Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
File: zHLmM99WNan5jS9optKty0QVXNw.mft (raw, json)
Hash identifier: JgcFDa2Gjp7f2KTUtNEygZwHe8fGxkuHat+GH+KdRT4=
Subject key identifier: C1:5D:D4:1E:F5:03:E7:CE:8A:4D:AF:2F:C5:EB:E7:22:31:2C:BA:4A
Authority key identifier: CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
Certificate issuer: /CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Certificate serial: 019D3752EE8CAAA8B5FFE5295E93EF18420B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 02:01:14 +0000
Manifest this update: Sun 29 Mar 2026 02:01:14 +0000
Manifest next update: Mon 30 Mar 2026 02:01:14 +0000
Files and hashes: 1: MaDSTN6Q7CFLTp6SIW6KUIRqSLY.roa (hash: qjTXYKs6k3XUTzqlyyhuKa9TKSebMAZ83ecmNwpA4d4=)
2: x5tgECJAP6fckf75oremz0-3QKM.roa (hash: HEVb3Ub0oIq5xOKjyrV77VxFtUue3E7fb6XdS69sJHM=)
3: zHLmM99WNan5jS9optKty0QVXNw.crl (hash: 113V9lrKM3k0Gioam4+r1SKmnML9hs12EQ/UGmqOyS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:ee:8c:aa:a8:b5:ff:e5:29:5e:93:ef:18:42:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Validity
Not Before: Mar 29 02:01:14 2026 GMT
Not After : Mar 30 02:01:14 2026 GMT
Subject: CN=c15dd41ef503e7ce8a4daf2fc5ebe722312cba4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4a:a8:3a:8c:4a:a5:22:8d:7f:94:7b:46:36:
9a:16:72:5c:ec:9b:3f:01:b9:a0:30:77:f9:e0:a9:
f4:5d:54:c2:a3:f6:34:6a:9d:bc:40:01:94:f7:b6:
ab:30:c5:ce:25:07:30:cf:47:e0:e4:85:13:9b:07:
e1:e0:2e:83:2c:f3:f8:7d:1f:b4:ed:96:08:ab:79:
90:ea:a5:9d:3c:df:18:b1:78:f6:d3:a9:c7:c2:e1:
c7:cd:36:74:b2:e6:cb:cb:24:50:f7:f9:99:1a:a8:
5d:e4:d3:1a:9d:35:78:8c:c8:62:05:d0:85:55:92:
1d:19:47:bb:f8:77:29:75:31:fd:34:2f:dd:c2:b1:
f1:8e:9c:7f:b5:a1:4a:42:83:57:94:4b:da:cf:36:
f2:4e:94:c7:91:68:28:26:c3:6e:cd:f4:e5:e2:21:
b7:e5:89:aa:fb:40:b1:44:4b:e2:77:cf:15:f9:dc:
00:18:94:d6:b3:f5:8c:b6:b8:53:e7:81:87:cf:37:
28:0d:c5:f6:ea:9b:c9:72:d1:90:ff:b1:f2:27:5e:
20:4a:fb:ff:b1:bb:81:d4:72:28:f0:f3:76:42:e0:
c2:ab:82:ca:70:f6:04:3c:0b:21:86:6b:38:d2:83:
25:78:0c:78:8d:80:3d:68:08:cf:84:db:79:33:93:
ea:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5D:D4:1E:F5:03:E7:CE:8A:4D:AF:2F:C5:EB:E7:22:31:2C:BA:4A
X509v3 Authority Key Identifier:
keyid:CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:9f:5d:d1:ed:15:24:c3:1d:1a:20:d4:51:91:8f:1d:d8:b2:
76:fa:77:0a:0c:ef:cf:a1:3a:49:5e:2b:2c:44:23:20:2d:8b:
e3:69:4f:1b:6f:ef:0c:f7:93:4c:a9:34:f6:46:1f:6c:62:c0:
08:52:3e:0c:73:54:9b:38:2f:18:8d:be:52:7e:10:f2:1e:e0:
14:14:2a:da:f9:ad:8d:0d:0c:8d:17:5f:b8:81:bc:24:01:b3:
06:27:1e:e9:0c:29:8f:4c:01:b3:41:9e:c0:67:36:21:e7:f5:
4d:86:8b:f4:7c:bc:4a:6e:bd:aa:0f:16:47:fb:0d:fe:eb:1c:
88:a3:47:6b:28:2f:f4:40:2f:b3:47:fa:a8:6f:07:42:4c:f5:
d0:e0:77:93:f6:5a:9f:4c:89:00:ae:ed:ff:cc:c3:20:a8:10:
4c:2f:4e:2e:b6:88:d2:0a:e1:f8:bf:c6:46:67:21:4a:0d:fe:
97:d7:6e:06:f1:10:f0:a5:71:7c:f0:97:88:ab:75:e1:58:df:
31:79:51:3d:cf:d8:a8:0d:e6:dc:e5:9c:b9:65:d0:4f:6e:d5:
c3:49:3b:41:83:b4:91:c0:ad:16:40:66:27:f1:93:d6:43:84:
9e:c8:5e:31:f1:38:d6:15:3f:32:5d:c0:90:81:82:04:42:1d:
1a:71:f4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:13 2026 by rpki-client