA5OcgL2bcANGS1O
Hp4Y7mCgp44TJmdDR3FMsSiPH1ovrUOpexsvai0IUwDs9dVAXRZ9JQqm2hbKsH6W
QYRSF+TFEkEVoEe/zpHxPP/9DBEucUxEv8A4OWWn3GJ2j+nd7ueBn7l4N5DdH3du
lhmFbpfoIEOOQlSMeCZG0jcoCQtK4/+cl1YRtyfIof1Okiy9PSoCyhlUtI9E2ovD
Om5vpMIatq8uYUSFfIadxxO6IB+pPHguUs/QpxS6siGkZ6VuB5aHN8g+YJtDwVPM
FsHVkhvcoYe97w==
-----END CERTIFICATE-----
Generated at Thu Sep 24 06:47:13 2026 by rpki-client