Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
File: zAGDPH7l80P_CTtsTmFR0ONkV2g.mft (raw, json)
Hash identifier: YxqQaGvzDVYUrWODY2LOeNJhJDW17v/nkfHE3aPPM6s=
Subject key identifier: 6F:46:0C:64:91:91:BD:9F:7B:57:3C:EF:BE:2F:74:D8:99:1C:DB:39
Authority key identifier: CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
Certificate issuer: /CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Certificate serial: 019D37F70B2A7596BBA3A740BEE1FB5F4912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
Manifest number: 1898
Signing time: Sun 29 Mar 2026 05:00:30 +0000
Manifest this update: Sun 29 Mar 2026 05:00:30 +0000
Manifest next update: Mon 30 Mar 2026 05:00:30 +0000
Files and hashes: 1: ZzkZbeBVmlrhqGGKs6Yd3AeUvaE.roa (hash: IagFhxwf07PxkdXjevXoZdw0hvj+5sj4zJXs1+hlG/o=)
2: iHBYOJIGB1YPm4Hr-bORCIB-5Nw.roa (hash: It8YvfViWyNErBB7Zv+bZEVw/M7ptWvSo9mhIgQMuss=)
3: zAGDPH7l80P_CTtsTmFR0ONkV2g.crl (hash: RdPF89WA0CEeT43073roj9e+MMIBi4RSBTLTNHMOLAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:0b:2a:75:96:bb:a3:a7:40:be:e1:fb:5f:49:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Validity
Not Before: Mar 29 05:00:30 2026 GMT
Not After : Mar 30 05:00:30 2026 GMT
Subject: CN=6f460c649191bd9f7b573cefbe2f74d8991cdb39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0a:93:f8:ed:9b:54:cd:06:d7:24:b1:fd:5c:
14:e8:c4:58:8e:33:1a:81:ee:75:67:5d:57:a0:58:
e6:96:1a:ed:c3:26:77:aa:44:8c:6a:1b:1a:fb:26:
0b:ee:52:26:97:0e:57:da:41:85:77:76:a5:30:fa:
bc:b7:2b:d6:45:71:a5:89:76:7f:59:5e:ef:d0:9a:
af:64:d7:fd:ac:ae:36:3a:e6:03:07:6f:77:d4:ff:
80:fc:c4:52:64:3b:25:e5:11:a0:92:5e:10:fb:33:
70:e9:66:b4:58:26:35:32:3d:6e:3e:ec:e5:cb:63:
04:17:b8:12:0c:01:41:83:67:00:1e:c3:42:cb:1c:
2e:86:df:21:c5:a7:01:8f:60:3a:cf:28:6a:94:5e:
62:c8:bb:15:9a:a2:48:dc:0a:0b:a6:59:6a:da:ea:
1d:61:f9:53:7b:2d:ea:1b:de:95:28:1d:aa:1b:f3:
f8:b7:9b:90:0a:6e:3b:7d:79:c1:3c:0e:3e:99:4a:
43:42:ff:15:4c:46:1b:4b:27:22:39:50:29:3c:97:
e5:e4:9f:2f:e9:80:de:e7:5b:f9:a4:3e:e7:7b:9e:
af:75:e8:15:b2:39:f0:75:86:8f:d6:9f:4b:a5:31:
dc:3a:6d:46:63:65:f3:7b:6b:a7:8e:c1:82:62:b4:
29:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:46:0C:64:91:91:BD:9F:7B:57:3C:EF:BE:2F:74:D8:99:1C:DB:39
X509v3 Authority Key Identifier:
keyid:CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:83:f0:5b:c1:f0:07:fe:a7:d7:b1:99:44:4c:e9:64:e0:03:
98:86:9c:03:68:02:36:56:8b:13:b8:bc:37:be:7b:62:6e:ab:
55:f0:d7:f3:96:01:b5:f7:67:9e:07:98:ce:6f:f7:4b:e1:ad:
05:93:52:e1:9a:9f:a7:87:91:55:3f:cc:1c:25:0f:4a:a1:0b:
63:92:4e:21:f7:8d:bb:ac:ac:0e:84:a5:4a:43:81:0e:02:3f:
a5:14:85:34:7e:99:c4:08:be:f5:bf:b6:93:de:69:6a:04:08:
b4:94:b3:d3:44:0b:ee:21:57:d0:5b:ea:9c:9e:0b:60:cf:65:
4e:3d:00:c2:3c:e4:c8:e8:b7:cc:55:1b:b1:6a:13:2b:65:31:
b8:cf:b5:88:63:eb:56:dc:7c:01:72:37:31:16:68:8f:6b:76:
c6:fa:4b:7f:22:c6:2b:0f:e2:6e:57:e7:2a:d4:54:ff:6f:ff:
06:48:60:34:f7:92:71:ff:ad:fb:7f:b1:7b:51:9c:c0:d3:4e:
94:74:58:c9:58:34:12:37:ba:6a:cd:b1:71:c4:0e:d4:d4:c5:
14:0c:62:b6:aa:62:9e:f7:25:d7:ae:0d:8e:11:ec:8d:70:36:
27:33:9b:27:c4:69:a1:19:8b:74:a8:56:a2:41:34:0f:9f:cd:
51:86:3c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:44 2026 by rpki-client