Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
File: zAGDPH7l80P_CTtsTmFR0ONkV2g.mft (raw, json)
Hash identifier: dGb2YqOaRIogUr0yU8v4GZ1ZUkEyuG7LTBPcZuNlzGc=
Subject key identifier: 77:47:07:67:9C:75:63:DE:06:6F:DF:CB:72:F6:0F:5A:54:D0:8A:EB
Authority key identifier: CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
Certificate issuer: /CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Certificate serial: 01A0C3A01C4D33AB0091AB124D320FD0A8BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
Manifest number: 1A6E
Signing time: Mon 21 Sep 2026 11:00:45 +0000
Manifest this update: Mon 21 Sep 2026 11:00:45 +0000
Manifest next update: Tue 22 Sep 2026 11:00:45 +0000
Files and hashes: 1: ZzkZbeBVmlrhqGGKs6Yd3AeUvaE.roa (hash: IagFhxwf07PxkdXjevXoZdw0hvj+5sj4zJXs1+hlG/o=)
2: iHBYOJIGB1YPm4Hr-bORCIB-5Nw.roa (hash: It8YvfViWyNErBB7Zv+bZEVw/M7ptWvSo9mhIgQMuss=)
3: zAGDPH7l80P_CTtsTmFR0ONkV2g.crl (hash: vwqUBN1cZfV1pwkwv1PbKgRUZA1N+CA6x1QdL2HdQlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:a0:1c:4d:33:ab:00:91:ab:12:4d:32:0f:d0:a8:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Validity
Not Before: Sep 21 11:00:45 2026 GMT
Not After : Sep 22 11:00:45 2026 GMT
Subject: CN=774707679c7563de066fdfcb72f60f5a54d08aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:30:c7:06:1c:6e:88:17:f6:ce:07:8e:08:0d:
db:29:9e:bd:68:bd:57:f8:8f:aa:d9:91:01:39:97:
bd:89:f5:98:53:86:8c:80:3e:1a:89:f5:d3:26:fb:
5e:d0:9d:86:fa:c4:de:9d:a1:92:64:4a:06:3f:09:
19:22:60:ba:52:43:e0:1d:20:1a:71:71:d4:78:b0:
ce:06:83:74:7e:28:bf:e7:a3:dd:ac:2a:0f:df:3c:
28:56:1e:87:f7:bb:43:f9:7e:32:5b:2e:7d:04:97:
5b:b4:10:de:c6:c9:18:91:3e:5f:ec:f7:04:14:9d:
80:14:f6:c6:28:91:bd:67:a7:58:38:51:84:92:f7:
a3:cf:c2:ea:64:a0:f4:58:00:6d:42:ea:f7:e8:37:
74:e3:8e:1d:26:8e:96:3b:4f:8e:6d:03:db:03:d2:
70:72:a2:ec:26:d8:8f:03:98:e0:6e:74:dd:20:32:
a5:3a:05:cc:34:13:ad:19:38:3a:de:b7:e2:56:57:
2b:9b:c6:b2:c0:a5:a0:b9:b4:d5:86:ab:45:9f:d9:
47:3a:f0:1a:00:cf:9e:d1:4b:f5:22:84:96:55:95:
1b:fa:8a:3b:d6:2b:33:bf:6c:43:03:f7:0c:10:c6:
24:4d:8b:d2:c9:32:f9:c5:e3:0c:e9:ae:28:1b:4f:
e2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:47:07:67:9C:75:63:DE:06:6F:DF:CB:72:F6:0F:5A:54:D0:8A:EB
X509v3 Authority Key Identifier:
keyid:CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ec:c2:51:a0:c1:4e:df:3f:48:4d:2d:72:e5:4d:0f:4f:e9:
