Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
File: zAGDPH7l80P_CTtsTmFR0ONkV2g.mft (raw, json)
Hash identifier: xtUmJzG1XCLZWhX0ZadW+Kil6bJw7+niYug+06kcNdI=
Subject key identifier: 00:68:DD:44:44:58:50:90:BA:B3:27:5B:6F:21:84:3F:30:E7:B0:55
Authority key identifier: CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
Certificate issuer: /CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Certificate serial: 019D988694501B1C47EF0D942EE5D424D648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
Manifest number: 18CA
Signing time: Thu 16 Apr 2026 23:00:49 +0000
Manifest this update: Thu 16 Apr 2026 23:00:49 +0000
Manifest next update: Fri 17 Apr 2026 23:00:49 +0000
Files and hashes: 1: ZzkZbeBVmlrhqGGKs6Yd3AeUvaE.roa (hash: IagFhxwf07PxkdXjevXoZdw0hvj+5sj4zJXs1+hlG/o=)
2: iHBYOJIGB1YPm4Hr-bORCIB-5Nw.roa (hash: It8YvfViWyNErBB7Zv+bZEVw/M7ptWvSo9mhIgQMuss=)
3: zAGDPH7l80P_CTtsTmFR0ONkV2g.crl (hash: nWvh7tpgVpABpmC2FBmaAul3MpD0cRUlDKp3tf6eBoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:94:50:1b:1c:47:ef:0d:94:2e:e5:d4:24:d6:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Validity
Not Before: Apr 16 23:00:49 2026 GMT
Not After : Apr 17 23:00:49 2026 GMT
Subject: CN=0068dd4444585090bab3275b6f21843f30e7b055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7d:16:3b:e9:9f:7c:2e:16:e7:14:c1:04:6b:
30:a2:8f:ff:46:e7:6d:70:46:16:38:ba:cd:21:5b:
22:c5:08:56:e7:a2:2f:c2:95:b8:8c:4c:fa:b0:56:
67:d3:9d:a5:c4:d4:16:b3:2f:1f:95:f2:fd:24:67:
7d:f9:a7:9d:0b:22:d6:5f:da:a6:9c:56:8c:37:ff:
e6:3f:e0:97:0f:9f:e6:14:8a:bd:90:39:f8:31:b7:
b8:5a:b3:6b:62:46:99:32:74:fd:8f:6e:3e:8d:3c:
7f:c6:d0:8b:16:e6:95:c1:a2:76:26:d2:e6:e9:97:
06:b4:39:0b:14:c9:67:e4:b7:b6:d0:1e:ec:25:ba:
57:cf:27:95:64:30:4f:05:02:60:b9:34:36:0e:88:
1e:81:93:57:1d:8c:10:e0:d9:82:4e:d4:b0:67:9a:
64:08:db:12:e7:95:a7:0d:93:2d:11:72:3d:3c:03:
d2:f2:4a:cd:14:b1:8e:08:69:6c:6c:13:68:61:84:
36:b1:73:97:f1:17:9f:86:a0:b2:8f:90:b2:70:c2:
45:f3:5b:ed:d9:6d:6b:0b:09:e4:cd:ba:db:87:ec:
8c:e4:a0:16:0c:6e:19:67:25:9b:2d:cc:ed:8a:41:
8b:85:9c:8f:72:3b:ec:da:d2:37:df:c9:99:52:39:
4c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:68:DD:44:44:58:50:90:BA:B3:27:5B:6F:21:84:3F:30:E7:B0:55
X509v3 Authority Key Identifier:
keyid:CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:a6:bf:9f:7e:09:e3:0a:93:49:bb:7f:57:dd:0b:2d:28:07:
58:c4:1b:f3:2a:9e:75:b5:dc:d8:ff:8c:58:35:c0:35:ee:60:
ee:0f:93:5f:d3:5e:3e:6b:c6:0f:fe:06:4d:53:98:c7:9b:ad:
4c:76:8a:10:93:4e:c0:48:14:ac:5d:78:38:ed:df:ad:26:66:
e5:ac:f0:7d:90:8d:cc:9f:1b:8e:7e:9b:a4:14:5d:d4:0f:3d:
51:3a:cb:15:84:38:e4:07:fd:96:f7:06:74:42:06:d5:d8:ba:
f7:74:cd:38:af:1d:b3:6f:9a:83:28:93:5e:56:5c:9e:0d:b1:
f9:d4:df:97:2b:da:6a:f7:04:f9:e1:7f:5e:01:39:3b:b3:4f:
96:4a:f8:a3:82:6d:d2:bf:f4:de:57:14:c3:91:39:cb:1c:ac:
b0:fd:3a:99:10:bf:43:66:87:0e:8e:d8:11:d7:07:c5:f1:5b:
d6:5d:d4:86:37:48:bf:a0:c0:6e:79:f6:c2:d1:b8:df:69:c6:
4e:f7:f5:1e:db:37:4d:b1:44:4d:cc:a2:5d:57:77:89:1f:ef:
08:3c:5d:05:e0:90:31:e2:0f:27:97:cd:51:26:c2:57:3d:43:
76:88:49:60:9c:51:75:58:06:24:8a:36:fe:a3:8a:c9:3d:87:
e1:03:fb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:04 2026 by rpki-client