Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
File: zAGDPH7l80P_CTtsTmFR0ONkV2g.mft (raw, json)
Hash identifier: OLQNIRGfqt46AetlekuRCg4gp+MPrEZ/zIrmqcb3fK4=
Subject key identifier: A0:FE:07:9C:00:E2:BA:8B:C6:A3:E4:A0:4E:E2:80:81:7D:29:42:5F
Authority key identifier: CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
Certificate issuer: /CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Certificate serial: 019E9D3C00902648119514ECBA2E5FE373EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
Manifest number: 1951
Signing time: Sat 06 Jun 2026 14:00:15 +0000
Manifest this update: Sat 06 Jun 2026 14:00:15 +0000
Manifest next update: Sun 07 Jun 2026 14:00:15 +0000
Files and hashes: 1: ZzkZbeBVmlrhqGGKs6Yd3AeUvaE.roa (hash: IagFhxwf07PxkdXjevXoZdw0hvj+5sj4zJXs1+hlG/o=)
2: iHBYOJIGB1YPm4Hr-bORCIB-5Nw.roa (hash: It8YvfViWyNErBB7Zv+bZEVw/M7ptWvSo9mhIgQMuss=)
3: zAGDPH7l80P_CTtsTmFR0ONkV2g.crl (hash: gy9bM2NEFbbyXc5kOnzhnLnkF8zkLEftNy5lx0rzha4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 12:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9d:3c:00:90:26:48:11:95:14:ec:ba:2e:5f:e3:73:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Validity
Not Before: Jun 6 14:00:15 2026 GMT
Not After : Jun 7 14:00:15 2026 GMT
Subject: CN=a0fe079c00e2ba8bc6a3e4a04ee280817d29425f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:24:27:76:c3:ad:b8:1c:49:b0:cd:4d:6a:c3:
8b:d3:03:0f:5e:62:5b:02:b2:3b:1e:04:72:64:5f:
b1:90:6a:b8:65:c1:13:ce:35:9d:5e:e8:b4:29:bf:
81:2d:e6:24:5f:39:2e:ed:fb:a8:7e:59:41:5c:76:
62:09:70:13:77:21:29:f1:25:f6:19:a4:75:83:ca:
fd:dc:26:23:26:4f:be:99:16:0f:c2:d7:45:38:45:
42:f6:00:29:93:ea:b7:84:a0:97:4d:29:00:f0:3a:
f5:1f:f3:00:35:05:e4:4c:1b:2a:71:c9:d0:32:a1:
09:14:c4:b5:27:9e:12:31:53:c2:44:27:f4:48:2c:
0d:73:dd:e7:c8:36:d8:3f:12:fe:f2:c6:e6:34:86:
0b:93:12:ad:4b:eb:af:0b:00:44:6e:47:31:41:cf:
b9:bf:a3:75:56:63:73:93:74:8c:fa:60:7c:98:5a:
85:da:19:da:91:31:2a:4f:d7:93:13:27:20:62:c5:
8b:55:c1:54:b7:79:40:3a:6c:96:34:5d:4f:29:eb:
0e:73:f6:d4:b8:2e:9f:85:23:f0:13:8b:58:73:71:
67:e9:3b:22:5f:fc:c0:59:e9:13:17:a8:d2:05:00:
e4:08:05:f7:10:0b:4a:60:23:14:12:d0:97:01:3e:
da:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FE:07:9C:00:E2:BA:8B:C6:A3:E4:A0:4E:E2:80:81:7D:29:42:5F
X509v3 Authority Key Identifier:
keyid:CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:81:9f:30:0f:03:48:5d:2e:b6:be:9d:01:7e:d2:91:56:ab:
