Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
File: zHLmM99WNan5jS9optKty0QVXNw.mft (raw, json)
Hash identifier: xd5PCkCi3x6AGdnzdFnCfuNagNDcC4ZXb8r9BaSZv2Y=
Subject key identifier: 98:65:E0:A1:C9:F8:E8:DA:B7:17:2C:44:F8:45:AE:0C:11:93:52:67
Authority key identifier: CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
Certificate issuer: /CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Certificate serial: 01A003CB9972480AAEBA49048647BC32AE08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
Manifest number: 1A05
Signing time: Sat 15 Aug 2026 05:01:09 +0000
Manifest this update: Sat 15 Aug 2026 05:01:09 +0000
Manifest next update: Sun 16 Aug 2026 05:01:09 +0000
Files and hashes: 1: MaDSTN6Q7CFLTp6SIW6KUIRqSLY.roa (hash: qjTXYKs6k3XUTzqlyyhuKa9TKSebMAZ83ecmNwpA4d4=)
2: x5tgECJAP6fckf75oremz0-3QKM.roa (hash: HEVb3Ub0oIq5xOKjyrV77VxFtUue3E7fb6XdS69sJHM=)
3: zHLmM99WNan5jS9optKty0QVXNw.crl (hash: kJMmSyNZPdlV92EsHS+9duPoxeivt+vJ6v0NnwgQsYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:cb:99:72:48:0a:ae:ba:49:04:86:47:bc:32:ae:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Validity
Not Before: Aug 15 05:01:09 2026 GMT
Not After : Aug 16 05:01:09 2026 GMT
Subject: CN=9865e0a1c9f8e8dab7172c44f845ae0c11935267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:88:c9:2e:f8:72:66:36:08:d4:be:da:07:03:
7c:83:29:d3:7b:4e:75:0d:aa:f4:b7:2d:9e:93:07:
e2:99:12:11:6d:c7:43:5e:94:eb:57:84:36:c7:ab:
c3:37:1b:01:d4:94:64:24:af:a3:84:8a:e7:03:85:
08:ae:a8:d5:2a:be:4f:38:fb:1e:a3:d7:42:9e:de:
97:5c:d3:7d:d8:57:b0:c0:7a:16:19:8f:10:74:bc:
2c:9e:0e:dc:24:82:49:75:97:e6:cb:d8:43:4b:44:
cd:4f:74:3f:c6:5e:97:28:8d:7b:c1:23:ff:d9:65:
21:03:37:6d:99:11:a3:4f:f1:24:82:06:b8:93:9a:
a3:96:14:f9:95:a0:95:50:15:93:12:dd:ee:ae:e8:
db:e3:fa:a3:44:72:a6:19:b9:7d:d8:7c:7b:52:b3:
d2:b5:fa:f1:6d:3b:cc:04:c5:61:3e:fe:72:51:9f:
04:6f:7f:bd:4a:4d:8d:7a:eb:94:df:c8:df:ad:d2:
53:cc:6b:bd:c1:a9:94:80:5b:da:c3:9a:f5:9c:58:
65:ea:7f:d9:dc:d9:bf:81:e9:3c:4c:dc:ee:fb:60:
0c:e0:28:36:82:71:ce:b2:12:90:ef:52:ee:c7:c6:
16:bc:43:20:3d:c9:b6:02:fe:bd:5b:e2:f1:86:53:
76:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:65:E0:A1:C9:F8:E8:DA:B7:17:2C:44:F8:45:AE:0C:11:93:52:67
X509v3 Authority Key Identifier:
keyid:CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:6e:53:33:27:42:79:04:34:d3:f3:8a:0f:83:01:f8:a0:f0:
