Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
File: zHLmM99WNan5jS9optKty0QVXNw.mft (raw, json)
Hash identifier: EPucTmRU8PYuOxZV070Cp2l/+vCuBGpWRg99RgAqfwU=
Subject key identifier: E8:33:7F:06:43:37:74:3F:E1:11:B9:1B:DC:81:DC:83:F0:8A:89:96
Authority key identifier: CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
Certificate issuer: /CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Certificate serial: 01A174A6D78C136002B4B4A470ADB9CE910D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
Manifest number: 1AC4
Signing time: Sun 25 Oct 2026 20:00:53 +0000
Manifest this update: Sun 25 Oct 2026 20:00:53 +0000
Manifest next update: Mon 26 Oct 2026 20:00:53 +0000
Files and hashes: 1: MaDSTN6Q7CFLTp6SIW6KUIRqSLY.roa (hash: qjTXYKs6k3XUTzqlyyhuKa9TKSebMAZ83ecmNwpA4d4=)
2: x5tgECJAP6fckf75oremz0-3QKM.roa (hash: HEVb3Ub0oIq5xOKjyrV77VxFtUue3E7fb6XdS69sJHM=)
3: zHLmM99WNan5jS9optKty0QVXNw.crl (hash: O+GOl4V2fCroZbH0dMsFy3ZshsDyeR6qPUJNoE1nZJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:a6:d7:8c:13:60:02:b4:b4:a4:70:ad:b9:ce:91:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Validity
Not Before: Oct 25 20:00:53 2026 GMT
Not After : Oct 26 20:00:53 2026 GMT
Subject: CN=e8337f064337743fe111b91bdc81dc83f08a8996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f8:37:3a:9e:05:18:eb:f1:2e:65:0e:53:7d:
5a:f7:a5:fd:6e:de:d5:ff:b9:f3:85:a9:a4:fe:cb:
18:d3:08:39:98:44:2e:1f:8e:4d:9b:88:3f:7f:dd:
87:1a:e4:7e:0b:76:4b:d6:5d:1b:d3:36:cb:a3:17:
3a:0f:af:df:c8:ed:a3:e0:e7:e7:79:12:d4:b1:e7:
7e:e8:bf:89:77:96:fe:77:57:34:a3:78:ee:9e:dd:
4b:b8:4e:ff:7a:fc:c7:ba:21:95:db:67:58:be:fc:
de:ae:7b:90:3a:85:cb:8c:28:45:ab:be:5c:9d:4b:
b1:fb:a6:7e:b5:31:db:1d:be:4b:df:2c:a0:32:89:
61:79:5e:5c:d6:40:43:4f:1e:ea:5f:98:47:55:0f:
3c:01:3a:42:0c:22:6d:5d:ac:1b:47:9d:27:34:eb:
6b:bc:b5:83:24:3f:7b:ac:c0:a7:cc:32:e9:72:40:
96:ea:d0:63:88:9a:90:d6:bb:55:5f:40:bd:1a:5e:
c1:f4:d3:b8:5d:3e:6f:ec:41:f1:74:0b:67:bb:2f:
fe:95:56:fb:d7:bb:c6:53:a5:32:55:ba:61:36:7e:
1e:a3:eb:ad:9e:7b:46:fc:4c:7e:26:cb:1f:ba:09:
42:c8:0d:24:05:f7:fa:16:52:d6:23:10:f5:f4:ee:
3c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:33:7F:06:43:37:74:3F:E1:11:B9:1B:DC:81:DC:83:F0:8A:89:96
X509v3 Authority Key Identifier:
keyid:CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:17:8b:e0:b9:39:e6:57:45:40:6a:e1:1c:ae:9c:9f:a9:fc:
