Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
File: zABy2pgRQZPBBM4aYJ2SppdvnEA.mft (raw, json)
Hash identifier: Okgpb8ymufKqJBgM8woEbDMMGQb/MKBEZoJajG6V6GI=
Subject key identifier: 14:DB:89:B6:FA:7B:1F:D4:5C:A0:D2:E9:8D:40:D3:1A:1F:11:AD:FF
Authority key identifier: CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
Certificate issuer: /CN=cc0072da98114193c104ce1a609d92a6976f9c40
Certificate serial: 019EEAB355C8DC48435C5BDD5D93EFB17148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
Manifest number: 0FCE
Signing time: Sun 21 Jun 2026 15:01:21 +0000
Manifest this update: Sun 21 Jun 2026 15:01:21 +0000
Manifest next update: Mon 22 Jun 2026 15:01:21 +0000
Files and hashes: 1: MZXty06Zl0SzNmooJ_8YDA7IJCo.roa (hash: CxYqpGtTZxJ+XJM89fQrjKOfOuAfJMmZBcg+oB/Yo2U=)
2: zABy2pgRQZPBBM4aYJ2SppdvnEA.crl (hash: erMX1ecZSQhJKEHokO8EziKvT/REzGi4Y7rFhc8pcUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Jun 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ea:b3:55:c8:dc:48:43:5c:5b:dd:5d:93:ef:b1:71:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc0072da98114193c104ce1a609d92a6976f9c40
Validity
Not Before: Jun 21 15:01:21 2026 GMT
Not After : Jun 22 15:01:21 2026 GMT
Subject: CN=14db89b6fa7b1fd45ca0d2e98d40d31a1f11adff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fd:71:ae:a9:50:20:80:9e:c0:00:b9:65:d2:
ca:07:d1:be:a9:4d:c6:8c:f8:a1:58:1d:3e:5a:d0:
ac:b3:eb:27:56:f0:b6:ed:dc:35:83:ef:65:14:6d:
ef:37:ea:89:ec:a5:ab:35:dc:14:ed:94:54:0f:24:
18:e3:20:c0:f0:3c:13:64:f9:a8:ac:10:a2:12:28:
31:73:f0:21:fd:74:f3:4f:14:43:31:f4:62:30:cb:
d2:ec:03:31:d3:6a:8e:00:5e:83:85:bc:69:db:41:
ea:74:62:03:ef:08:94:21:c4:d2:95:a6:22:72:fa:
e3:b8:de:46:dd:25:e2:ed:bd:83:20:4b:e9:b3:ad:
5e:11:b6:8f:67:42:45:76:5f:5b:72:1d:0b:f9:6e:
4d:27:bf:73:e7:30:b4:64:6f:37:0b:9a:8b:7c:16:
5f:b8:e0:ab:f8:d9:4b:e7:5f:37:46:d4:6f:33:7e:
e2:37:de:1a:67:68:12:65:f2:f3:51:f6:b5:3d:51:
6d:90:02:e2:56:8a:81:3c:f2:51:c0:ea:48:13:f0:
48:4a:3c:49:72:e5:f2:50:e5:89:3f:cd:9b:dc:a3:
17:13:54:93:19:27:ad:79:44:6f:8f:fc:ca:0f:ee:
c6:88:f1:46:e2:2e:0a:80:3b:26:bd:12:2e:11:65:
13:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DB:89:B6:FA:7B:1F:D4:5C:A0:D2:E9:8D:40:D3:1A:1F:11:AD:FF
X509v3 Authority Key Identifier:
keyid:CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:1c:2d:1a:e2:5e:25:16:ed:16:40:41:b7:0c:f6:82:ba:41:
