Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
File: zAGDPH7l80P_CTtsTmFR0ONkV2g.mft (raw, json)
Hash identifier: Xo0vBPaEOgtAZyVhhpdd6lIeykXrlndO0pw4aqhwvns=
Subject key identifier: CD:AC:9A:D3:2D:C4:EB:94:89:37:62:91:46:F7:62:48:82:45:3D:0F
Authority key identifier: CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
Certificate issuer: /CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Certificate serial: 019EC1EE15DD4389B675D9DC3489A96F247C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
Manifest number: 1964
Signing time: Sat 13 Jun 2026 17:01:06 +0000
Manifest this update: Sat 13 Jun 2026 17:01:06 +0000
Manifest next update: Sun 14 Jun 2026 17:01:06 +0000
Files and hashes: 1: ZzkZbeBVmlrhqGGKs6Yd3AeUvaE.roa (hash: IagFhxwf07PxkdXjevXoZdw0hvj+5sj4zJXs1+hlG/o=)
2: iHBYOJIGB1YPm4Hr-bORCIB-5Nw.roa (hash: It8YvfViWyNErBB7Zv+bZEVw/M7ptWvSo9mhIgQMuss=)
3: zAGDPH7l80P_CTtsTmFR0ONkV2g.crl (hash: eZBZWQDCKDoWbVRFM/bxirhMI39QyThvIkqclJLNyjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ee:15:dd:43:89:b6:75:d9:dc:34:89:a9:6f:24:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Validity
Not Before: Jun 13 17:01:06 2026 GMT
Not After : Jun 14 17:01:06 2026 GMT
Subject: CN=cdac9ad32dc4eb948937629146f7624882453d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:aa:c7:33:c5:40:c9:6c:bd:f6:c6:c8:f1:8a:
fd:c0:c0:30:6a:90:b8:30:b9:82:d5:cb:cf:ff:e1:
58:4d:01:32:37:43:b7:77:f7:02:1f:bb:13:d8:c8:
d8:98:8b:20:32:49:75:ce:20:43:40:48:f1:05:55:
66:f7:96:b6:87:8a:ee:50:c3:dd:c2:51:42:b5:41:
f8:4e:ef:bf:aa:ba:33:c4:a1:1d:1a:a9:57:41:3e:
18:c6:c5:6c:4e:9a:e8:99:12:09:1f:99:76:84:b2:
7c:14:74:85:72:d8:fb:53:38:4f:c0:0f:ea:35:1f:
e6:9c:32:4b:81:58:e4:68:e2:35:9d:b6:d4:ae:e7:
5b:db:b7:b3:d9:0f:45:b0:e9:55:fb:11:d5:6b:40:
90:ff:dd:0a:72:36:65:79:1a:59:e0:80:4b:7f:4c:
1f:1f:02:c4:34:b0:d3:12:10:36:09:60:62:42:08:
89:10:8c:32:09:3d:f6:bc:fc:54:e4:96:f3:aa:b0:
43:2c:e2:37:44:3c:b1:60:ad:de:aa:db:cf:b0:32:
d0:c7:8b:68:7c:b1:23:ec:11:32:7e:97:a8:ad:ed:
91:25:20:89:b9:c3:59:84:9a:86:cc:33:2e:bf:1b:
9d:3e:f2:52:e3:ac:63:62:aa:97:2a:2d:64:bd:39:
16:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AC:9A:D3:2D:C4:EB:94:89:37:62:91:46:F7:62:48:82:45:3D:0F
X509v3 Authority Key Identifier:
keyid:CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:24:27:40:a8:6a:e8:17:d5:09:cf:e0:f7:10:f3:1d:6b:20:
c1:86:74:02:e3:57:e3:f4:30:e4:84:f4:73:f1:03:d2:e2:25:
bd:c7:c1:7a:93:ff:8e:85:b8:bf:d0:dc:b8:46:2c:46:de:b1:
7d:16:c8:48:c3:f6:54:f1:14:6f:c9:3f:7e:1c:7d:a7:ee:22:
37:e8:ac:6f:45:7b:5c:6a:f2:c3:53:ae:b5:2a:73:e0:9b:91:
e8:6c:17:05:1f:f6:22:76:63:99:9c:2c:4a:95:07:9d:a6:37:
c4:6b:ad:5f:23:f0:4c:42:f1:43:3b:55:e5:3c:a6:b9:0a:5c:
40:a8:bb:2b:84:8d:94:a6:5e:bb:74:c7:33:af:ba:01:a2:e5:
db:07:63:83:d1:97:7a:76:05:d7:fb:26:c2:c8:66:8f:67:8f:
97:b7:02:17:b1:1c:77:be:45:86:cc:86:61:eb:94:00:bb:21:
3f:1d:20:fd:49:5e:2a:e5:78:d3:84:06:73:46:a1:00:9a:20:
7a:5f:ce:96:ad:26:42:f7:5f:94:05:26:34:44:00:46:16:3a:
a1:0d:2b:f7:fd:57:71:86:c4:2e:a6:35:a9:2a:1a:f2:ef:40:
f2:43:22:1e:3d:d0:d6:9a:ae:80:89:cb:ef:29:61:45:99:00:
c1:0a:ed:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:15:20 2026 by rpki-client