c5:ae:60:62:62:69:87:bc:9b:2e:58:ed:61:3e:cd:51:6c:7b:
e1:74:0f:53:ff:06:cb:38:0f:04:e8:56:6f:ab:2b:73:11:51:
b7:84:a1:f5:9c:4b:6f:e1:9d:cf:d2:ff:1a:35:ce:d5:a5:e2:
5e:38:fd:ae:6f:97:2a:5c:e9:ae:9d:10:a5:b3:85:16:1f:fa:
34:b3:b4:a9:46:c4:bb:f0:de:f4:2a:12:fc:2e:3f:5e:be:7b:
48:9a:42:21:72:88:79:49:63:71:09:d2:fd:16:89:2a:b8:8e:
24:8b:3b:b1:dc:0a:d0:20:47:b3:b2:59:5b:f0:86:71:e1:64:
78:37:8a:9b:21:3f:49:e7:f8:53:00:03:84:f6:a6:b8:1a:3d:
6f:4a:2a:c9:d9:b8:f8:25:bf:31:a9:a5:c9:2b:24:b8:59:8f:
c1:41:91:1f:a3:03:06:54:bb:2d:e2:eb:d9:25:30:1d:a9:32:
3c:16:73:94:5f:08:5c:04:36:37:38:d7:45:7c:e7:78:d2:31:
30:d9:89:54:7b:59:11:73:8d:45:f6:93:0d:7f:69:aa:a0:87:
17:2c:ed:29:fb:6f:8a:07:da:89:ed:b1:82:11:d6:8e:27:8a:
14:99:24:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6dPACQJkgRlRTsui5f43PsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMDE4MzNjN2VlNWYzNDNmZjA5M2I2YzRlNjE1MWQwZTM2
NDU3NjgwHhcNMjYwNjA2MTQwMDE1WhcNMjYwNjA3MTQwMDE1WjAzMTEwLwYDVQQD
EyhhMGZlMDc5YzAwZTJiYThiYzZhM2U0YTA0ZWUyODA4MTdkMjk0MjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CQndsOtuBxJsM1NasOL0wMPXmJb
ArI7HgRyZF+xkGq4ZcETzjWdXui0Kb+BLeYkXzku7fuofllBXHZiCXATdyEp8SX2
GaR1g8r93CYjJk++mRYPwtdFOEVC9gApk+q3hKCXTSkA8Dr1H/MANQXkTBsqccnQ
MqEJFMS1J54SMVPCRCf0SCwNc93nyDbYPxL+8sbmNIYLkxKtS+uvCwBEbkcxQc+5
v6N1VmNzk3SM+mB8mFqF2hnakTEqT9eTEycgYsWLVcFUt3lAOmyWNF1PKesOc/bU
uC6fhSPwE4tYc3Fn6TsiX/zAWekTF6jSBQDkCAX3EAtKYCMUEtCXAT7aXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKD+B5wA4rqLxqPkoE7igIF9KUJfMB8GA1UdIwQY
MBaAFMwBgzx+5fND/wk7bE5hUdDjZFdoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekFHRFBIN2w4MFBfQ1R0c1RtRlIwT05rVjJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9kNDA3NzMtY2YyZC00MTk4LThiM2Yt
NzI3YWI2ZDA3ZmYyLzEvekFHRFBIN2w4MFBfQ1R0c1RtRlIwT05rVjJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9kNDA3NzMtY2YyZC00MTk4LThiM2YtNzI3YWI2ZDA3ZmYy
LzEvekFHRFBIN2w4MFBfQ1R0c1RtRlIwT05rVjJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS4GfMA8D
SF0utr6dAX7SkVarxa5gYmJph7ybLljtYT7NUWx74XQPU/8GyzgPBOhWb6srcxFR
t4Sh9ZxLb+Gdz9L/GjXO1aXiXjj9rm+XKlzprp0QpbOFFh/6NLO0qUbEu/De9CoS
/C4/Xr57SJpCIXKIeUljcQnS/RaJKriOJIs7sdwK0CBHs7JZW/CGceFkeDeKmyE/
Sef4UwADhPamuBo9b0oqydm4+CW/MamlySskuFmPwUGRH6MDBlS7LeLr2SUwHaky
PBZzlF8IXAQ2NzjXRXzneNIxMNmJVHtZEXONRfaTDX9pqqCHFyztKftvigfaie2x
ghHWjieKFJkkZg==
-----END CERTIFICATE-----
Generated at Sat Jun 6 16:51:23 2026 by rpki-client