ea:c0:d5:1d:2e:78:cf:9f:aa:3d:d1:e6:24:f1:1e:00:78:ba:
9a:f3:01:07:35:19:47:4c:2a:02:6b:16:05:03:32:92:54:0b:
e8:67:2a:27:3b:c5:92:64:33:3f:64:f9:e5:46:3a:af:ed:42:
49:e2:95:23:1a:2e:bb:eb:61:0f:48:1c:3d:6f:fd:25:db:bd:
50:ab:cd:2c:fa:58:f7:36:1c:f1:38:40:f7:69:08:e7:f2:ad:
e4:4f:38:63:8c:53:14:92:8c:8d:a1:34:da:c2:42:45:1b:cc:
49:bc:2c:ff:63:b7:a8:1f:24:a6:49:ef:cd:fe:71:13:7e:49:
25:87:f8:c0:18:bd:bc:fc:4a:2d:c8:98:19:cb:4e:9e:e5:c4:
98:4c:51:27:6f:71:8c:9e:36:ff:2c:f9:59:fc:da:6c:a3:8c:
cc:f4:51:82:d0:03:be:78:9e:d0:f2:95:67:43:54:0f:9b:a8:
74:47:77:7d:06:3d:8d:59:fa:bc:97:f4:2b:07:78:6b:fd:bb:
87:80:3c:58:00:3b:e5:8e:2d:59:c2:ba:f0:53:d0:8e:eb:54:
fc:8f:f6:fa:34:62:79:12:66:1e:49:62:1c:03:52:49:12:d0:
5e:38:b0:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaADy5lySAquukkEhke8Mq4IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNzJlNjMzZGY1NjM1YTlmOThkMmY2OGE2ZDJhZGNiNDQx
NTVjZGMwHhcNMjYwODE1MDUwMTA5WhcNMjYwODE2MDUwMTA5WjAzMTEwLwYDVQQD
Eyg5ODY1ZTBhMWM5ZjhlOGRhYjcxNzJjNDRmODQ1YWUwYzExOTM1MjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYjJLvhyZjYI1L7aBwN8gynTe051
Dar0ty2ekwfimRIRbcdDXpTrV4Q2x6vDNxsB1JRkJK+jhIrnA4UIrqjVKr5POPse
o9dCnt6XXNN92FewwHoWGY8QdLwsng7cJIJJdZfmy9hDS0TNT3Q/xl6XKI17wSP/
2WUhAzdtmRGjT/Ekgga4k5qjlhT5laCVUBWTEt3urujb4/qjRHKmGbl92Hx7UrPS
tfrxbTvMBMVhPv5yUZ8Eb3+9Sk2NeuuU38jfrdJTzGu9wamUgFvaw5r1nFhl6n/Z
3Nm/gek8TNzu+2AM4Cg2gnHOshKQ71Lux8YWvEMgPcm2Av69W+LxhlN23QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJhl4KHJ+OjatxcsRPhFrgwRk1JnMB8GA1UdIwQY
MBaAFMxy5jPfVjWp+Y0vaKbSrctEFVzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekhMbU05OVdOYW41alM5b3B0S3R5MFFWWE53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8wMjcwMzYtODJiMy00MTI4LWI5NTQt
ZDAxMmNhOWVjMTk3LzEvekhMbU05OVdOYW41alM5b3B0S3R5MFFWWE53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8wMjcwMzYtODJiMy00MTI4LWI5NTQtZDAxMmNhOWVjMTk3
LzEvekhMbU05OVdOYW41alM5b3B0S3R5MFFWWE53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0W5TMydC
eQQ00/OKD4MB+KDw6sDVHS54z5+qPdHmJPEeAHi6mvMBBzUZR0wqAmsWBQMyklQL
6GcqJzvFkmQzP2T55UY6r+1CSeKVIxouu+thD0gcPW/9Jdu9UKvNLPpY9zYc8ThA
92kI5/Kt5E84Y4xTFJKMjaE02sJCRRvMSbws/2O3qB8kpknvzf5xE35JJYf4wBi9
vPxKLciYGctOnuXEmExRJ29xjJ42/yz5WfzabKOMzPRRgtADvnie0PKVZ0NUD5uo
dEd3fQY9jVn6vJf0Kwd4a/27h4A8WAA75Y4tWcK68FPQjutU/I/2+jRieRJmHkli
HANSSRLQXjiwkQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 07:00:24 2026 by rpki-client