Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
File: zHLmM99WNan5jS9optKty0QVXNw.mft (raw, json)
Hash identifier: zqWV9+9tfK79q1h3j2tl3nYZzp7x75xIfCXIlwX6glQ=
Subject key identifier: 3E:DA:A8:7B:63:8D:D3:A2:10:08:C0:C4:08:51:38:DD:DF:74:E8:62
Authority key identifier: CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
Certificate issuer: /CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Certificate serial: 019E20FF8BC36403AF1BF63070F5909B25FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
Manifest number: 190B
Signing time: Wed 13 May 2026 11:01:18 +0000
Manifest this update: Wed 13 May 2026 11:01:18 +0000
Manifest next update: Thu 14 May 2026 11:01:18 +0000
Files and hashes: 1: MaDSTN6Q7CFLTp6SIW6KUIRqSLY.roa (hash: qjTXYKs6k3XUTzqlyyhuKa9TKSebMAZ83ecmNwpA4d4=)
2: x5tgECJAP6fckf75oremz0-3QKM.roa (hash: HEVb3Ub0oIq5xOKjyrV77VxFtUue3E7fb6XdS69sJHM=)
3: zHLmM99WNan5jS9optKty0QVXNw.crl (hash: GYbK5R0LRDLlcr/GtweLcDUhG17nuXjvmiGTg2A0w64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:8b:c3:64:03:af:1b:f6:30:70:f5:90:9b:25:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Validity
Not Before: May 13 11:01:18 2026 GMT
Not After : May 14 11:01:18 2026 GMT
Subject: CN=3edaa87b638dd3a21008c0c4085138dddf74e862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ad:1b:85:57:39:3e:81:b0:32:c1:ef:21:6f:
5e:0c:48:70:58:50:a0:54:eb:75:dd:28:8a:e2:56:
41:3a:be:c8:6d:6d:11:1c:70:77:1b:ed:95:53:3d:
a5:c4:42:f2:cc:80:44:0d:1c:e7:28:74:a0:dd:09:
40:41:e6:ac:ba:37:9c:5a:67:7e:59:f5:c5:55:1f:
db:96:da:b5:20:a1:a9:2e:c0:46:94:db:2d:7e:96:
1f:0b:0f:6c:87:6b:e2:4a:fe:ff:f3:38:52:9d:f6:
2d:94:c6:8a:d2:80:41:12:07:ce:57:c9:35:50:54:
12:d8:4b:78:cc:35:fd:f4:02:45:d2:67:a8:40:00:
a6:44:d3:9e:8f:5f:ac:5c:c6:8b:5b:2a:02:aa:b2:
05:56:7a:0b:4d:a4:cc:a3:88:b1:2f:48:1d:22:7b:
2f:2e:dc:3d:4e:10:60:08:40:00:bc:a0:11:ff:99:
1a:03:72:b8:4a:51:a1:35:8b:b9:84:d0:7e:7d:36:
d3:c6:3b:44:7b:2a:eb:b1:de:1c:c3:2e:00:c5:22:
45:23:99:c3:48:05:6c:fb:79:55:f9:c4:e9:a8:2d:
84:ea:2f:98:35:c0:8d:92:55:70:3c:31:bb:3e:85:
59:d3:fb:87:b3:a8:50:97:9c:73:bb:f2:98:18:6f:
b0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DA:A8:7B:63:8D:D3:A2:10:08:C0:C4:08:51:38:DD:DF:74:E8:62
X509v3 Authority Key Identifier:
keyid:CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:52:2b:d0:6f:cc:e2:25:2f:e8:cb:7e:12:6c:bc:cb:da:81:
8a:5f:0f:df:37:c4:74:e9:41:cf:30:8d:62:95:72:9e:de:e3:
b7:92:9d:51:3d:a3:e7:3c:fc:2b:77:ea:23:4b:40:95:5f:23:
4d:45:9f:1b:7d:28:7f:63:72:dd:92:16:7b:53:eb:b0:a2:24:
8d:de:ba:ec:02:da:17:8e:93:47:77:4e:2f:9f:91:e3:13:6d:
49:9e:12:b8:94:c7:aa:c1:37:c2:bc:dd:c6:d5:8b:a0:86:c7:
9e:a4:7a:35:01:1b:5f:bb:c7:b9:f1:22:56:ad:15:a6:69:43:
5a:80:af:f8:a2:40:15:3f:6e:7b:cd:e5:b6:d5:83:d5:fc:ae:
7f:aa:61:43:ec:e0:fc:12:84:88:a5:6a:7b:57:52:39:c8:0f:
64:2d:d5:fe:7e:a3:96:e5:87:6f:fc:0a:45:95:a9:2f:ab:a9:
b7:51:2c:78:61:73:89:d2:80:45:40:63:75:c4:45:03:52:b5:
31:1b:40:a3:22:60:11:39:ea:92:4d:21:04:c9:0c:d9:1e:1c:
3a:70:c9:e8:41:01:6c:5a:65:58:d2:ac:cc:b8:5d:9b:ca:32:
55:fc:51:dc:38:90:5f:02:92:a8:20:56:cf:fb:1e:11:e4:a4:
25:2c:b4:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4g/4vDZAOvG/YwcPWQmyX/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNzJlNjMzZGY1NjM1YTlmOThkMmY2OGE2ZDJhZGNiNDQx
NTVjZGMwHhcNMjYwNTEzMTEwMTE4WhcNMjYwNTE0MTEwMTE4WjAzMTEwLwYDVQQD
EygzZWRhYTg3YjYzOGRkM2EyMTAwOGMwYzQwODUxMzhkZGRmNzRlODYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwa0bhVc5PoGwMsHvIW9eDEhwWFCg
VOt13SiK4lZBOr7IbW0RHHB3G+2VUz2lxELyzIBEDRznKHSg3QlAQeasujecWmd+
WfXFVR/bltq1IKGpLsBGlNstfpYfCw9sh2viSv7/8zhSnfYtlMaK0oBBEgfOV8k1
UFQS2Et4zDX99AJF0meoQACmRNOej1+sXMaLWyoCqrIFVnoLTaTMo4ixL0gdInsv
Ltw9ThBgCEAAvKAR/5kaA3K4SlGhNYu5hNB+fTbTxjtEeyrrsd4cwy4AxSJFI5nD
SAVs+3lV+cTpqC2E6i+YNcCNklVwPDG7PoVZ0/uHs6hQl5xzu/KYGG+w0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7aqHtjjdOiEAjAxAhRON3fdOhiMB8GA1UdIwQY
MBaAFMxy5jPfVjWp+Y0vaKbSrctEFVzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekhMbU05OVdOYW41alM5b3B0S3R5MFFWWE53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8wMjcwMzYtODJiMy00MTI4LWI5NTQt
ZDAxMmNhOWVjMTk3LzEvekhMbU05OVdOYW41alM5b3B0S3R5MFFWWE53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8wMjcwMzYtODJiMy00MTI4LWI5NTQtZDAxMmNhOWVjMTk3
LzEvekhMbU05OVdOYW41alM5b3B0S3R5MFFWWE53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1lIr0G/M
4iUv6Mt+Emy8y9qBil8P3zfEdOlBzzCNYpVynt7jt5KdUT2j5zz8K3fqI0tAlV8j
TUWfG30of2Ny3ZIWe1PrsKIkjd667ALaF46TR3dOL5+R4xNtSZ4SuJTHqsE3wrzd
xtWLoIbHnqR6NQEbX7vHufEiVq0VpmlDWoCv+KJAFT9ue83lttWD1fyuf6phQ+zg
/BKEiKVqe1dSOcgPZC3V/n6jluWHb/wKRZWpL6upt1EseGFzidKARUBjdcRFA1K1
MRtAoyJgETnqkk0hBMkM2R4cOnDJ6EEBbFplWNKszLhdm8oyVfxR3DiQXwKSqCBW
z/seEeSkJSy0tA==
-----END CERTIFICATE-----
Generated at Wed May 13 13:51:52 2026 by rpki-client