Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
File: zABy2pgRQZPBBM4aYJ2SppdvnEA.mft (raw, json)
Hash identifier: JFy1ugRVPUZsDxnp9VYMmLdadrC7FuyKaGoYNoEFk+w=
Subject key identifier: 97:1D:79:55:46:2E:5D:5C:2F:75:90:D6:C2:1A:F2:EC:AE:8E:0D:57
Authority key identifier: CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
Certificate issuer: /CN=cc0072da98114193c104ce1a609d92a6976f9c40
Certificate serial: 019D26CCFD22EADFD3D270311CD8B5D58587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
Manifest number: 0EE4
Signing time: Wed 25 Mar 2026 21:01:01 +0000
Manifest this update: Wed 25 Mar 2026 21:01:01 +0000
Manifest next update: Thu 26 Mar 2026 21:01:01 +0000
Files and hashes: 1: MZXty06Zl0SzNmooJ_8YDA7IJCo.roa (hash: CxYqpGtTZxJ+XJM89fQrjKOfOuAfJMmZBcg+oB/Yo2U=)
2: zABy2pgRQZPBBM4aYJ2SppdvnEA.crl (hash: 1W/FYMAbOPsovoej1M4I4PrnYbEri3fbxiLlnS1z9WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:fd:22:ea:df:d3:d2:70:31:1c:d8:b5:d5:85:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc0072da98114193c104ce1a609d92a6976f9c40
Validity
Not Before: Mar 25 21:01:01 2026 GMT
Not After : Mar 26 21:01:01 2026 GMT
Subject: CN=971d7955462e5d5c2f7590d6c21af2ecae8e0d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:af:78:6f:b4:d7:43:93:39:55:5b:07:8b:eb:
9b:e4:81:43:22:34:b9:0c:50:5b:e8:a7:2d:c0:4a:
47:09:e2:d1:de:96:7a:56:64:fe:1a:4d:be:c1:a5:
8b:94:9a:98:9a:5d:3f:69:0d:73:fd:98:95:e3:b2:
18:d3:1b:84:07:e9:45:cf:1a:74:cc:47:22:34:34:
3a:c8:32:a3:43:ce:8a:db:7f:e2:0d:64:b5:64:9b:
e6:d7:97:c3:97:f5:62:28:4a:53:7e:b8:37:51:92:
57:8f:6f:57:06:29:81:87:07:50:75:12:f3:f3:46:
77:4a:07:60:3d:68:e5:6b:38:fd:83:2d:23:9f:13:
8f:77:09:0f:59:10:19:15:de:e6:83:97:b0:1a:1e:
44:25:37:45:6e:52:6a:40:cc:9e:e9:f8:43:cc:0b:
08:b7:8b:29:6a:e6:24:0b:65:78:08:65:3a:af:b8:
65:0d:c6:4d:44:c2:fb:00:26:ca:e0:3b:c5:28:22:
1a:77:5e:ee:d7:6d:02:16:0c:b5:a2:45:98:2d:0e:
d3:d9:9a:72:7a:a3:3d:97:76:db:65:db:4a:2a:de:
d4:e1:ea:03:d0:74:dd:7c:74:39:6b:89:55:91:4c:
78:09:b0:8f:e5:e3:bd:11:3e:0f:fb:07:58:c7:cf:
b4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1D:79:55:46:2E:5D:5C:2F:75:90:D6:C2:1A:F2:EC:AE:8E:0D:57
X509v3 Authority Key Identifier:
keyid:CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:b2:58:61:08:7e:3f:b1:18:22:49:c9:ea:21:5e:76:7f:a6:
45:de:9f:3b:5f:d0:b0:78:66:e3:44:9e:a3:c2:06:9e:67:70:
0f:71:24:7b:19:f0:86:76:43:8d:3a:f8:22:9c:5d:8a:ed:10:
13:07:14:5c:19:2f:a5:5a:be:e8:c0:6b:dd:34:95:d6:80:c6:
04:1b:71:c7:96:c7:d0:2a:a9:10:ca:8a:ee:09:ae:83:bf:d5:
b0:ec:95:50:a6:1a:86:4a:30:06:15:3d:4c:f4:68:f8:b4:b3:
ea:2b:f4:9e:3a:66:b4:23:6d:a1:64:6c:63:5c:ef:92:60:fd:
79:0e:6c:ed:b1:9f:85:67:bb:13:3b:88:c9:1c:26:aa:f4:43:
76:06:bd:5f:5a:8c:78:d0:a2:35:ec:a9:40:32:ee:eb:a5:ff:
bc:19:2c:0c:13:62:20:29:a4:12:c5:e9:a1:d1:7f:15:23:d8:
10:54:c9:47:82:24:3e:a8:d4:e9:e5:d2:80:08:d3:53:8d:40:
86:4b:bd:3a:58:4b:0d:e9:4d:2e:fe:df:fa:21:8c:b0:7f:91:
a6:0d:5e:62:99:43:14:42:08:42:4a:29:f7:70:9f:21:1a:16:
94:0c:13:3b:07:ff:99:39:bc:9d:e7:65:fc:fd:12:29:e2:07:
0f:a0:59:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzP0i6t/T0nAxHNi11YWHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMDA3MmRhOTgxMTQxOTNjMTA0Y2UxYTYwOWQ5MmE2OTc2
ZjljNDAwHhcNMjYwMzI1MjEwMTAxWhcNMjYwMzI2MjEwMTAxWjAzMTEwLwYDVQQD
Eyg5NzFkNzk1NTQ2MmU1ZDVjMmY3NTkwZDZjMjFhZjJlY2FlOGUwZDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4694b7TXQ5M5VVsHi+ub5IFDIjS5
DFBb6KctwEpHCeLR3pZ6VmT+Gk2+waWLlJqYml0/aQ1z/ZiV47IY0xuEB+lFzxp0
zEciNDQ6yDKjQ86K23/iDWS1ZJvm15fDl/ViKEpTfrg3UZJXj29XBimBhwdQdRLz
80Z3SgdgPWjlazj9gy0jnxOPdwkPWRAZFd7mg5ewGh5EJTdFblJqQMye6fhDzAsI
t4spauYkC2V4CGU6r7hlDcZNRML7ACbK4DvFKCIad17u120CFgy1okWYLQ7T2Zpy
eqM9l3bbZdtKKt7U4eoD0HTdfHQ5a4lVkUx4CbCP5eO9ET4P+wdYx8+0sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJcdeVVGLl1cL3WQ1sIa8uyujg1XMB8GA1UdIwQY
MBaAFMwActqYEUGTwQTOGmCdkqaXb5xAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekFCeTJwZ1JRWlBCQk00YVlKMlNwcGR2bkVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82MDdjYWEtOGY0OS00NTliLWFhNzQt
YzBlYzhiOTVhYjc3LzEvekFCeTJwZ1JRWlBCQk00YVlKMlNwcGR2bkVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82MDdjYWEtOGY0OS00NTliLWFhNzQtYzBlYzhiOTVhYjc3
LzEvekFCeTJwZ1JRWlBCQk00YVlKMlNwcGR2bkVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsrJYYQh+
P7EYIknJ6iFedn+mRd6fO1/QsHhm40Seo8IGnmdwD3EkexnwhnZDjTr4Ipxdiu0Q
EwcUXBkvpVq+6MBr3TSV1oDGBBtxx5bH0CqpEMqK7gmug7/VsOyVUKYahkowBhU9
TPRo+LSz6iv0njpmtCNtoWRsY1zvkmD9eQ5s7bGfhWe7EzuIyRwmqvRDdga9X1qM
eNCiNeypQDLu66X/vBksDBNiICmkEsXpodF/FSPYEFTJR4IkPqjU6eXSgAjTU41A
hku9OlhLDelNLv7f+iGMsH+Rpg1eYplDFEIIQkop93CfIRoWlAwTOwf/mTm8nedl
/P0SKeIHD6BZ/A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:23 2026 by rpki-client