Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
File: zABy2pgRQZPBBM4aYJ2SppdvnEA.mft (raw, json)
Hash identifier: ZvJyITivmETcUsWPMoF+1UVaKVMVlTkR0UtswORSJsE=
Subject key identifier: 04:EF:51:B8:3C:8A:83:B3:A4:28:79:95:63:04:47:12:E4:94:43:A1
Authority key identifier: CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
Certificate issuer: /CN=cc0072da98114193c104ce1a609d92a6976f9c40
Certificate serial: 019D98BD8CF8086AE63D4E0C84AD5962AE73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
Manifest number: 0F1F
Signing time: Fri 17 Apr 2026 00:00:52 +0000
Manifest this update: Fri 17 Apr 2026 00:00:52 +0000
Manifest next update: Sat 18 Apr 2026 00:00:52 +0000
Files and hashes: 1: MZXty06Zl0SzNmooJ_8YDA7IJCo.roa (hash: CxYqpGtTZxJ+XJM89fQrjKOfOuAfJMmZBcg+oB/Yo2U=)
2: zABy2pgRQZPBBM4aYJ2SppdvnEA.crl (hash: jkqo7q/bMQ3gCTtrCL7x+/jlUpQqWGPn75h+W1hZHfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:8c:f8:08:6a:e6:3d:4e:0c:84:ad:59:62:ae:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc0072da98114193c104ce1a609d92a6976f9c40
Validity
Not Before: Apr 17 00:00:52 2026 GMT
Not After : Apr 18 00:00:52 2026 GMT
Subject: CN=04ef51b83c8a83b3a428799563044712e49443a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:83:9f:60:6a:a2:eb:95:ab:b8:09:a2:ec:02:
ca:32:24:76:3f:c0:0d:e9:14:25:06:a0:2f:02:65:
2c:95:45:2b:f4:f8:69:02:09:aa:7a:bb:00:10:49:
85:14:55:e7:1f:28:4b:a2:b9:a4:41:78:d9:cd:06:
e5:39:3b:67:13:7e:80:14:92:19:3a:6b:5a:6f:06:
f7:df:9a:69:ff:09:ec:a6:43:a0:14:f4:16:44:c6:
31:0d:37:ed:0a:a4:4d:0c:1a:f5:10:6d:05:c4:57:
8f:2f:de:8e:1e:47:20:29:ed:08:f0:12:a6:2c:0f:
e7:3d:43:80:bc:31:08:c9:a0:3d:48:05:aa:c2:f2:
68:3f:62:2c:da:e9:a9:0d:cb:30:e0:41:05:92:2e:
3a:3e:9c:18:9d:42:a2:98:bf:7b:4f:80:84:94:b7:
24:6c:1b:e8:00:a4:7b:8d:15:52:56:20:8a:97:dc:
88:d0:60:3f:cd:fb:60:f8:75:98:38:04:10:35:b1:
2f:d0:1b:f0:4c:f5:5f:eb:f1:29:08:86:96:c3:a2:
51:12:61:12:d7:99:70:a2:8f:12:ce:27:47:e3:e0:
19:a8:be:86:ba:f8:07:49:60:0e:39:2a:7f:d1:fa:
9a:fb:c0:a1:ea:5e:b1:c3:32:a6:19:1b:81:73:e3:
b8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:EF:51:B8:3C:8A:83:B3:A4:28:79:95:63:04:47:12:E4:94:43:A1
X509v3 Authority Key Identifier:
keyid:CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:5b:9f:83:dd:0b:af:a5:11:96:4c:db:11:92:a7:0d:f3:41:
28:6b:6e:51:94:cf:59:a0:3e:49:ce:25:b8:7c:77:9d:b1:1e:
bb:aa:22:53:2b:5b:d3:36:e3:0e:d0:43:dc:00:b1:4f:e4:d6:
62:b8:16:23:3d:be:e7:79:70:62:61:61:f4:61:c0:80:98:10:
d2:4e:5b:5a:d9:2c:2f:58:c4:21:ce:d2:25:21:8f:4c:69:00:
82:ee:56:21:8c:fd:32:69:ce:3b:7b:39:48:46:7e:14:9d:dc:
18:8b:c6:3c:01:fe:45:32:a7:d9:7b:c2:1f:ba:2b:fa:2a:df:
93:e4:ee:ce:70:42:5b:55:23:79:08:23:c6:e1:e0:69:a8:cc:
a4:7a:b8:f3:4a:14:c7:fa:96:2c:e1:d3:cd:eb:f7:4c:41:b9:
d5:a3:12:25:a2:21:53:25:8d:90:0e:88:a9:f6:70:72:a1:f6:
6c:bd:ec:eb:ab:bb:22:f0:21:c1:9b:bc:1e:08:69:c8:cd:3c:
7b:0d:48:61:4e:2d:26:e4:b7:c0:54:10:6b:38:73:ed:93:e7:
fe:e7:6d:e2:24:4e:60:3b:26:e8:a9:0e:16:de:6d:c7:f5:f6:
81:cd:ec:6d:50:b3:a0:ec:76:f2:58:3a:8a:04:69:e0:53:66:
9d:63:f9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:39:57 2026 by rpki-client