Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
File: zAGDPH7l80P_CTtsTmFR0ONkV2g.mft (raw, json)
Hash identifier: E68iPmPUXun4ul6zUibqQ0TvQh9HWyJfo/Aig1nxncI=
Subject key identifier: D3:82:82:7A:53:5D:66:87:B0:98:85:1A:2D:83:D0:5C:BA:48:87:81
Authority key identifier: CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
Certificate issuer: /CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Certificate serial: 01A0D8DF794DBD11EA8133F597AA842271CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
Manifest number: 1A79
Signing time: Fri 25 Sep 2026 14:01:59 +0000
Manifest this update: Fri 25 Sep 2026 14:01:59 +0000
Manifest next update: Sat 26 Sep 2026 14:01:59 +0000
Files and hashes: 1: ZzkZbeBVmlrhqGGKs6Yd3AeUvaE.roa (hash: IagFhxwf07PxkdXjevXoZdw0hvj+5sj4zJXs1+hlG/o=)
2: iHBYOJIGB1YPm4Hr-bORCIB-5Nw.roa (hash: It8YvfViWyNErBB7Zv+bZEVw/M7ptWvSo9mhIgQMuss=)
3: zAGDPH7l80P_CTtsTmFR0ONkV2g.crl (hash: a7/e0E/u3cke2kGPicPcndqhL9VcC846nucAc65UDTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:df:79:4d:bd:11:ea:81:33:f5:97:aa:84:22:71:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Validity
Not Before: Sep 25 14:01:59 2026 GMT
Not After : Sep 26 14:01:59 2026 GMT
Subject: CN=d382827a535d6687b098851a2d83d05cba488781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:54:44:2b:0a:9f:7e:ab:ad:fe:66:1d:16:cf:
82:34:12:9d:45:d2:2a:74:49:36:92:d8:43:ed:7c:
d8:93:93:83:3e:a5:92:5d:ab:dd:94:09:a3:dd:7a:
72:ef:a1:de:c9:42:9f:b0:82:23:22:db:6f:3c:0a:
9c:45:97:27:4d:5d:4d:99:a2:22:06:06:9a:a1:d9:
df:9b:2e:88:8b:bc:50:72:79:40:9e:ca:91:8c:89:
ae:dc:66:a5:97:3b:ee:eb:1f:1b:fa:50:f4:13:46:
3f:20:9d:79:3f:51:da:0c:94:e6:32:a8:06:c0:e6:
c3:97:bb:ac:b3:0b:e1:b4:9f:d8:a4:bd:e1:98:74:
0a:23:a6:dd:3c:61:d5:97:13:6d:04:05:bf:29:91:
34:83:ce:66:5c:d8:78:09:c6:e5:a2:6f:3a:52:ac:
4e:d3:69:22:52:90:6d:85:3a:e4:cc:5f:38:c4:e2:
8a:9b:83:10:35:0f:e9:0d:9b:56:7d:79:f1:85:9c:
eb:23:e6:a4:fd:b9:b7:a4:11:99:d3:2e:b5:64:c6:
b7:d2:b2:85:ce:5d:66:87:c0:c5:93:2a:db:c8:18:
29:91:67:6c:4f:10:12:c1:e3:ff:d3:f8:42:ec:c0:
25:81:e7:15:57:73:7c:e1:e2:5b:3b:37:e3:58:2e:
be:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:82:82:7A:53:5D:66:87:B0:98:85:1A:2D:83:D0:5C:BA:48:87:81
X509v3 Authority Key Identifier:
keyid:CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:4e:59:46:1d:e4:52:43:0e:43:45:60:f3:63:ae:46:43:bb:
4b:15:f7:e4:cb:e0:fd:bc:1b:bd:ff:7e:76:79:52:a2:76:07:
d1:5d:04:35:ad:8b:83:f6:3d:ec:51:db:bc:63:45:3a:d7:72:
1a:6b:24:12:de:8f:d0:83:bd:bf:a0:99:4f:87:3b:8f:d4:c5:
33:37:36:93:48:15:3a:e4:2d:9c:54:aa:56:f0:49:8b:88:19:
a2:a2:5f:24:63:f2:72:0f:1b:4a:c9:33:61:e7:75:d9:0b:5d:
8b:bf:b7:5e:34:51:1a:b1:de:b3:26:a1:ab:82:1b:08:84:cc:
a8:d5:7d:0f:b9:da:28:48:60:14:5f:18:0c:3b:8a:d4:f5:fd:
9c:04:e3:e4:5c:09:d8:46:75:1c:70:90:ef:29:5b:f6:a5:19:
a8:11:f2:b3:b0:6c:9e:b3:46:fe:49:4c:d2:fd:68:3a:9a:ed:
be:82:ec:3f:31:d8:2f:a9:fe:05:db:e1:c2:31:a9:38:d1:2e:
8b:0d:bd:c9:f7:98:a3:14:45:34:3c:3a:32:fd:d2:db:d4:9b:
fd:6b:c2:ce:05:d8:34:ca:c7:11:be:ee:38:49:ef:6c:de:dd:
01:59:ff:df:5b:e6:77:27:c8:89:04:89:92:5c:97:3c:ca:78:
72:2b:49:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:52:14 2026 by rpki-client