Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
File: zABy2pgRQZPBBM4aYJ2SppdvnEA.mft (raw, json)
Hash identifier: /LrIg4pQjDNMOkWbOcCFdPf7CC2h0RFP3HqYVK+0OX0=
Subject key identifier: 31:BA:C1:DD:47:6C:60:EB:3B:21:B6:CC:8E:B8:D9:73:48:98:BE:E7
Authority key identifier: CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
Certificate issuer: /CN=cc0072da98114193c104ce1a609d92a6976f9c40
Certificate serial: 019FA9E2F263B8DFD528AC87453A62A64F1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
Manifest number: 1031
Signing time: Tue 28 Jul 2026 18:00:50 +0000
Manifest this update: Tue 28 Jul 2026 18:00:50 +0000
Manifest next update: Wed 29 Jul 2026 18:00:50 +0000
Files and hashes: 1: MZXty06Zl0SzNmooJ_8YDA7IJCo.roa (hash: CxYqpGtTZxJ+XJM89fQrjKOfOuAfJMmZBcg+oB/Yo2U=)
2: zABy2pgRQZPBBM4aYJ2SppdvnEA.crl (hash: sKemi3ldZ5+Ad32uOfhx6/sGrpfOtLEPuedf6SpSS9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:f2:63:b8:df:d5:28:ac:87:45:3a:62:a6:4f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc0072da98114193c104ce1a609d92a6976f9c40
Validity
Not Before: Jul 28 18:00:50 2026 GMT
Not After : Jul 29 18:00:50 2026 GMT
Subject: CN=31bac1dd476c60eb3b21b6cc8eb8d9734898bee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d6:c0:fd:ca:fe:ec:51:42:a7:21:2e:07:83:
04:1f:8b:71:31:d2:8f:97:2f:39:e9:df:80:8c:b2:
0f:19:ec:d4:22:dd:39:65:c4:fc:77:ae:cc:c8:08:
83:7d:6e:7d:67:95:12:5b:12:bf:e9:2e:15:a2:c2:
e4:1c:6b:4f:6e:0d:43:78:54:48:ab:37:af:8a:33:
e8:1c:cc:94:92:13:13:91:e9:20:d4:92:02:a1:46:
cd:9c:c2:9e:ea:17:29:b5:34:e2:fd:7e:6c:87:11:
bc:9c:49:44:21:84:0b:d8:16:c0:35:f5:83:e1:a7:
dd:92:a7:cf:87:31:8c:16:51:6e:75:2f:e9:74:11:
1c:3d:fb:71:36:8b:f6:13:77:c2:8a:82:87:bd:8d:
f0:fa:0c:c5:74:1f:8c:b8:87:c6:97:77:94:fd:d0:
51:24:9c:ed:35:41:36:ff:10:cd:ed:12:54:b8:e2:
a5:bc:c5:62:c7:12:54:46:7a:b0:f6:58:a5:d5:8e:
87:f2:63:33:90:a0:8e:a1:66:a9:f5:40:4e:ee:fe:
44:ee:2c:e6:4b:12:94:79:92:43:25:5d:3e:ab:94:
c9:65:6a:b8:2a:1e:16:ab:78:c1:5a:75:79:63:a8:
c7:22:0f:c7:0d:c4:7f:ae:f2:24:a2:ae:15:6a:35:
70:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BA:C1:DD:47:6C:60:EB:3B:21:B6:CC:8E:B8:D9:73:48:98:BE:E7
X509v3 Authority Key Identifier:
keyid:CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a5:97:88:d1:6e:50:75:91:62:c0:52:37:35:53:4f:6a:be:
f5:7e:5c:cf:2a:0c:53:43:c1:bd:bf:99:8c:4a:7f:43:fd:ec:
e7:31:98:36:8b:c3:45:36:70:03:e0:80:ee:e3:1b:52:02:00:
9f:7a:f0:0c:89:81:62:df:15:c9:64:61:fc:b5:d1:50:51:76:
57:e4:8d:d0:40:c2:c1:e8:b3:ae:f1:52:7c:5d:e3:c5:d5:0b:
0c:5d:66:81:a2:d6:48:aa:c2:84:5c:e9:fa:49:b8:96:99:0a:
1f:6c:a5:8a:07:d1:77:14:24:d4:1c:98:e1:21:4d:35:8d:09:
62:e1:31:e3:22:a5:be:b1:7e:a4:1a:d3:de:98:db:ea:12:94:
b4:07:3e:85:0c:bc:5e:63:00:bd:d8:6e:ff:b6:9c:c9:72:12:
04:45:50:63:e0:09:af:8c:fd:91:a1:f2:97:b1:1c:b6:ac:4c:
cc:94:5e:3f:29:ef:f8:10:ee:46:a5:45:68:d8:20:dd:c0:d9:
52:20:50:39:a2:e5:85:5f:06:4d:0e:74:b9:f3:e3:86:dd:1f:
85:cd:ef:ef:b0:67:de:9a:e4:e8:5a:81:88:00:bb:fe:80:5e:
d7:ba:61:dd:1f:33:b5:50:64:df:04:d4:17:e8:d4:8d:12:9d:
93:cb:d5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:00:02 2026 by rpki-client