Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
File: zHLmM99WNan5jS9optKty0QVXNw.mft (raw, json)
Hash identifier: S3n6nu1U1nZ92Aq/6eFMHU/oAjFXxT45btRv/B5xEJg=
Subject key identifier: AC:ED:F7:83:F2:97:EC:5E:A6:64:76:00:EE:A5:B0:F3:1E:51:A7:8B
Authority key identifier: CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
Certificate issuer: /CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Certificate serial: 019FACE422B9464E92BCEBACED7EE9B92A20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
Manifest number: 19D8
Signing time: Wed 29 Jul 2026 08:00:59 +0000
Manifest this update: Wed 29 Jul 2026 08:00:59 +0000
Manifest next update: Thu 30 Jul 2026 08:00:59 +0000
Files and hashes: 1: MaDSTN6Q7CFLTp6SIW6KUIRqSLY.roa (hash: qjTXYKs6k3XUTzqlyyhuKa9TKSebMAZ83ecmNwpA4d4=)
2: x5tgECJAP6fckf75oremz0-3QKM.roa (hash: HEVb3Ub0oIq5xOKjyrV77VxFtUue3E7fb6XdS69sJHM=)
3: zHLmM99WNan5jS9optKty0QVXNw.crl (hash: 3M7HVspj1NzI/wPefC53Of8ZC5Q5OczUnIeU81q6Lp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e4:22:b9:46:4e:92:bc:eb:ac:ed:7e:e9:b9:2a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Validity
Not Before: Jul 29 08:00:59 2026 GMT
Not After : Jul 30 08:00:59 2026 GMT
Subject: CN=acedf783f297ec5ea6647600eea5b0f31e51a78b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:85:45:92:f9:1a:21:c9:0f:e5:c0:14:5c:ad:
8f:57:9d:38:b4:b2:81:b6:c7:3a:d2:b9:77:6f:01:
db:71:b2:82:60:d9:4b:37:be:10:e8:d0:07:3d:c5:
86:30:bc:0e:65:63:06:0a:bb:d0:19:77:37:c1:9e:
33:39:f6:05:18:d4:42:49:59:5e:7f:8e:06:e5:60:
aa:a1:cd:13:b2:45:65:9e:31:7b:5e:29:a4:7c:cf:
a4:8f:db:16:e8:39:fa:69:61:45:85:0d:11:a1:ce:
94:05:d7:f7:0b:50:33:d0:72:10:53:ef:67:ce:92:
d3:81:8f:2c:61:9a:9d:17:b9:ea:b5:48:02:5d:85:
d4:6d:ea:08:57:c9:53:f5:f3:f8:24:e8:d5:86:97:
ba:09:91:59:30:74:f2:9b:2f:23:da:41:32:fa:ac:
b6:93:2b:e2:a4:cd:8a:94:da:70:cf:16:3d:12:a4:
55:53:a5:74:e1:48:3a:e0:81:45:3e:57:7a:12:83:
62:16:4b:33:5f:cd:8c:82:bb:ad:f9:75:99:88:cf:
db:e8:64:d8:8e:49:59:f4:10:f7:3b:5e:1f:33:62:
31:83:ba:cd:ff:f6:64:88:e9:8c:d7:58:5e:83:ba:
85:43:a3:ea:de:5a:cc:3a:04:e1:6a:b0:49:04:86:
3d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:ED:F7:83:F2:97:EC:5E:A6:64:76:00:EE:A5:B0:F3:1E:51:A7:8B
X509v3 Authority Key Identifier:
keyid:CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:30:28:b8:42:a9:7e:53:bb:8f:91:b9:a9:d5:f3:00:7e:40:
f2:94:e2:bb:58:8c:2f:d7:f4:92:8a:f0:37:3a:46:b4:d2:30:
04:62:87:43:58:94:7d:92:1e:d2:c1:e7:50:ee:20:e0:3e:69:
6b:66:f3:5f:7e:d6:fb:4f:eb:57:cb:00:7b:98:79:e0:2c:1a:
4e:4d:a7:e7:8d:1a:e4:7c:33:71:87:e7:74:2a:6c:d8:5e:58:
22:c2:e9:a8:16:ad:7e:e4:e9:68:19:56:d1:69:7f:ba:83:97:
39:48:5e:f2:ce:90:aa:10:48:96:f2:73:0d:c5:78:21:a8:09:
37:c0:52:74:f0:94:70:90:29:dc:86:1c:8f:84:4f:0f:ba:be:
7a:39:a6:41:8b:45:5d:26:82:80:8e:4f:5a:11:00:91:79:3e:
86:22:70:c8:6e:54:7c:fd:44:ec:70:f7:89:08:69:33:9a:dc:
45:61:13:7f:cb:e8:b1:3b:ae:31:3a:0b:92:19:97:46:80:89:
18:67:88:14:ae:2c:62:a5:f2:13:7a:cd:48:b5:19:2f:2a:bc:
20:90:68:a2:10:be:8d:e6:3b:bc:b6:27:55:0b:5f:8e:dc:66:
94:a9:89:66:07:fd:d9:5c:39:37:82:44:3b:17:2b:29:1e:88:
e9:a7:a4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:01:07 2026 by rpki-client