Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
File: zHLmM99WNan5jS9optKty0QVXNw.mft (raw, json)
Hash identifier: P752js7nlyRpbVMKupZAXwT2c7v9/6KhgcS5AQV/Zzk=
Subject key identifier: 1A:97:39:B3:FC:81:DA:FE:FE:05:D5:B3:05:E6:30:C4:D1:23:B8:CF
Authority key identifier: CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
Certificate issuer: /CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Certificate serial: 019D99D0C6CDA51D833A42E88347519991E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 05:01:29 +0000
Manifest this update: Fri 17 Apr 2026 05:01:29 +0000
Manifest next update: Sat 18 Apr 2026 05:01:29 +0000
Files and hashes: 1: MaDSTN6Q7CFLTp6SIW6KUIRqSLY.roa (hash: qjTXYKs6k3XUTzqlyyhuKa9TKSebMAZ83ecmNwpA4d4=)
2: x5tgECJAP6fckf75oremz0-3QKM.roa (hash: HEVb3Ub0oIq5xOKjyrV77VxFtUue3E7fb6XdS69sJHM=)
3: zHLmM99WNan5jS9optKty0QVXNw.crl (hash: zyDq3zCRlSpuiXvsZCLGDyu/v6rgEp+cfCAJKHRgZvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:c6:cd:a5:1d:83:3a:42:e8:83:47:51:99:91:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Validity
Not Before: Apr 17 05:01:29 2026 GMT
Not After : Apr 18 05:01:29 2026 GMT
Subject: CN=1a9739b3fc81dafefe05d5b305e630c4d123b8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:19:13:2e:4b:ef:7f:d7:1a:c1:50:49:23:f7:
d8:cb:e1:3d:bc:38:f3:26:73:87:85:fe:e5:8d:3f:
4d:80:50:e0:12:9c:62:61:8f:40:30:a9:08:c2:6c:
d3:36:16:23:91:96:0e:60:a4:3c:10:e8:6d:b0:97:
f4:41:28:fa:90:89:bf:dd:e9:c4:44:3e:f7:64:1d:
76:0e:2f:71:ab:33:8d:77:46:ed:ff:4f:64:c6:05:
7a:2e:a8:81:08:a2:6e:ff:bb:ca:2b:a1:90:76:9d:
c9:85:4d:c8:91:07:3d:52:d0:46:29:19:63:60:5e:
29:b9:fd:53:4b:af:1f:e1:59:b6:3e:fd:9a:49:e3:
d2:f7:01:ff:4c:5f:96:0c:9c:2f:1d:99:f8:48:58:
8d:e3:4b:68:fb:fd:08:e3:40:61:9a:ba:0a:c5:4c:
12:5e:ee:1f:c1:15:ce:3f:a4:34:7c:53:c9:cb:f5:
93:11:b3:4c:50:6f:45:ed:33:54:0b:85:8a:8d:a6:
86:0e:ca:f6:fe:3c:d6:4e:29:dc:25:27:f4:ce:1e:
d3:61:73:0b:f0:4c:72:48:76:27:b6:dc:a0:15:82:
ef:41:19:94:2c:48:c2:cd:0a:44:1b:f3:40:9d:cf:
36:d0:7e:48:29:82:fb:0e:8a:da:ec:8c:28:82:e8:
94:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:97:39:B3:FC:81:DA:FE:FE:05:D5:B3:05:E6:30:C4:D1:23:B8:CF
X509v3 Authority Key Identifier:
keyid:CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c5:3b:a8:d4:1d:ca:9c:eb:e5:8d:99:29:00:74:2c:d9:3c:
be:7b:dd:e5:fe:53:bb:0c:7a:29:41:a4:c2:7b:e6:f6:a7:d0:
81:6b:d8:60:19:01:c7:b9:cd:4f:11:85:30:6d:bd:57:dc:c9:
ff:b5:22:db:ae:7e:27:5e:fa:34:94:a6:90:ec:63:3d:f5:be:
52:86:3a:94:1e:6b:75:bf:f6:9a:7b:76:17:27:81:61:1c:85:
95:af:ab:f3:3a:ce:a5:2a:aa:ed:36:cf:b9:cc:37:76:17:49:
74:ff:67:5f:04:7d:67:d6:14:1a:33:75:25:85:ad:d8:b5:03:
4a:e5:e9:f8:29:6d:09:ee:06:d2:df:38:df:19:59:bc:7e:c3:
82:56:4e:8d:4b:ce:c0:26:e1:02:57:40:b1:a7:42:5b:35:09:
50:ed:ba:9c:3f:98:0e:00:3f:18:80:99:2a:ec:a7:d9:b5:21:
b7:28:ed:f6:74:f2:76:32:ee:c4:8d:db:a2:2d:2e:d7:d8:f3:
64:30:e7:1d:bc:b1:f5:d7:54:23:a0:e2:f9:24:59:41:9b:ba:
ea:0b:bb:39:c9:5f:d1:94:4c:26:c4:9f:0e:98:4d:6f:e5:6c:
aa:74:47:59:6d:5e:a7:d5:a6:9c:9a:87:c6:22:0a:41:07:94:
1d:51:b6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:56:52 2026 by rpki-client