Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
File: zABy2pgRQZPBBM4aYJ2SppdvnEA.mft (raw, json)
Hash identifier: uHyOA0+SkgZBSFZQjY/1MkdCdu8IpdQrhmqyT8seNT8=
Subject key identifier: 28:E2:DF:EC:EA:98:BD:D4:BA:0F:2F:2B:2A:80:9E:B4:7E:1A:22:A9
Authority key identifier: CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
Certificate issuer: /CN=cc0072da98114193c104ce1a609d92a6976f9c40
Certificate serial: 019D382E3414486645B94F822ECB8C1CD1EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
Manifest number: 0EED
Signing time: Sun 29 Mar 2026 06:00:45 +0000
Manifest this update: Sun 29 Mar 2026 06:00:45 +0000
Manifest next update: Mon 30 Mar 2026 06:00:45 +0000
Files and hashes: 1: MZXty06Zl0SzNmooJ_8YDA7IJCo.roa (hash: CxYqpGtTZxJ+XJM89fQrjKOfOuAfJMmZBcg+oB/Yo2U=)
2: zABy2pgRQZPBBM4aYJ2SppdvnEA.crl (hash: J8/UUadXvNfFpCY9ggqgA4vkQl87TCvXHjMVJEtHRds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:34:14:48:66:45:b9:4f:82:2e:cb:8c:1c:d1:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc0072da98114193c104ce1a609d92a6976f9c40
Validity
Not Before: Mar 29 06:00:45 2026 GMT
Not After : Mar 30 06:00:45 2026 GMT
Subject: CN=28e2dfecea98bdd4ba0f2f2b2a809eb47e1a22a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:70:ec:3e:d9:7c:03:c0:fc:37:0a:ff:2a:37:
62:b1:e4:6d:25:98:27:58:cf:7d:de:82:20:17:a1:
36:37:0f:30:0e:73:aa:1c:04:e1:5b:27:7b:94:1a:
f8:57:16:1d:0b:c8:ff:a1:0d:08:50:f3:ff:99:4a:
30:ce:a6:8b:90:2b:c7:da:ae:92:7f:74:53:68:85:
5b:c9:b9:6f:49:2e:d8:ec:13:33:39:a8:06:28:9f:
23:a5:95:03:38:c5:65:74:bd:a3:fc:6a:1b:79:30:
f2:e0:63:c9:ce:ce:9d:50:bd:3e:de:76:31:32:45:
a2:4f:be:d9:66:2d:76:d9:f0:d9:44:8f:08:9b:68:
67:65:d9:b3:fe:3b:f3:da:75:0a:e5:66:bd:34:1e:
90:a5:54:6b:d9:4d:d8:b4:c4:94:a7:c7:10:5c:e4:
27:44:33:db:56:50:68:6f:44:db:60:63:7d:12:29:
94:eb:7c:31:fb:2f:34:a9:10:28:40:b7:82:d6:00:
9b:bd:37:9d:af:41:94:80:10:af:aa:fd:0b:df:a6:
7c:9b:2d:60:f9:3c:a2:19:07:2c:81:1a:91:3d:95:
06:2a:f1:4c:52:87:c8:fe:66:37:b9:fd:05:b7:ad:
60:24:00:9f:e2:e7:8d:6a:ba:e1:e4:eb:f2:ba:dd:
8d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E2:DF:EC:EA:98:BD:D4:BA:0F:2F:2B:2A:80:9E:B4:7E:1A:22:A9
X509v3 Authority Key Identifier:
keyid:CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:59:13:86:2d:5c:d3:d1:f8:4a:82:e4:1e:6b:da:e9:0d:84:
5b:3e:3a:65:63:95:48:e0:43:19:c3:6c:36:06:a2:29:65:41:
98:21:86:5d:92:f8:19:86:76:e0:c3:f4:53:4d:ec:6a:a4:f1:
04:a2:0a:60:89:01:95:c3:90:96:f6:9a:7b:16:9f:3e:2e:66:
74:40:e8:53:ca:76:65:bc:1c:2e:ba:bf:16:1d:9f:5c:64:d5:
33:c6:57:0e:94:5b:8e:cb:a4:b7:50:f4:4b:a5:83:49:61:16:
5e:19:d0:30:83:7b:47:1a:73:0e:fe:9a:a9:e0:78:6c:a3:be:
26:6f:a7:16:05:e7:52:9b:98:d8:8b:1e:47:2b:5f:2b:f6:94:
8e:ec:3c:de:d1:50:61:ae:6c:52:8d:a4:4e:18:cd:19:f4:04:
4f:c9:3a:72:2d:e9:f6:36:41:88:39:f7:89:39:cf:d3:48:ae:
6b:25:ad:29:e4:ab:da:14:f9:00:10:9b:51:27:2a:1e:1c:db:
1a:8f:65:9f:a4:56:91:22:20:ab:8e:de:65:74:f8:c0:c3:81:
1e:71:0c:8c:da:5e:f1:43:84:8d:77:40:f7:42:3e:c0:30:e2:
4f:3c:c1:24:30:77:cd:b7:b0:41:6c:ba:b6:46:7b:d5:80:72:
d2:0d:73:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:44 2026 by rpki-client