16:4f:cb:8d:c5:b9:96:83:c2:22:bd:d8:e3:eb:cf:63:8f:55:
1d:f3:36:d9:6b:78:f4:6a:e5:de:bc:fe:fe:44:35:31:92:ff:
7f:27:12:d8:aa:57:e5:87:f2:ea:33:47:34:82:85:24:a0:26:
28:33:a3:4a:94:c7:39:9c:6c:21:8f:a5:f9:81:c4:00:0c:79:
f1:0f:8a:40:51:e0:f7:30:40:fd:38:af:b0:42:1c:ab:5e:40:
4f:99:65:ff:17:d5:71:f8:ff:41:36:ef:52:e3:fc:c3:8b:e9:
a1:a9:e8:9c:8c:80:67:09:e2:4a:0c:05:ab:fb:10:49:f7:a7:
dc:15:c3:4c:c8:ed:f6:83:8b:fe:05:ab:1c:05:6c:17:fc:76:
9f:73:af:d9:e9:b8:49:aa:b3:45:9f:06:20:65:3c:07:8f:0e:
25:2e:b7:04:59:17:8f:05:8d:1c:81:f7:49:b8:25:45:35:c7:
d6:da:05:4c:0e:8a:a7:88:65:0c:0a:4c:f0:b8:fe:a4:e2:4f:
71:15:77:33:c3:5f:f7:39:d0:7e:75:a0:51:fe:48:24:14:f2:
59:8e:42:12:d2:35:9b:49:bd:14:90:d7:da:86:f2:c9:0f:d4:
7b:93:d5:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDoBxNM6sAkasSTTIP0Ki7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMDE4MzNjN2VlNWYzNDNmZjA5M2I2YzRlNjE1MWQwZTM2
NDU3NjgwHhcNMjYwOTIxMTEwMDQ1WhcNMjYwOTIyMTEwMDQ1WjAzMTEwLwYDVQQD
Eyg3NzQ3MDc2NzljNzU2M2RlMDY2ZmRmY2I3MmY2MGY1YTU0ZDA4YWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zDHBhxuiBf2zgeOCA3bKZ69aL1X
+I+q2ZEBOZe9ifWYU4aMgD4aifXTJvte0J2G+sTenaGSZEoGPwkZImC6UkPgHSAa
cXHUeLDOBoN0fii/56PdrCoP3zwoVh6H97tD+X4yWy59BJdbtBDexskYkT5f7PcE
FJ2AFPbGKJG9Z6dYOFGEkvejz8LqZKD0WABtQur36Dd0444dJo6WO0+ObQPbA9Jw
cqLsJtiPA5jgbnTdIDKlOgXMNBOtGTg63rfiVlcrm8aywKWgubTVhqtFn9lHOvAa
AM+e0Uv1IoSWVZUb+oo71iszv2xDA/cMEMYkTYvSyTL5xeMM6a4oG0/imwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHdHB2ecdWPeBm/fy3L2D1pU0IrrMB8GA1UdIwQY
MBaAFMwBgzx+5fND/wk7bE5hUdDjZFdoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekFHRFBIN2w4MFBfQ1R0c1RtRlIwT05rVjJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9kNDA3NzMtY2YyZC00MTk4LThiM2Yt
NzI3YWI2ZDA3ZmYyLzEvekFHRFBIN2w4MFBfQ1R0c1RtRlIwT05rVjJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9kNDA3NzMtY2YyZC00MTk4LThiM2YtNzI3YWI2ZDA3ZmYy
LzEvekFHRFBIN2w4MFBfQ1R0c1RtRlIwT05rVjJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXOzCUaDB
Tt8/SE0tcuVND0/pFk/LjcW5loPCIr3Y4+vPY49VHfM22Wt49Grl3rz+/kQ1MZL/
fycS2KpX5Yfy6jNHNIKFJKAmKDOjSpTHOZxsIY+l+YHEAAx58Q+KQFHg9zBA/Tiv
sEIcq15AT5ll/xfVcfj/QTbvUuP8w4vpoanonIyAZwniSgwFq/sQSfen3BXDTMjt
9oOL/gWrHAVsF/x2n3Ov2em4SaqzRZ8GIGU8B48OJS63BFkXjwWNHIH3SbglRTXH
1toFTA6Kp4hlDApM8Lj+pOJPcRV3M8Nf9znQfnWgUf5IJBTyWY5CEtI1m0m9FJDX
2obyyQ/Ue5PVig==
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:01:10 2026 by rpki-client