Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
File: zAGDPH7l80P_CTtsTmFR0ONkV2g.mft (raw, json)
Hash identifier: s7zC9Gz8b51JxRbkAwfvznIJAyDiWnr5vCvCY01L0Lk=
Subject key identifier: A4:A9:7D:CD:6A:BB:50:F4:0D:D3:A8:67:AE:33:46:21:6E:78:4F:77
Authority key identifier: CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
Certificate issuer: /CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Certificate serial: 01A1DD9475B1C3F442F5065B9B24B1264F10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
Manifest number: 1B00
Signing time: Sun 15 Nov 2026 05:00:56 +0000
Manifest this update: Sun 15 Nov 2026 05:00:56 +0000
Manifest next update: Mon 16 Nov 2026 05:00:56 +0000
Files and hashes: 1: ZzkZbeBVmlrhqGGKs6Yd3AeUvaE.roa (hash: IagFhxwf07PxkdXjevXoZdw0hvj+5sj4zJXs1+hlG/o=)
2: iHBYOJIGB1YPm4Hr-bORCIB-5Nw.roa (hash: It8YvfViWyNErBB7Zv+bZEVw/M7ptWvSo9mhIgQMuss=)
3: zAGDPH7l80P_CTtsTmFR0ONkV2g.crl (hash: OmnGlEXhvnNu+Puq65HXiGf1bloG7LZGqpmVtv7q90o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:75:b1:c3:f4:42:f5:06:5b:9b:24:b1:26:4f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Validity
Not Before: Nov 15 05:00:56 2026 GMT
Not After : Nov 16 05:00:56 2026 GMT
Subject: CN=a4a97dcd6abb50f40dd3a867ae3346216e784f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7b:c2:8d:19:fa:e0:1b:3b:63:86:56:0c:3c:
f5:fb:ee:b2:18:84:0e:c9:41:7b:ee:59:32:d5:81:
d6:7e:3a:9f:c5:25:9f:e9:92:7e:d9:f0:e5:00:dd:
79:cb:d3:86:f1:c6:f3:4d:04:87:9d:83:42:a9:4e:
b6:dd:1e:c5:47:d8:87:61:71:bc:df:2c:a8:48:ff:
36:8a:b6:94:b4:71:70:0c:fd:56:ff:37:d0:b3:b7:
d1:0a:4c:d8:c4:5d:56:98:0d:23:4a:cc:2f:f8:f2:
4b:ec:48:39:96:57:45:6b:f8:d1:8d:b7:2d:c8:7f:
82:97:0c:23:be:fb:7d:b6:dc:ff:3c:cc:00:82:9f:
f6:da:ec:fc:0b:67:23:9d:10:dc:a4:48:64:d3:33:
be:8b:37:6f:d2:49:56:61:bf:a0:b5:24:bf:be:65:
b9:84:36:c0:39:f9:68:63:e3:8c:95:f1:2c:e3:38:
e0:ac:51:97:80:94:2c:cb:4f:be:87:5b:96:3f:59:
ef:de:76:6b:63:a2:8f:66:be:bd:4c:f0:99:f0:d0:
a9:2f:38:d5:29:76:41:d2:f6:c7:f6:11:7f:4a:fc:
2c:89:bc:cb:06:d2:87:0c:03:3d:c0:be:96:06:c2:
8e:7f:50:d5:e1:1e:75:49:44:63:d2:d1:32:c9:de:
ed:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A9:7D:CD:6A:BB:50:F4:0D:D3:A8:67:AE:33:46:21:6E:78:4F:77
X509v3 Authority Key Identifier:
keyid:CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:42:1a:c6:2f:bb:31:a2:13:60:ea:03:23:19:fc:d5:90:53:
07:ba:f9:b6:c9:3d:6c:5c:fe:b2:b4:59:e2:cc:ab:db:7a:8b:
5c:65:82:5f:91:cb:67:f7:6d:90:d0:d8:eb:79:12:d4:bd:bf:
98:8f:d5:1e:75:e6:24:aa:2d:84:97:c8:c7:32:f4:02:61:bb:
b4:31:59:0e:a7:30:ac:5d:cd:fe:e1:20:ea:0e:f0:c3:31:4b:
0d:23:69:71:b6:f0:e7:a2:5b:3e:e3:1c:d5:39:e9:13:26:1a:
69:21:46:46:46:58:ad:d2:12:29:ce:a8:9e:50:3b:b9:1e:5e:
44:27:58:21:04:ca:32:21:b7:4e:4b:de:a3:a9:a5:80:eb:90:
f7:87:94:86:6d:27:b5:23:4d:b4:36:92:d5:f3:13:63:f8:eb:
85:d7:75:f3:6b:0e:d7:f0:f2:fc:c4:32:c3:f6:59:ad:aa:c8:
eb:cf:81:bc:73:a9:aa:b8:38:b1:5a:21:22:59:ac:50:69:83:
81:f1:ce:a7:aa:a8:9b:30:7a:43:8b:1c:48:95:f0:33:77:a2:
11:ab:7c:42:43:d5:bf:11:52:21:6b:c3:0e:8b:50:42:fb:6d:
9c:03:ea:c9:2b:c4:73:7f:a4:aa:93:84:2b:c6:9e:dd:0c:e7:
52:d1:48:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:35:35 2026 by rpki-client