Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
File: zAGDPH7l80P_CTtsTmFR0ONkV2g.mft (raw, json)
Hash identifier: +B+XkL/SFPMtCDFOLTEsGWYMsJI1uXcx/a3MkZ6Oe3c=
Subject key identifier: 6E:B8:FD:FF:C5:2A:13:57:B9:D6:30:26:70:2F:78:D5:BE:72:0E:7D
Authority key identifier: CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
Certificate issuer: /CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Certificate serial: 019F927F24E3F87C5A55F13B745E53404E07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
Manifest number: 19D0
Signing time: Fri 24 Jul 2026 05:00:33 +0000
Manifest this update: Fri 24 Jul 2026 05:00:33 +0000
Manifest next update: Sat 25 Jul 2026 05:00:33 +0000
Files and hashes: 1: ZzkZbeBVmlrhqGGKs6Yd3AeUvaE.roa (hash: IagFhxwf07PxkdXjevXoZdw0hvj+5sj4zJXs1+hlG/o=)
2: iHBYOJIGB1YPm4Hr-bORCIB-5Nw.roa (hash: It8YvfViWyNErBB7Zv+bZEVw/M7ptWvSo9mhIgQMuss=)
3: zAGDPH7l80P_CTtsTmFR0ONkV2g.crl (hash: o5fE+7DFXncyCbn9/i7oWKetBGEuGTcegPxRiECJJHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:24:e3:f8:7c:5a:55:f1:3b:74:5e:53:40:4e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Validity
Not Before: Jul 24 05:00:33 2026 GMT
Not After : Jul 25 05:00:33 2026 GMT
Subject: CN=6eb8fdffc52a1357b9d63026702f78d5be720e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:48:e5:8c:30:ab:89:cb:f8:d2:52:f6:e4:a0:
18:ab:8c:8c:f8:83:06:46:5f:57:88:76:0a:8a:f2:
26:17:d4:f2:69:86:3f:e3:0c:59:ce:00:80:bf:d7:
02:fb:0d:b0:30:dc:42:6b:5c:b7:c6:22:87:6b:19:
10:c3:d0:15:9c:d2:1d:29:b8:6f:6b:db:aa:46:e9:
10:ad:5e:2f:69:70:13:73:3d:01:4f:9f:3b:32:f7:
7a:ea:e3:74:43:d1:b5:05:fc:37:9c:2f:f7:a3:d1:
cd:b2:ca:ca:0e:66:af:0d:55:74:51:0a:c1:67:9e:
94:a6:87:9c:06:03:f5:05:71:87:d4:4b:fa:3b:39:
57:a6:73:0b:05:22:c3:f1:a6:16:c0:20:77:ec:29:
1d:21:72:d4:f1:b5:f1:aa:16:fa:2c:33:bf:1c:e0:
93:f4:16:72:e5:eb:6c:7d:8e:40:aa:94:ad:65:63:
b1:1a:67:1b:87:e3:0c:2f:5f:f8:22:c8:bb:77:74:
20:f5:15:1d:94:87:f3:87:13:02:32:d7:82:81:ad:
37:36:5d:a2:1d:16:68:21:eb:e9:3a:5e:98:fc:7f:
bb:d1:b5:ba:92:90:3d:da:77:83:70:54:78:91:ec:
8d:4a:16:0e:b9:d5:a6:56:ee:a0:6f:b2:a2:e7:2f:
ae:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B8:FD:FF:C5:2A:13:57:B9:D6:30:26:70:2F:78:D5:BE:72:0E:7D
X509v3 Authority Key Identifier:
keyid:CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b5:76:a9:32:f9:a2:72:df:ca:d6:9d:e8:56:cf:cd:a8:0d:
27:7b:0d:81:7f:89:8f:a7:09:86:3d:f8:30:3e:35:5e:62:0e:
c1:bb:70:53:ed:16:e7:e5:1b:98:49:da:b6:f1:68:ad:a7:c7:
fb:65:92:cd:7b:2b:3d:ac:a5:0c:9c:0a:9b:5d:48:da:b4:d3:
e9:06:b4:a7:cc:68:35:11:fc:55:be:8b:d4:2c:5c:93:88:28:
98:9a:62:e9:11:9e:0e:b7:c2:3f:cc:52:2d:92:a2:b1:01:be:
f9:ed:03:82:7a:fd:cc:a3:65:09:1e:61:a5:bd:99:4c:07:34:
c7:5a:47:db:34:d4:bd:60:42:e0:41:c4:5b:be:33:e6:77:2e:
b6:1a:db:a0:0d:0a:04:ce:a7:cb:8c:57:ca:41:d3:ae:35:17:
b5:c1:d4:e6:d6:2e:6e:58:1b:ad:15:2e:8e:41:b2:b2:33:c4:
0c:78:1c:09:3e:1b:f8:4c:c3:38:b5:66:25:7f:ed:fc:40:91:
e6:9c:fe:6e:00:12:08:49:f8:17:4a:d8:b4:4a:80:fb:b9:99:
99:46:f5:66:42:3c:9d:57:4c:91:b8:4a:81:4f:c3:c6:70:79:
9b:dc:6c:3e:cd:f1:3a:74:ca:d4:b1:23:bf:94:0a:0d:21:65:
15:67:e2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:17:47 2026 by rpki-client