Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
File: zABy2pgRQZPBBM4aYJ2SppdvnEA.mft (raw, json)
Hash identifier: X/BeyencZiHJ8wbss6uuT2jusWSuXb9kkJ1GOJrMn0M=
Subject key identifier: 45:58:39:AC:49:07:1C:88:80:A7:EC:80:8F:17:7C:FD:83:E0:CA:75
Authority key identifier: CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
Certificate issuer: /CN=cc0072da98114193c104ce1a609d92a6976f9c40
Certificate serial: 01A1DDCBF80D36EA9A95F7B78E82AFEB4C68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
Manifest number: 1155
Signing time: Sun 15 Nov 2026 06:01:34 +0000
Manifest this update: Sun 15 Nov 2026 06:01:34 +0000
Manifest next update: Mon 16 Nov 2026 06:01:34 +0000
Files and hashes: 1: MZXty06Zl0SzNmooJ_8YDA7IJCo.roa (hash: CxYqpGtTZxJ+XJM89fQrjKOfOuAfJMmZBcg+oB/Yo2U=)
2: zABy2pgRQZPBBM4aYJ2SppdvnEA.crl (hash: DmlhcvuNbqCz070sfm6WNpK7tVrgs3op1QVa0eRaXjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cb:f8:0d:36:ea:9a:95:f7:b7:8e:82:af:eb:4c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc0072da98114193c104ce1a609d92a6976f9c40
Validity
Not Before: Nov 15 06:01:34 2026 GMT
Not After : Nov 16 06:01:34 2026 GMT
Subject: CN=455839ac49071c8880a7ec808f177cfd83e0ca75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:aa:ff:9b:c7:e5:7c:a4:bd:02:d7:d2:cf:61:
7b:33:49:57:95:b0:82:6c:fd:52:40:f0:e6:99:43:
ed:52:82:0c:06:c1:b1:d4:9f:dc:2f:2e:09:9e:b9:
33:85:16:05:c0:d3:3b:76:99:92:5f:02:a1:b3:fd:
04:6a:9e:f3:79:06:7c:56:c4:c8:e6:98:20:be:84:
b2:9e:45:73:0f:78:ba:51:01:82:c0:48:47:96:b2:
b5:05:fd:48:c2:84:da:0a:c7:bb:65:ae:36:07:65:
b0:58:4a:46:54:6e:be:bf:41:1f:7c:84:f8:62:44:
2d:8f:db:33:d8:68:70:56:83:64:db:78:3d:8a:cf:
73:e6:93:b0:c3:e1:5d:5a:28:0e:39:19:a6:87:f3:
68:c9:37:41:28:d9:83:18:c0:bd:4e:f7:6f:1c:9d:
e4:d7:e5:32:5b:a7:66:cf:ab:48:c5:b0:2e:8f:8b:
15:50:20:6a:10:ea:50:24:e4:82:85:24:d3:1d:2f:
97:eb:1b:f8:83:f9:7e:87:d7:7e:9f:5d:1d:36:e6:
10:9e:2c:a0:fd:5b:f8:75:22:c4:34:da:56:ae:9a:
15:b6:50:cd:40:52:2a:54:a7:bf:02:65:cb:c0:17:
f4:53:67:5f:c1:04:55:14:c5:ff:2b:62:49:97:b8:
ec:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:58:39:AC:49:07:1C:88:80:A7:EC:80:8F:17:7C:FD:83:E0:CA:75
X509v3 Authority Key Identifier:
keyid:CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c4:8d:bf:19:5e:48:0e:62:6b:ae:06:a5:9d:37:8b:4c:a1:
4f:71:12:d7:74:4a:17:2d:6f:c9:45:e5:65:8f:a1:33:b2:dd:
f2:0b:a8:95:93:7b:4f:ae:2d:50:12:ed:bd:63:6e:0e:cd:3a:
e1:03:9c:7f:8e:11:c5:97:d2:62:8a:b6:86:cc:a1:f9:29:dd:
63:47:50:ad:c0:76:8d:58:71:86:60:fd:eb:79:8c:25:86:a9:
f5:77:bd:42:65:54:4b:9d:07:b6:ba:c7:8e:67:a5:32:60:fe:
4a:36:92:c2:07:7a:d8:c6:59:f9:19:74:85:80:ce:35:56:b0:
15:29:67:65:f5:03:cf:e2:18:3f:a4:1d:85:c7:ec:f4:24:4a:
ca:2d:d6:3e:70:7f:8b:42:02:ea:c0:bc:bc:98:f9:7a:e7:2f:
c9:8e:42:68:0f:95:e1:fe:41:b1:99:d2:10:80:a8:7f:69:21:
d3:56:b8:c9:09:e8:d7:b3:da:eb:6c:54:2f:ba:69:48:f3:b0:
5e:f9:d2:32:5d:53:b2:56:1e:06:5a:52:c3:9f:7a:0c:b6:9d:
0e:a2:1d:1e:50:8e:2a:53:19:54:74:d8:7f:ba:94:be:82:d4:
7f:13:b7:bb:4b:6f:c8:6f:50:25:22:9c:69:c9:f6:26:0a:3b:
41:de:90:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:55:25 2026 by rpki-client