Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
File: zAGDPH7l80P_CTtsTmFR0ONkV2g.mft (raw, json)
Hash identifier: T/UUBHq1tL93aQqfB9m3W3lIbPtXTUDSdJxQQJ8fHsU=
Subject key identifier: 06:B8:DA:A4:BA:45:55:51:4F:73:87:9C:82:15:BF:63:94:0A:E6:AE
Authority key identifier: CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
Certificate issuer: /CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Certificate serial: 019F86E8CFA74735401638E371B92F778F63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
Manifest number: 19CA
Signing time: Tue 21 Jul 2026 23:00:32 +0000
Manifest this update: Tue 21 Jul 2026 23:00:32 +0000
Manifest next update: Wed 22 Jul 2026 23:00:32 +0000
Files and hashes: 1: ZzkZbeBVmlrhqGGKs6Yd3AeUvaE.roa (hash: IagFhxwf07PxkdXjevXoZdw0hvj+5sj4zJXs1+hlG/o=)
2: iHBYOJIGB1YPm4Hr-bORCIB-5Nw.roa (hash: It8YvfViWyNErBB7Zv+bZEVw/M7ptWvSo9mhIgQMuss=)
3: zAGDPH7l80P_CTtsTmFR0ONkV2g.crl (hash: h8WFYZcolNFvz5JxyBM9YGxKrihqoxNa6T33QM6NvAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:e8:cf:a7:47:35:40:16:38:e3:71:b9:2f:77:8f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Validity
Not Before: Jul 21 23:00:32 2026 GMT
Not After : Jul 22 23:00:32 2026 GMT
Subject: CN=06b8daa4ba4555514f73879c8215bf63940ae6ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ac:27:17:46:bd:5c:5e:d4:8e:42:28:86:e1:
2d:0e:52:2f:16:6f:38:20:97:8c:fa:26:b5:5b:83:
fa:34:a2:a7:4d:f9:81:12:04:97:8b:81:29:f8:ea:
9c:79:f7:b2:33:58:37:a2:c7:74:32:ab:0b:d1:1c:
77:7a:b1:97:a1:0f:26:82:d8:be:cc:c1:c8:97:9b:
ab:a0:46:b0:1a:7b:90:f4:d1:93:be:1b:3b:03:de:
83:06:5e:ed:72:f2:df:6b:1e:b4:7d:cf:16:3b:97:
d4:fd:b2:e3:01:5d:ec:a8:e2:23:8b:f0:76:e4:7c:
b2:52:6b:8a:31:63:dc:6d:60:16:77:50:36:d4:fb:
68:6b:45:67:4b:bc:b7:8d:16:52:42:b8:45:9c:60:
08:6a:bd:52:ac:eb:04:88:11:11:98:5a:0e:25:09:
52:29:5f:92:2c:a3:00:99:47:00:a2:2a:e2:1e:ba:
b6:31:3c:89:27:d2:6d:03:f5:45:6a:cd:85:71:cf:
58:82:fd:9a:73:ff:5b:32:9c:7c:96:1b:eb:87:2d:
6b:61:cf:2a:58:51:de:75:95:24:d1:c2:59:4d:08:
ef:23:1a:1a:33:df:6e:8a:76:e8:6e:e1:71:53:0b:
8e:6d:a1:f0:25:5a:e7:36:29:8f:29:31:30:52:7c:
5e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B8:DA:A4:BA:45:55:51:4F:73:87:9C:82:15:BF:63:94:0A:E6:AE
X509v3 Authority Key Identifier:
keyid:CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:7c:f9:4e:f8:70:9f:fb:f9:e1:88:c4:29:42:ba:cd:2f:96:
ec:b6:9f:fe:4f:21:3f:05:57:49:66:cd:a9:25:be:62:bc:06:
6a:77:6a:28:a6:3a:dd:4c:4d:68:40:94:46:6e:54:f7:4c:85:
b8:cb:f6:4e:08:a2:23:e5:e5:86:32:52:10:56:53:46:f0:62:
90:3b:19:ff:a0:53:fe:b6:ad:e2:a9:9b:01:4c:86:31:67:4c:
b4:2a:4f:28:1e:52:49:40:5d:31:d1:f3:18:d2:4c:aa:82:b1:
08:e7:7b:ba:77:03:64:54:10:3f:1a:3e:1f:10:22:23:d7:1f:
61:02:06:86:9f:5f:88:2c:9f:6f:62:21:29:57:8e:5a:46:98:
3d:4f:22:5d:23:d5:fc:49:9d:b8:d0:ae:1a:a0:d2:9d:38:bb:
20:06:c4:4d:2c:b0:24:06:f4:9f:a7:18:a9:30:06:bf:b0:59:
73:ba:a1:74:e2:b9:fa:4e:29:fa:78:16:07:4d:4f:d7:d3:9c:
3b:0a:46:25:41:a2:dd:c1:09:58:40:23:fc:95:15:58:70:3b:
4b:7b:e9:96:07:32:c2:37:e0:41:37:31:a9:e1:ef:7d:6d:d5:
c0:48:d3:9f:d4:33:a4:c0:fd:92:92:6e:6b:c6:c5:15:57:1b:
22:38:b8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:40:30 2026 by rpki-client