Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
File: zHLmM99WNan5jS9optKty0QVXNw.mft (raw, json)
Hash identifier: Jw4Il0beZWSz7kg+aOU6bk9Zgme4z8E6wr72kATMjP8=
Subject key identifier: 27:63:D6:0C:A7:AE:96:2D:C1:0B:AC:F2:8A:D9:44:57:B6:97:CC:F6
Authority key identifier: CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
Certificate issuer: /CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Certificate serial: 019F93C89F27BA89CEEEE151A9488A2D6962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 11:00:26 +0000
Manifest this update: Fri 24 Jul 2026 11:00:26 +0000
Manifest next update: Sat 25 Jul 2026 11:00:26 +0000
Files and hashes: 1: MaDSTN6Q7CFLTp6SIW6KUIRqSLY.roa (hash: qjTXYKs6k3XUTzqlyyhuKa9TKSebMAZ83ecmNwpA4d4=)
2: x5tgECJAP6fckf75oremz0-3QKM.roa (hash: HEVb3Ub0oIq5xOKjyrV77VxFtUue3E7fb6XdS69sJHM=)
3: zHLmM99WNan5jS9optKty0QVXNw.crl (hash: pmB4TDgJZTC646gJVhS708lvOZDqkdyvqiQI5zq1CAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:9f:27:ba:89:ce:ee:e1:51:a9:48:8a:2d:69:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Validity
Not Before: Jul 24 11:00:26 2026 GMT
Not After : Jul 25 11:00:26 2026 GMT
Subject: CN=2763d60ca7ae962dc10bacf28ad94457b697ccf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b6:42:2b:36:cc:19:2e:8d:51:ff:7a:3c:b6:
74:e6:ec:f4:94:cb:17:17:a1:6b:17:61:c2:21:82:
95:4e:42:a4:cf:02:a9:76:79:44:d4:9f:84:35:ea:
88:42:5d:31:aa:86:e7:4e:91:b1:fa:95:2a:d9:fc:
69:59:7e:76:54:44:3a:63:16:92:e9:41:e1:4f:1f:
1a:f2:df:c2:b1:d9:76:12:58:f9:38:a4:8e:88:fe:
57:c8:53:f2:e9:3b:99:ea:a3:bd:56:15:4e:66:d4:
32:6c:93:e9:79:b3:45:1a:11:b6:ba:bc:5a:54:a4:
34:e4:cb:02:ad:ee:6f:9d:b9:59:3a:00:15:14:af:
43:f0:2a:25:bd:5f:ab:0e:a7:80:9b:b9:c4:4c:34:
35:0f:72:7b:24:ad:00:e3:19:f9:e6:7a:47:9e:d4:
c2:42:38:2a:b1:f0:b3:96:c3:19:c4:1c:79:59:cb:
44:9b:77:d5:7d:63:60:ab:ff:2a:46:15:39:8f:ba:
e6:44:f5:00:f8:58:fa:d5:c5:87:24:39:4b:48:a6:
4b:d2:45:d4:49:8a:34:1f:e6:bd:21:e0:6f:b2:96:
c1:ff:8d:58:d4:67:8f:ea:64:04:27:33:02:0e:b2:
2b:8c:7c:94:50:39:6d:3b:1a:7d:b4:e3:22:36:5d:
10:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:63:D6:0C:A7:AE:96:2D:C1:0B:AC:F2:8A:D9:44:57:B6:97:CC:F6
X509v3 Authority Key Identifier:
keyid:CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:bd:3e:2b:95:b9:3f:94:04:54:9c:15:9f:66:05:c8:27:ac:
c8:fd:09:1d:3d:ff:b5:5b:2e:e0:06:38:be:3e:b3:f1:d1:0e:
2c:ec:e0:0a:13:d2:ef:fd:18:fd:9f:97:ef:37:43:f6:2d:82:
52:62:7d:4b:19:96:cd:cf:f2:cc:2c:b7:de:71:d6:c8:1f:20:
e6:4e:e3:3b:82:73:63:c9:10:32:e5:3b:a9:e3:4b:2d:4e:73:
37:68:04:fa:85:3d:ae:60:70:bd:d5:9a:3c:f2:4f:b0:ad:87:
48:38:4b:32:e6:c5:95:04:e6:bb:40:ea:43:51:5c:b4:91:ad:
20:a8:c7:ad:bc:0c:4d:da:74:8d:c6:9f:a5:b0:9d:47:28:16:
fa:1e:ae:a0:0c:4b:6f:6f:fe:4f:0c:15:4f:c4:05:e0:2f:9b:
8a:1a:ed:26:a9:97:8e:eb:c0:dc:e0:ed:1b:04:92:0e:2a:55:
7c:c4:e3:1f:82:b2:fc:26:a6:52:95:32:6c:45:f9:c2:64:99:
64:27:30:5d:30:95:60:22:a7:b3:0e:58:26:ed:1a:04:a1:75:
41:7f:5c:ee:43:e8:0c:d9:e9:2a:a8:83:5d:bf:a8:d4:60:35:
58:2a:b9:0d:56:52:d1:1c:e6:9f:79:df:f5:c6:fd:ae:f5:3e:
b2:bb:76:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TyJ8nuonO7uFRqUiKLWliMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNzJlNjMzZGY1NjM1YTlmOThkMmY2OGE2ZDJhZGNiNDQx
NTVjZGMwHhcNMjYwNzI0MTEwMDI2WhcNMjYwNzI1MTEwMDI2WjAzMTEwLwYDVQQD
EygyNzYzZDYwY2E3YWU5NjJkYzEwYmFjZjI4YWQ5NDQ1N2I2OTdjY2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7ZCKzbMGS6NUf96PLZ05uz0lMsX
F6FrF2HCIYKVTkKkzwKpdnlE1J+ENeqIQl0xqobnTpGx+pUq2fxpWX52VEQ6YxaS
6UHhTx8a8t/Csdl2Elj5OKSOiP5XyFPy6TuZ6qO9VhVOZtQybJPpebNFGhG2urxa
VKQ05MsCre5vnblZOgAVFK9D8ColvV+rDqeAm7nETDQ1D3J7JK0A4xn55npHntTC
QjgqsfCzlsMZxBx5WctEm3fVfWNgq/8qRhU5j7rmRPUA+Fj61cWHJDlLSKZL0kXU
SYo0H+a9IeBvspbB/41Y1GeP6mQEJzMCDrIrjHyUUDltOxp9tOMiNl0QqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCdj1gynrpYtwQus8orZRFe2l8z2MB8GA1UdIwQY
MBaAFMxy5jPfVjWp+Y0vaKbSrctEFVzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekhMbU05OVdOYW41alM5b3B0S3R5MFFWWE53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8wMjcwMzYtODJiMy00MTI4LWI5NTQt
ZDAxMmNhOWVjMTk3LzEvekhMbU05OVdOYW41alM5b3B0S3R5MFFWWE53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8wMjcwMzYtODJiMy00MTI4LWI5NTQtZDAxMmNhOWVjMTk3
LzEvekhMbU05OVdOYW41alM5b3B0S3R5MFFWWE53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAor0+K5W5
P5QEVJwVn2YFyCesyP0JHT3/tVsu4AY4vj6z8dEOLOzgChPS7/0Y/Z+X7zdD9i2C
UmJ9SxmWzc/yzCy33nHWyB8g5k7jO4JzY8kQMuU7qeNLLU5zN2gE+oU9rmBwvdWa
PPJPsK2HSDhLMubFlQTmu0DqQ1FctJGtIKjHrbwMTdp0jcafpbCdRygW+h6uoAxL
b2/+TwwVT8QF4C+bihrtJqmXjuvA3ODtGwSSDipVfMTjH4Ky/CamUpUybEX5wmSZ
ZCcwXTCVYCKnsw5YJu0aBKF1QX9c7kPoDNnpKqiDXb+o1GA1WCq5DVZS0Rzmn3nf
9cb9rvU+srt2Cg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:28:22 2026 by rpki-client