Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
File: zABy2pgRQZPBBM4aYJ2SppdvnEA.mft (raw, json)
Hash identifier: XL+FymUxmJmwtD15NKiOjyhJvyYykNkQ8bKNIPBY9cc=
Subject key identifier: 57:FF:D7:CC:78:54:4A:19:36:A2:F8:10:83:3D:F5:BA:7D:25:64:1B
Authority key identifier: CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
Certificate issuer: /CN=cc0072da98114193c104ce1a609d92a6976f9c40
Certificate serial: 019FD64E3336725332CB30DCF2F55BE0F8BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
Manifest number: 1048
Signing time: Thu 06 Aug 2026 09:01:16 +0000
Manifest this update: Thu 06 Aug 2026 09:01:16 +0000
Manifest next update: Fri 07 Aug 2026 09:01:16 +0000
Files and hashes: 1: MZXty06Zl0SzNmooJ_8YDA7IJCo.roa (hash: CxYqpGtTZxJ+XJM89fQrjKOfOuAfJMmZBcg+oB/Yo2U=)
2: zABy2pgRQZPBBM4aYJ2SppdvnEA.crl (hash: DtP6JWovQqFVsiiM1jbRm2YIu/1xD4kAcBBOkRzELeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Aug 2026 09:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:4e:33:36:72:53:32:cb:30:dc:f2:f5:5b:e0:f8:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc0072da98114193c104ce1a609d92a6976f9c40
Validity
Not Before: Aug 6 09:01:16 2026 GMT
Not After : Aug 7 09:01:16 2026 GMT
Subject: CN=57ffd7cc78544a1936a2f810833df5ba7d25641b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c4:27:65:e6:99:58:63:6a:ca:8b:8d:45:92:
9b:17:23:2c:56:fe:e1:b0:a9:fb:0c:37:17:3e:e9:
e4:d3:4d:9f:6f:f4:4a:ca:76:a8:91:04:ab:2e:96:
28:3c:f8:37:63:a2:6c:5e:01:93:6e:25:91:f7:1f:
d3:02:43:f1:e4:80:41:dc:8a:54:d8:16:7d:38:5f:
b9:5e:de:83:4d:f7:6e:05:e5:f8:69:da:56:f6:c0:
e4:e3:22:c3:77:14:0b:b5:9c:ed:99:a4:4d:f4:61:
32:2a:d8:69:75:df:f0:54:b6:3b:6c:5a:a1:0c:0c:
ed:21:90:f8:ee:b3:a3:24:ce:0a:c2:b6:6c:9e:66:
88:5e:ff:be:43:75:ce:31:de:a4:62:cf:8c:55:5c:
ec:03:ed:fe:d6:a2:34:d0:9b:a2:f0:9b:d4:e8:b1:
95:39:20:35:7e:b1:b4:1a:c2:5b:03:a3:df:f4:9c:
3c:06:cf:49:3a:24:4b:8d:a0:8b:0a:90:23:ad:07:
e8:8e:e2:30:2f:a3:30:f2:73:66:9d:0b:83:a4:5d:
b0:b6:77:8e:50:79:f8:0a:34:ea:bb:90:90:c4:d0:
47:b3:37:8d:db:81:9d:28:33:c0:a9:67:57:50:63:
d6:f8:ea:99:f2:a2:80:9c:13:9e:9e:eb:f2:f4:3d:
a7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FF:D7:CC:78:54:4A:19:36:A2:F8:10:83:3D:F5:BA:7D:25:64:1B
X509v3 Authority Key Identifier:
keyid:CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a6:d7:42:77:32:4f:00:fd:33:22:cc:cc:25:b5:3e:ba:b7:
4e:7a:5e:3a:bb:1e:ac:9f:7a:d6:16:a5:1c:63:26:03:75:f0:
75:d7:9a:9f:be:0a:86:26:2f:0c:5f:83:10:6b:a3:76:d9:11:
3d:22:e5:33:55:be:84:ec:b4:a0:9c:af:ec:b8:dc:f2:9d:a6:
3b:f5:b7:9b:bd:71:a8:00:07:b5:29:9f:8d:58:16:79:7d:1e:
e7:c7:eb:00:fe:5d:de:f0:71:de:fe:70:e1:26:45:14:7f:69:
81:06:29:ce:91:37:b5:6f:75:44:43:68:15:fe:b1:23:91:f0:
89:54:ba:88:cf:20:3a:9b:dc:39:21:84:bd:15:37:4f:88:12:
c1:f0:a4:5f:a4:6a:ad:b7:c6:d1:64:91:a5:bc:04:21:15:71:
46:71:48:eb:93:ae:e0:3b:4b:46:06:be:77:2f:b8:c7:08:3d:
a5:d1:00:37:55:e2:2c:20:84:a6:58:40:39:44:dc:45:c1:fb:
61:68:8b:9d:2d:dd:08:34:7f:f1:af:7a:72:db:1a:05:7e:bf:
86:08:74:0e:c5:2e:5a:98:89:b9:ad:70:23:16:5f:d0:5a:2e:
e5:27:80:85:ca:03:21:03:c7:c3:80:11:13:0b:3c:02:7b:58:
dd:43:ff:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 18:53:22 2026 by rpki-client