Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
File: zAGDPH7l80P_CTtsTmFR0ONkV2g.mft (raw, json)
Hash identifier: 4sfUOptze4vKUnuJIenmMeiiWWUSmAnbNFPHBL/5QI8=
Subject key identifier: 9F:DF:0B:15:D4:C5:06:76:7D:5F:D1:48:1A:B9:B4:8A:B5:0C:A6:AC
Authority key identifier: CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
Certificate issuer: /CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Certificate serial: 01A184BEAD2E90743249505BF52842B207DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
Manifest number: 1AD2
Signing time: Wed 28 Oct 2026 23:00:50 +0000
Manifest this update: Wed 28 Oct 2026 23:00:50 +0000
Manifest next update: Thu 29 Oct 2026 23:00:50 +0000
Files and hashes: 1: ZzkZbeBVmlrhqGGKs6Yd3AeUvaE.roa (hash: IagFhxwf07PxkdXjevXoZdw0hvj+5sj4zJXs1+hlG/o=)
2: iHBYOJIGB1YPm4Hr-bORCIB-5Nw.roa (hash: It8YvfViWyNErBB7Zv+bZEVw/M7ptWvSo9mhIgQMuss=)
3: zAGDPH7l80P_CTtsTmFR0ONkV2g.crl (hash: MOMVGKz0a7LpJXbhoDvr02A8MxzOBpk96+2ijHwPPAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 22:33:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:be:ad:2e:90:74:32:49:50:5b:f5:28:42:b2:07:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Validity
Not Before: Oct 28 23:00:50 2026 GMT
Not After : Oct 29 23:00:50 2026 GMT
Subject: CN=9fdf0b15d4c506767d5fd1481ab9b48ab50ca6ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fc:39:25:b9:9a:3e:4d:4d:90:84:73:bf:f1:
7d:41:19:e0:ea:d6:30:09:2f:ad:83:bb:c5:d7:26:
47:90:7f:5d:4b:0b:92:4d:32:30:11:8b:71:aa:7c:
1e:fc:c0:dc:3f:3f:94:33:d4:40:0f:0b:52:61:62:
f2:27:de:ff:1b:15:bf:b2:34:2a:5e:3c:a2:e9:4c:
c3:05:b2:32:44:2c:1c:0a:45:fb:eb:2d:11:f5:92:
a5:b1:af:88:05:76:78:f9:07:e8:99:13:b2:ce:10:
1f:18:15:51:0e:8f:bb:ae:c4:03:3e:bd:83:3f:e6:
59:dd:66:2e:fe:01:41:4c:27:1f:79:d0:38:f2:16:
dc:eb:60:b6:c0:46:0c:39:4f:4f:05:84:f7:92:a0:
70:41:dd:8e:99:c0:d0:86:f2:bb:85:d3:96:ab:eb:
5e:c6:d8:82:5e:1a:e2:cf:9b:66:8b:fe:1e:c7:4a:
31:c1:93:23:29:98:80:ad:ea:74:cf:4c:49:bb:4a:
f2:0d:4f:f5:78:68:d4:88:03:86:b7:7a:0e:94:3c:
ba:30:76:78:81:d6:d9:18:12:b8:d6:ab:a2:a9:68:
18:fd:95:35:55:24:22:e4:b2:ae:4e:df:84:dc:17:
2c:9a:a8:fa:a4:b6:9d:d3:36:1f:9e:ae:25:ce:bf:
d6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DF:0B:15:D4:C5:06:76:7D:5F:D1:48:1A:B9:B4:8A:B5:0C:A6:AC
X509v3 Authority Key Identifier:
keyid:CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:3b:44:6f:00:f1:c1:1f:bf:d0:23:34:5f:da:5a:d6:f5:d3:
70:08:79:7d:83:67:a3:de:09:37:b6:24:56:84:e2:82:fb:39:
d7:f3:63:d0:5d:e6:2a:a0:d9:0a:09:a6:69:9f:0f:e8:fb:4a:
d1:2b:31:6d:8d:f3:ea:a5:1e:5e:17:c1:56:5c:13:4e:8b:ae:
b7:74:3a:cb:26:ee:ff:d6:b1:7e:93:6d:41:06:b6:80:a9:ed:
c1:a9:6f:e4:27:b5:0b:1b:c5:80:6a:df:75:94:74:21:e8:13:
c7:d6:18:88:72:95:31:68:fb:c2:23:65:c8:e2:4d:1d:8c:6a:
ed:ca:d7:db:6d:30:e0:17:fc:98:fc:fc:63:63:8e:9c:62:bb:
d0:ce:fc:d3:7d:29:78:95:e0:22:b0:45:fa:a4:78:65:ea:2d:
ae:5b:c2:5b:ff:fd:42:ad:97:07:b8:07:af:cb:11:6c:a4:14:
a7:83:a3:72:24:b7:ab:b2:bf:cf:7f:80:bd:ba:2b:cd:97:99:
e2:9b:6e:69:dd:74:4c:b9:02:fe:36:84:d3:88:d4:03:a2:6d:
b3:89:9e:02:b0:4a:83:6b:15:20:46:e6:29:d0:7e:49:9e:67:
90:01:42:d5:d0:22:51:be:2c:e8:00:3a:26:32:fd:48:90:12:
7b:02:e0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 01:07:37 2026 by rpki-client