Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
File: zAGDPH7l80P_CTtsTmFR0ONkV2g.mft (raw, json)
Hash identifier: 842U4SpweC4/pjZTscWwEBnAtTY3yUQSgfI+MVE3Ybo=
Subject key identifier: 6A:90:3A:2D:78:36:FD:43:27:2B:5E:1C:55:1B:B0:F0:82:D4:77:8D
Authority key identifier: CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
Certificate issuer: /CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Certificate serial: 01A0DACDF38FD19BA96CBC4D7D349245D953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
Manifest number: 1A7A
Signing time: Fri 25 Sep 2026 23:02:05 +0000
Manifest this update: Fri 25 Sep 2026 23:02:05 +0000
Manifest next update: Sat 26 Sep 2026 23:02:05 +0000
Files and hashes: 1: ZzkZbeBVmlrhqGGKs6Yd3AeUvaE.roa (hash: IagFhxwf07PxkdXjevXoZdw0hvj+5sj4zJXs1+hlG/o=)
2: iHBYOJIGB1YPm4Hr-bORCIB-5Nw.roa (hash: It8YvfViWyNErBB7Zv+bZEVw/M7ptWvSo9mhIgQMuss=)
3: zAGDPH7l80P_CTtsTmFR0ONkV2g.crl (hash: ICbLKjnnM/nEQ+qoT0pF3lm5T3mYD335YSdBlpstiRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:cd:f3:8f:d1:9b:a9:6c:bc:4d:7d:34:92:45:d9:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Validity
Not Before: Sep 25 23:02:05 2026 GMT
Not After : Sep 26 23:02:05 2026 GMT
Subject: CN=6a903a2d7836fd43272b5e1c551bb0f082d4778d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f7:03:4f:5f:8c:23:56:ca:b2:b7:1c:38:ee:
0a:41:06:ee:86:79:f1:55:07:55:e3:0c:b7:7d:96:
24:2f:80:f2:2c:51:f6:79:77:67:f2:7c:f5:4a:0f:
d1:c5:85:70:1d:84:7a:96:5a:65:da:9a:e7:f0:bc:
fe:9f:bf:2a:be:20:51:90:7b:b5:d4:6e:02:52:db:
63:3c:8b:2c:45:88:3f:d3:8f:9c:17:53:5b:e7:a0:
d3:d4:16:f9:87:60:ee:49:0e:43:e1:aa:4e:cd:b2:
47:9c:bd:6e:ea:85:07:6b:1a:53:e0:4e:00:9c:c4:
ab:a5:6a:bf:73:62:93:48:5c:3a:c3:7e:2c:47:91:
bd:1f:dc:16:a7:2b:28:ea:2c:a8:8f:56:e8:b2:b7:
89:c5:92:5e:d1:67:dc:68:d4:81:ef:05:86:49:75:
ae:ba:1b:74:13:b7:1e:61:f1:ab:71:70:07:fd:e8:
bf:90:5a:cc:1a:77:e9:4f:32:91:8a:c8:94:f2:d7:
89:20:52:7d:eb:64:cd:80:43:27:d9:46:a8:a7:d1:
85:e9:31:45:79:76:3f:d9:49:44:20:3f:c5:46:72:
9c:3b:82:2c:92:42:18:81:e0:7f:45:6f:d7:11:3e:
ca:1a:0a:31:67:15:cf:fa:0a:ec:c7:66:4c:19:20:
cd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:90:3A:2D:78:36:FD:43:27:2B:5E:1C:55:1B:B0:F0:82:D4:77:8D
X509v3 Authority Key Identifier:
keyid:CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:fa:84:94:99:a2:f8:1e:26:18:13:6d:e7:cc:02:f0:10:aa:
