Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
File: zHLmM99WNan5jS9optKty0QVXNw.mft (raw, json)
Hash identifier: uBg9bwD0AB8X1H8iUTdfVlZkfKw6IiZyxst7j0p/Oxs=
Subject key identifier: 34:61:56:FD:68:8E:F9:05:9F:C6:AB:DC:1D:64:65:4B:34:5A:79:B8
Authority key identifier: CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
Certificate issuer: /CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Certificate serial: 019F1A1F8C9C54E91B2BA6FAEDAA92FE36C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
Manifest number: 198C
Signing time: Tue 30 Jun 2026 20:01:42 +0000
Manifest this update: Tue 30 Jun 2026 20:01:42 +0000
Manifest next update: Wed 01 Jul 2026 20:01:42 +0000
Files and hashes: 1: MaDSTN6Q7CFLTp6SIW6KUIRqSLY.roa (hash: qjTXYKs6k3XUTzqlyyhuKa9TKSebMAZ83ecmNwpA4d4=)
2: x5tgECJAP6fckf75oremz0-3QKM.roa (hash: HEVb3Ub0oIq5xOKjyrV77VxFtUue3E7fb6XdS69sJHM=)
3: zHLmM99WNan5jS9optKty0QVXNw.crl (hash: 2sV6wLXxEDvO5lLXWidkZZe/AhDvA+4gLvgsmp4Cnls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:1f:8c:9c:54:e9:1b:2b:a6:fa:ed:aa:92:fe:36:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Validity
Not Before: Jun 30 20:01:42 2026 GMT
Not After : Jul 1 20:01:42 2026 GMT
Subject: CN=346156fd688ef9059fc6abdc1d64654b345a79b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:75:d0:b7:88:4c:2b:fe:df:35:2f:bd:2e:bf:
5a:50:65:f8:82:53:aa:92:2f:9a:dd:a1:55:13:59:
f7:6d:d4:58:3f:f2:3d:e2:8b:64:39:84:ba:cb:5d:
72:75:8b:2d:ef:54:39:12:3b:d3:e8:6e:aa:13:e4:
50:90:c3:e2:c6:9d:f6:2f:20:51:16:84:6c:0e:6a:
f3:32:5d:d3:e5:67:53:aa:de:4e:4c:3d:74:7e:dd:
54:64:c8:0b:5c:bd:54:03:6f:3a:bf:3d:db:6d:8d:
c9:1a:70:db:82:da:f1:6c:c5:b1:d1:33:6e:89:0e:
f2:e6:c1:b6:7a:9c:ea:18:d5:5c:ca:a4:0a:99:ab:
70:d7:eb:63:f1:9b:0f:e5:f3:88:ec:f8:22:0f:41:
a5:97:48:b7:d5:64:ae:dd:36:1e:85:3a:02:ca:78:
bc:87:eb:2c:bf:9b:9a:ce:6b:98:33:3e:e9:4c:ae:
e4:80:6a:d3:3e:4b:f7:b9:fc:4d:1f:a9:3f:6b:01:
23:45:d7:e0:4d:cd:11:0b:2e:11:d4:2f:bd:61:36:
fb:b9:ef:3d:be:fa:1f:c6:17:5f:40:35:4e:22:59:
e4:69:32:55:a3:87:aa:89:68:06:40:c9:db:58:14:
86:d6:f2:89:a8:29:a6:84:7e:55:2d:17:b3:65:3f:
c0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:61:56:FD:68:8E:F9:05:9F:C6:AB:DC:1D:64:65:4B:34:5A:79:B8
X509v3 Authority Key Identifier:
keyid:CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:5f:80:d4:69:5a:68:bc:86:8b:33:b7:35:e4:8c:b7:f0:e3:
29:34:4e:53:11:81:a1:2f:20:b7:bd:42:34:78:41:98:36:19:
d8:65:aa:e4:f6:fd:9d:b3:65:14:a2:a7:2c:2e:9d:c1:5f:3f:
70:c2:44:93:e2:77:8b:8d:4b:67:02:32:97:2a:f1:1e:51:81:
92:37:21:fc:2c:6d:f9:58:a1:42:64:04:3c:4b:49:e4:c7:2b:
2c:94:05:65:1a:a5:36:1e:ad:4f:35:a7:e7:24:2a:27:d8:92:
40:a5:3f:ca:09:9d:98:de:87:f4:dd:b4:10:44:e8:87:fd:10:
b9:b5:a1:29:27:c0:7a:75:53:2b:7b:f6:3b:3b:ff:a6:04:dd:
a5:16:0e:9d:b5:4e:6e:7a:32:f4:98:23:e6:ee:ff:20:94:74:
48:9f:04:25:be:17:d8:85:09:e6:3e:7b:59:48:41:6e:3e:59:
be:e1:d5:98:5f:24:e1:df:29:5e:b5:89:3e:d8:f6:0d:cd:86:
65:6a:df:5a:9e:a2:a2:f4:08:0b:30:f2:bc:76:d1:e7:85:b2:
57:b6:f2:37:09:7b:5e:52:04:71:6a:81:75:e0:c8:5c:c6:6a:
3e:06:4c:a1:5b:0b:e3:a2:2e:c1:b6:c4:9a:b9:d1:20:fc:eb:
a4:d7:bc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 02:39:19 2026 by rpki-client