6c:88:80:6c:dd:5f:b1:7c:52:1f:af:5c:a1:82:6f:a8:af:1c:
6b:29:5d:ac:4f:7b:30:61:47:cc:60:32:86:f8:0e:f6:28:61:
21:29:b9:f7:dc:3b:3e:57:9c:d3:4b:e9:c0:11:37:22:3a:04:
ba:8e:fa:c7:e4:9f:62:c9:57:4d:bc:3f:8f:dc:14:f7:12:4b:
ba:75:c2:7b:a0:a8:52:59:7b:d9:04:ba:e0:49:08:cb:7b:ee:
0c:c7:63:cd:b7:9d:47:65:43:ee:63:e3:68:42:5c:46:f8:3d:
6a:a1:db:73:8c:dd:e2:64:ba:83:98:3e:e7:a3:9e:16:ab:15:
0d:68:4d:a8:d6:9d:38:3d:4d:c1:e9:6f:90:32:97:91:de:4f:
23:bc:8c:ec:c3:4a:92:76:3a:49:d4:78:8d:bf:cb:af:58:18:
25:85:7c:99:ef:0c:0c:71:09:97:46:f6:7f:85:72:aa:5a:f7:
b4:80:37:1d:d8:44:a3:9a:aa:74:fa:97:54:0f:b2:3c:df:7b:
3e:fb:0f:27:6e:46:36:db:57:00:7f:c0:7a:6b:f5:37:5c:4e:
08:f7:de:a3:08:8d:65:95:b5:b1:6a:98:f9:87:01:15:1c:e3:
c4:e2:fc:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF0pteME2ACtLSkcK25zpENMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNzJlNjMzZGY1NjM1YTlmOThkMmY2OGE2ZDJhZGNiNDQx
NTVjZGMwHhcNMjYxMDI1MjAwMDUzWhcNMjYxMDI2MjAwMDUzWjAzMTEwLwYDVQQD
EyhlODMzN2YwNjQzMzc3NDNmZTExMWI5MWJkYzgxZGM4M2YwOGE4OTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvg3Op4FGOvxLmUOU31a96X9bt7V
/7nzhamk/ssY0wg5mEQuH45Nm4g/f92HGuR+C3ZL1l0b0zbLoxc6D6/fyO2j4Ofn
eRLUsed+6L+Jd5b+d1c0o3junt1LuE7/evzHuiGV22dYvvzernuQOoXLjChFq75c
nUux+6Z+tTHbHb5L3yygMolheV5c1kBDTx7qX5hHVQ88ATpCDCJtXawbR50nNOtr
vLWDJD97rMCnzDLpckCW6tBjiJqQ1rtVX0C9Gl7B9NO4XT5v7EHxdAtnuy/+lVb7
17vGU6UyVbphNn4eo+utnntG/Ex+JssfuglCyA0kBff6FlLWIxD19O48dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOgzfwZDN3Q/4RG5G9yB3IPwiomWMB8GA1UdIwQY
MBaAFMxy5jPfVjWp+Y0vaKbSrctEFVzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekhMbU05OVdOYW41alM5b3B0S3R5MFFWWE53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8wMjcwMzYtODJiMy00MTI4LWI5NTQt
ZDAxMmNhOWVjMTk3LzEvekhMbU05OVdOYW41alM5b3B0S3R5MFFWWE53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8wMjcwMzYtODJiMy00MTI4LWI5NTQtZDAxMmNhOWVjMTk3
LzEvekhMbU05OVdOYW41alM5b3B0S3R5MFFWWE53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZReL4Lk5
5ldFQGrhHK6cn6n8bIiAbN1fsXxSH69coYJvqK8cayldrE97MGFHzGAyhvgO9ihh
ISm599w7Plec00vpwBE3IjoEuo76x+SfYslXTbw/j9wU9xJLunXCe6CoUll72QS6
4EkIy3vuDMdjzbedR2VD7mPjaEJcRvg9aqHbc4zd4mS6g5g+56OeFqsVDWhNqNad
OD1NwelvkDKXkd5PI7yM7MNKknY6SdR4jb/Lr1gYJYV8me8MDHEJl0b2f4Vyqlr3
tIA3HdhEo5qqdPqXVA+yPN97PvsPJ25GNttXAH/Aemv1N1xOCPfeowiNZZW1sWqY
+YcBFRzjxOL8Ig==
-----END CERTIFICATE-----
Generated at Mon Oct 26 02:22:48 2026 by rpki-client