Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
File: zHLmM99WNan5jS9optKty0QVXNw.mft (raw, json)
Hash identifier: UHgAcGRlGNlcOwwg8cr3bBFCQ54w33CKpaA+ycQlSEo=
Subject key identifier: A4:1F:F5:31:AB:F7:62:69:86:F2:74:F0:E7:3D:51:65:2B:73:71:AF
Authority key identifier: CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
Certificate issuer: /CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Certificate serial: 019D27DFE8AD19F4177879873CA2454EF590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 02:01:18 +0000
Manifest this update: Thu 26 Mar 2026 02:01:18 +0000
Manifest next update: Fri 27 Mar 2026 02:01:18 +0000
Files and hashes: 1: MaDSTN6Q7CFLTp6SIW6KUIRqSLY.roa (hash: qjTXYKs6k3XUTzqlyyhuKa9TKSebMAZ83ecmNwpA4d4=)
2: x5tgECJAP6fckf75oremz0-3QKM.roa (hash: HEVb3Ub0oIq5xOKjyrV77VxFtUue3E7fb6XdS69sJHM=)
3: zHLmM99WNan5jS9optKty0QVXNw.crl (hash: n1Kg2bkbMr33s0YDARUfhgoky+wIghgAI4lhyPw6CKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:e8:ad:19:f4:17:78:79:87:3c:a2:45:4e:f5:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Validity
Not Before: Mar 26 02:01:18 2026 GMT
Not After : Mar 27 02:01:18 2026 GMT
Subject: CN=a41ff531abf7626986f274f0e73d51652b7371af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a0:6d:d9:60:cf:4f:8e:f2:77:be:d2:fb:e7:
4e:47:0e:12:ec:e1:00:04:c3:27:43:f5:79:30:b0:
42:c1:c1:ba:82:d5:c3:d7:29:21:69:ae:f5:87:40:
f1:4e:9f:23:bb:22:a1:eb:69:31:ce:94:6b:5c:c4:
b2:56:14:c5:85:6b:17:a3:7c:ec:ed:8f:98:07:57:
e1:42:de:cc:e7:3a:d9:c7:77:c8:dd:e4:99:78:be:
00:f9:78:8b:ba:4e:cb:ba:84:fe:ac:ff:df:43:ee:
fc:4c:ea:de:dc:17:24:d1:cb:2e:9b:1d:0f:d8:71:
cf:ae:5c:dc:ba:28:4a:34:19:12:5c:10:78:9f:46:
d5:4d:97:4d:fb:de:d5:d7:ef:06:3c:5f:52:fe:2d:
27:47:6d:a7:4e:98:81:55:2e:0f:78:e7:01:b4:74:
06:25:19:98:cb:d6:59:74:42:38:7d:a7:40:cf:87:
48:c8:d0:39:04:88:be:9d:ef:8d:ee:ae:86:12:30:
b2:ee:d3:a0:d6:a0:ab:d9:8d:e3:8f:0e:77:4b:6c:
63:26:72:db:d5:41:b3:1b:a2:ec:75:de:42:a0:e8:
a2:1b:ab:27:74:87:34:e9:ae:1b:5c:84:a4:8c:bc:
10:ff:09:68:dd:7c:e8:6c:b3:41:c4:fa:13:ff:17:
8a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1F:F5:31:AB:F7:62:69:86:F2:74:F0:E7:3D:51:65:2B:73:71:AF
X509v3 Authority Key Identifier:
keyid:CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:fb:0d:ec:58:89:34:1d:d6:cd:4a:5a:40:a8:b8:76:20:0d:
16:a4:47:a5:ea:85:c2:f1:2a:51:bf:36:42:69:9a:76:3a:83:
79:66:5b:db:4c:2f:8a:e1:b2:2a:da:ce:b3:38:c3:88:a5:33:
a5:63:48:2a:5c:6f:c9:b6:32:11:bf:55:60:ec:92:03:63:a9:
64:f3:9b:1f:65:39:ed:4f:31:b8:4d:bd:a2:48:b5:df:b0:4d:
54:7a:01:79:87:63:85:89:79:45:ec:37:78:a0:e7:2d:78:34:
c2:76:72:ff:e3:fe:4a:96:7b:cc:a8:63:41:27:f8:ca:e4:9e:
e4:a1:28:b1:f7:09:2e:c9:60:0a:68:14:ef:39:e6:fc:fb:6c:
d0:9c:4e:81:d0:e6:8a:94:64:65:51:ab:a3:00:0b:69:2f:cf:
98:16:f8:30:7a:c4:26:c7:f2:f8:41:da:4c:4e:22:f9:f3:59:
d4:13:26:6d:15:6b:ca:f2:80:b4:2e:42:00:87:28:f9:be:e3:
68:c8:09:47:bb:4e:1e:3a:2d:18:a7:a8:fa:eb:46:a3:48:15:
1a:ff:37:25:ed:18:f7:ca:6c:94:bb:3b:91:0c:aa:40:24:a4:
8d:bd:12:d0:b1:20:18:3b:94:65:55:e9:04:bc:ee:35:32:57:
fa:c5:76:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:18 2026 by rpki-client