Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
File: zHLmM99WNan5jS9optKty0QVXNw.mft (raw, json)
Hash identifier: jceuSeKO38dCR+yH4fjF0Cqvd5dA7ymgSgA6AyHcCcM=
Subject key identifier: B1:4D:8F:2B:B9:CC:4F:FB:21:79:C3:A9:33:DF:35:DE:C4:FD:0F:49
Authority key identifier: CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
Certificate issuer: /CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Certificate serial: 019CAA5886F8220DA45ECCC0D31D9EFCD8BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 17:00:54 +0000
Manifest this update: Sun 01 Mar 2026 17:00:54 +0000
Manifest next update: Mon 02 Mar 2026 17:00:54 +0000
Files and hashes: 1: MaDSTN6Q7CFLTp6SIW6KUIRqSLY.roa (hash: qjTXYKs6k3XUTzqlyyhuKa9TKSebMAZ83ecmNwpA4d4=)
2: x5tgECJAP6fckf75oremz0-3QKM.roa (hash: HEVb3Ub0oIq5xOKjyrV77VxFtUue3E7fb6XdS69sJHM=)
3: zHLmM99WNan5jS9optKty0QVXNw.crl (hash: AN9xJMMUSX55SYcDplHUs0sWjsvbQDxMDJma1UsAGus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:86:f8:22:0d:a4:5e:cc:c0:d3:1d:9e:fc:d8:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Validity
Not Before: Mar 1 17:00:54 2026 GMT
Not After : Mar 2 17:00:54 2026 GMT
Subject: CN=b14d8f2bb9cc4ffb2179c3a933df35dec4fd0f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c2:b2:96:e8:50:f9:d8:e3:7d:b4:a6:8d:2c:
31:75:ef:71:b5:6b:bb:33:54:63:a2:d8:4c:38:a8:
76:9b:25:55:8c:d0:28:57:00:7c:47:63:6c:8b:5d:
38:8b:42:2d:3c:60:cb:e8:58:82:54:c5:d9:f0:48:
88:dc:3c:ce:e2:f5:6d:38:c5:7f:5c:62:35:83:c1:
77:81:00:a1:75:05:34:31:8b:eb:4c:d8:6f:f9:35:
f6:89:43:e2:9c:0e:2b:a6:d8:58:1f:fe:dc:4b:4d:
63:c6:dc:d2:92:c0:b7:8f:54:20:1a:84:f1:b0:15:
35:0e:7b:a4:1e:c3:f5:cc:4b:c7:43:94:0f:f7:71:
fe:a8:eb:a4:05:15:28:b7:0c:29:62:76:67:70:36:
25:5b:14:35:07:0d:3b:cd:da:42:89:aa:90:b6:8e:
53:f3:14:1b:0f:d2:08:a8:e8:35:82:56:4d:11:cf:
d8:d0:f0:5a:38:0f:8e:40:69:7e:9c:b5:da:e2:c4:
34:04:cf:c6:7a:e5:6f:d3:f3:0d:ce:a3:c9:3c:a1:
bf:5c:fa:9a:d3:63:f4:28:8c:68:60:c1:6e:a8:35:
df:87:c8:4c:e7:d9:ce:84:0d:33:0f:d5:61:c5:02:
b5:3c:f1:69:4a:4f:33:46:e6:0f:08:1d:91:66:81:
6f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:4D:8F:2B:B9:CC:4F:FB:21:79:C3:A9:33:DF:35:DE:C4:FD:0F:49
X509v3 Authority Key Identifier:
keyid:CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:cb:ea:7b:94:e6:46:41:ce:a4:52:b2:07:77:dc:88:32:69:
12:2a:98:42:86:0e:48:7b:60:50:6e:0b:fd:cc:90:c9:d6:e3:
63:84:35:f9:16:39:c7:14:5a:0c:89:6f:55:81:61:21:bd:76:
7e:01:2d:b9:94:0f:69:21:80:92:d2:6b:ec:9c:24:1c:e5:4f:
fe:4e:8b:87:12:8f:b2:ce:f9:b0:7a:28:96:43:bf:22:56:a9:
b0:54:85:aa:e6:8c:c7:64:b8:e1:4e:c5:be:37:dc:dd:e0:04:
8d:36:20:d9:68:13:b4:ce:39:c9:38:76:ec:d9:ed:8e:16:90:
d1:d8:fa:8b:b8:24:de:cc:58:2d:ce:d5:f0:1e:88:d8:3d:d6:
4d:ea:e2:8e:ca:d6:4c:d1:c4:7a:b5:a5:d9:dd:42:ec:2b:bb:
57:6c:4d:45:e9:bf:6f:37:9e:84:36:4e:f3:42:1e:2f:c7:e7:
6b:74:93:eb:54:b0:43:04:bc:f9:c4:5f:ab:d9:f6:f4:ed:83:
ed:b1:f1:5f:ba:c6:ea:72:5f:01:c7:ca:9c:e9:ae:26:8e:04:
f1:e2:ad:0c:e5:8f:a3:bd:12:8e:50:88:92:b7:bf:24:37:09:
b6:85:b4:e8:34:9d:00:60:fa:c4:21:c6:13:16:b7:ff:24:90:
0d:76:c3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:34 2026 by rpki-client