a2:9a:90:c6:64:88:f3:48:34:86:0c:6f:9f:0c:f9:f0:d2:f6:
b7:77:bd:b0:7e:44:cb:08:74:56:3a:3b:52:4e:13:79:64:b0:
ef:29:5d:e2:41:16:36:b9:f6:1f:29:38:52:91:87:1a:31:34:
c6:3c:34:c1:62:6f:93:3b:c4:6e:63:e7:c6:fc:a4:f2:9f:fc:
ff:13:1a:c6:97:01:58:98:f9:7f:19:fa:4a:d8:60:f9:6d:ca:
3a:cd:bb:14:8d:80:83:18:9c:83:b1:ab:3b:3f:f0:49:a4:43:
f1:d1:0d:dc:dc:0e:7d:55:fc:db:47:dc:a3:6c:96:25:6e:e8:
50:15:00:26:c5:27:20:c7:7f:32:4e:29:af:be:46:a1:35:cd:
16:66:69:15:5f:47:a8:c9:5c:68:93:54:92:ec:5b:a6:22:f8:
7f:34:31:a5:9f:7e:66:73:8e:fc:05:fb:51:e1:9e:13:df:e6:
e4:46:7b:51:58:cb:e8:a9:c1:ec:61:71:4b:b3:38:06:a2:bb:
e7:a0:b2:30:67:51:3b:10:ff:e3:60:bc:04:43:80:28:87:6b:
a1:70:2e:85:ae:3e:82:72:ac:73:a2:bc:2e:2a:d9:84:f4:18:
b5:6b:b9:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7qs1XI3EhDXFvdXZPvsXFIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMDA3MmRhOTgxMTQxOTNjMTA0Y2UxYTYwOWQ5MmE2OTc2
ZjljNDAwHhcNMjYwNjIxMTUwMTIxWhcNMjYwNjIyMTUwMTIxWjAzMTEwLwYDVQQD
EygxNGRiODliNmZhN2IxZmQ0NWNhMGQyZTk4ZDQwZDMxYTFmMTFhZGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuv1xrqlQIICewAC5ZdLKB9G+qU3G
jPihWB0+WtCss+snVvC27dw1g+9lFG3vN+qJ7KWrNdwU7ZRUDyQY4yDA8DwTZPmo
rBCiEigxc/Ah/XTzTxRDMfRiMMvS7AMx02qOAF6Dhbxp20HqdGID7wiUIcTSlaYi
cvrjuN5G3SXi7b2DIEvps61eEbaPZ0JFdl9bch0L+W5NJ79z5zC0ZG83C5qLfBZf
uOCr+NlL5183RtRvM37iN94aZ2gSZfLzUfa1PVFtkALiVoqBPPJRwOpIE/BISjxJ
cuXyUOWJP82b3KMXE1STGSeteURvj/zKD+7GiPFG4i4KgDsmvRIuEWUTdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTbibb6ex/UXKDS6Y1A0xofEa3/MB8GA1UdIwQY
MBaAFMwActqYEUGTwQTOGmCdkqaXb5xAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekFCeTJwZ1JRWlBCQk00YVlKMlNwcGR2bkVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82MDdjYWEtOGY0OS00NTliLWFhNzQt
YzBlYzhiOTVhYjc3LzEvekFCeTJwZ1JRWlBCQk00YVlKMlNwcGR2bkVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82MDdjYWEtOGY0OS00NTliLWFhNzQtYzBlYzhiOTVhYjc3
LzEvekFCeTJwZ1JRWlBCQk00YVlKMlNwcGR2bkVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALhwtGuJe
JRbtFkBBtwz2grpBopqQxmSI80g0hgxvnwz58NL2t3e9sH5Eywh0Vjo7Uk4TeWSw
7yld4kEWNrn2Hyk4UpGHGjE0xjw0wWJvkzvEbmPnxvyk8p/8/xMaxpcBWJj5fxn6
Sthg+W3KOs27FI2Agxicg7GrOz/wSaRD8dEN3NwOfVX820fco2yWJW7oUBUAJsUn
IMd/Mk4pr75GoTXNFmZpFV9HqMlcaJNUkuxbpiL4fzQxpZ9+ZnOO/AX7UeGeE9/m
5EZ7UVjL6KnB7GFxS7M4BqK756CyMGdROxD/42C8BEOAKIdroXAuha4+gnKsc6K8
LirZhPQYtWu5KA==
-----END CERTIFICATE-----
Generated at Sun Jun 21 20:32:24 2026 by rpki-client