77:2c:87:85:a3:dc:a4:3d:a9:b5:b8:29:53:83:d6:82:0b:cf:
24:17:71:30:4d:9e:51:20:6e:11:23:50:7c:47:b6:c4:7f:4f:
5c:06:62:6c:32:96:7d:f0:83:a9:48:9a:78:e8:94:07:ed:9c:
aa:33:39:1b:c6:f6:e9:a0:e7:5f:23:68:20:bd:78:c9:1e:17:
01:04:f6:f4:52:91:77:9b:15:9d:7d:a8:60:50:89:e1:85:f0:
c7:c2:fc:d1:04:26:84:8a:45:b1:e5:89:8d:2a:8a:64:38:1b:
74:6a:df:ca:10:7e:9c:76:f4:d7:1b:a0:c9:93:16:c1:8a:a3:
9a:00:f3:7d:7b:6f:9d:c2:8f:a9:04:76:35:7d:4b:01:27:96:
ea:28:9c:eb:28:da:cc:14:c9:6c:27:e0:2c:96:8c:b9:87:24:
47:9b:19:40:c7:d5:3c:1e:77:e0:92:e7:e2:b8:f6:dd:d1:ef:
8b:7e:e4:f1:fd:9d:5f:3d:03:24:08:3b:1e:c1:94:4b:04:d9:
c5:d0:8a:82:e7:ac:a7:7a:8f:18:be:68:35:11:4a:ed:91:bb:
aa:9e:05:51:db:d0:fa:10:eb:58:85:dc:28:82:2a:46:57:62:
b8:32:27:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDazfOP0ZupbLxNfTSSRdlTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMDE4MzNjN2VlNWYzNDNmZjA5M2I2YzRlNjE1MWQwZTM2
NDU3NjgwHhcNMjYwOTI1MjMwMjA1WhcNMjYwOTI2MjMwMjA1WjAzMTEwLwYDVQQD
Eyg2YTkwM2EyZDc4MzZmZDQzMjcyYjVlMWM1NTFiYjBmMDgyZDQ3NzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPcDT1+MI1bKsrccOO4KQQbuhnnx
VQdV4wy3fZYkL4DyLFH2eXdn8nz1Sg/RxYVwHYR6llpl2prn8Lz+n78qviBRkHu1
1G4CUttjPIssRYg/04+cF1Nb56DT1Bb5h2DuSQ5D4apOzbJHnL1u6oUHaxpT4E4A
nMSrpWq/c2KTSFw6w34sR5G9H9wWpyso6iyoj1bosreJxZJe0WfcaNSB7wWGSXWu
uht0E7ceYfGrcXAH/ei/kFrMGnfpTzKRisiU8teJIFJ962TNgEMn2Uaop9GF6TFF
eXY/2UlEID/FRnKcO4IskkIYgeB/RW/XET7KGgoxZxXP+grsx2ZMGSDNCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGqQOi14Nv1DJyteHFUbsPCC1HeNMB8GA1UdIwQY
MBaAFMwBgzx+5fND/wk7bE5hUdDjZFdoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekFHRFBIN2w4MFBfQ1R0c1RtRlIwT05rVjJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9kNDA3NzMtY2YyZC00MTk4LThiM2Yt
NzI3YWI2ZDA3ZmYyLzEvekFHRFBIN2w4MFBfQ1R0c1RtRlIwT05rVjJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9kNDA3NzMtY2YyZC00MTk4LThiM2YtNzI3YWI2ZDA3ZmYy
LzEvekFHRFBIN2w4MFBfQ1R0c1RtRlIwT05rVjJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwvqElJmi
+B4mGBNt58wC8BCqdyyHhaPcpD2ptbgpU4PWggvPJBdxME2eUSBuESNQfEe2xH9P
XAZibDKWffCDqUiaeOiUB+2cqjM5G8b26aDnXyNoIL14yR4XAQT29FKRd5sVnX2o
YFCJ4YXwx8L80QQmhIpFseWJjSqKZDgbdGrfyhB+nHb01xugyZMWwYqjmgDzfXtv
ncKPqQR2NX1LASeW6iic6yjazBTJbCfgLJaMuYckR5sZQMfVPB534JLn4rj23dHv
i37k8f2dXz0DJAg7HsGUSwTZxdCKguesp3qPGL5oNRFK7ZG7qp4FUdvQ+hDrWIXc
KIIqRldiuDInGQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:22:58 2026 by rpki-client