Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
File: zABy2pgRQZPBBM4aYJ2SppdvnEA.mft (raw, json)
Hash identifier: 0zhBFZoz5kS79JG/AIj00MWqnkallGll4WnriJ4f6v0=
Subject key identifier: 07:B9:65:47:22:A8:4D:67:DC:3C:76:29:3F:7E:9A:63:CD:01:1C:F3
Authority key identifier: CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
Certificate issuer: /CN=cc0072da98114193c104ce1a609d92a6976f9c40
Certificate serial: 01A1A5CAE048D24D6D2704C241DE93D15DC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
Manifest number: 1138
Signing time: Wed 04 Nov 2026 09:01:38 +0000
Manifest this update: Wed 04 Nov 2026 09:01:38 +0000
Manifest next update: Thu 05 Nov 2026 09:01:38 +0000
Files and hashes: 1: MZXty06Zl0SzNmooJ_8YDA7IJCo.roa (hash: CxYqpGtTZxJ+XJM89fQrjKOfOuAfJMmZBcg+oB/Yo2U=)
2: zABy2pgRQZPBBM4aYJ2SppdvnEA.crl (hash: OKJCjiAOimYLcjti9wNzFWBZSykH737P5urtofo7+FQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a5:ca:e0:48:d2:4d:6d:27:04:c2:41:de:93:d1:5d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc0072da98114193c104ce1a609d92a6976f9c40
Validity
Not Before: Nov 4 09:01:38 2026 GMT
Not After : Nov 5 09:01:38 2026 GMT
Subject: CN=07b9654722a84d67dc3c76293f7e9a63cd011cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c6:3d:cc:c3:e1:19:27:43:16:da:73:7d:6a:
10:47:08:df:f3:55:d3:e5:5e:91:dd:99:6c:d1:73:
54:0c:47:29:87:09:cd:11:0f:7e:0e:6d:fa:76:7b:
7a:82:fe:05:6f:06:14:04:51:e3:10:bb:b2:d0:7d:
cf:79:53:55:fd:80:a0:7a:5c:e5:7a:f2:0e:64:76:
55:83:24:28:d7:4b:25:da:10:89:20:73:75:bc:22:
13:88:b9:eb:48:a4:77:d8:c2:f1:df:3a:73:9c:bb:
01:1f:b4:be:f1:47:d7:90:bf:17:3d:f5:68:87:8a:
b8:e0:6f:7c:ca:52:5d:bc:06:b5:83:60:7c:91:79:
94:1c:df:25:5d:23:5f:6d:b6:d8:f1:85:2b:38:31:
2d:0a:9d:f6:38:31:4d:89:ae:c4:cf:d3:39:74:48:
48:a3:7f:88:ea:b4:8c:a8:f6:2f:eb:9f:71:3f:09:
e0:87:f6:39:46:fb:c5:2a:c4:22:c1:17:fa:03:e0:
b3:d1:d0:c5:fb:d7:1d:e0:d4:9d:fa:ea:ce:53:c9:
12:03:75:85:a6:c7:13:98:fe:94:45:ae:29:25:ee:
6e:2c:fd:c5:43:31:02:b9:cc:e9:4f:d4:5d:c8:94:
b0:d3:e9:2c:d1:7e:10:ee:9f:d0:e0:b7:70:a9:0c:
59:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B9:65:47:22:A8:4D:67:DC:3C:76:29:3F:7E:9A:63:CD:01:1C:F3
X509v3 Authority Key Identifier:
keyid:CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:cf:c6:e6:23:6d:4d:31:5c:9e:a6:30:33:30:7e:3a:e5:ee:
01:12:69:17:97:6c:1e:c3:dc:43:a3:7e:92:70:c8:a5:9a:95:
e4:22:ce:e8:70:7e:4f:68:a7:af:e1:86:43:77:73:c7:ac:c0:
97:1d:45:3f:ca:f1:8a:e1:8b:e3:9d:43:98:79:ff:da:8d:3e:
ce:9c:16:95:7e:eb:ad:62:71:c4:03:00:6c:66:35:4d:09:1d:
b0:ef:b8:61:ba:4d:55:78:f1:7b:a8:6d:60:26:56:03:14:76:
d7:9d:cd:b6:08:4a:f5:26:a3:61:da:95:bd:6c:6e:fa:fe:3e:
22:30:ff:0f:29:1c:52:cc:40:02:7b:a6:e8:6c:36:b6:11:0a:
66:09:f7:85:6a:fe:b2:56:0e:b4:15:7b:7b:55:37:9c:72:0c:
73:58:56:63:dc:fa:56:f4:12:9a:1e:10:db:05:bf:04:a3:c4:
5b:d0:eb:b2:24:e7:45:e2:e3:a5:39:86:a0:a0:5d:57:a0:9c:
d5:6b:50:fe:2d:2c:72:2e:11:19:d9:85:4f:a3:5f:cb:6b:f5:
49:6c:af:eb:74:4d:fb:a4:cc:b9:a0:99:10:73:2b:c6:fa:ed:
48:a2:78:8a:3b:30:e3:1c:0b:5a:49:e4:10:b9:33:9d:78:f7:
01:46:22:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 18:57:45 2026 by rpki-client