Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
File: zAGDPH7l80P_CTtsTmFR0ONkV2g.mft (raw, json)
Hash identifier: 9EBMgSKILKeUIw2SISwGncfX1zxQa3jcddOvD58ooCA=
Subject key identifier: 02:97:C6:EA:68:61:BD:42:E1:60:F1:92:A2:54:85:42:93:34:3F:76
Authority key identifier: CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
Certificate issuer: /CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Certificate serial: 019CAAFD9A79571969186CAE8F9C69991C3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
Manifest number: 184F
Signing time: Sun 01 Mar 2026 20:01:12 +0000
Manifest this update: Sun 01 Mar 2026 20:01:12 +0000
Manifest next update: Mon 02 Mar 2026 20:01:12 +0000
Files and hashes: 1: ZzkZbeBVmlrhqGGKs6Yd3AeUvaE.roa (hash: IagFhxwf07PxkdXjevXoZdw0hvj+5sj4zJXs1+hlG/o=)
2: iHBYOJIGB1YPm4Hr-bORCIB-5Nw.roa (hash: It8YvfViWyNErBB7Zv+bZEVw/M7ptWvSo9mhIgQMuss=)
3: zAGDPH7l80P_CTtsTmFR0ONkV2g.crl (hash: yCHjCHma1Sa7Hf/ct5RHyMUtanYH/uqs+urrZ89Ox1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:9a:79:57:19:69:18:6c:ae:8f:9c:69:99:1c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Validity
Not Before: Mar 1 20:01:12 2026 GMT
Not After : Mar 2 20:01:12 2026 GMT
Subject: CN=0297c6ea6861bd42e160f192a254854293343f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:22:c6:1e:f9:44:93:ff:55:33:b8:db:d8:4d:
60:de:c9:83:c0:b4:0a:c9:be:25:db:71:95:c9:ae:
7f:b5:d9:9b:c8:ef:21:1e:c6:52:43:52:a6:2d:d4:
fe:d7:d6:52:9e:b9:92:fa:09:d8:f6:9a:5d:b9:0f:
40:29:71:38:a4:d4:81:d3:1f:a1:48:46:98:63:38:
33:28:3b:e9:90:99:45:cd:0c:25:07:1a:ff:c5:b8:
28:63:a5:1a:0b:1c:44:e3:96:5e:34:74:c4:59:e2:
90:e7:ab:0a:44:6d:be:2d:87:7b:42:05:d2:ac:28:
fb:80:35:ae:69:d9:e6:30:e9:f2:eb:ef:46:fc:a6:
53:a6:15:18:03:68:26:3d:b1:94:7d:08:99:a0:16:
7d:c7:59:c3:5f:ab:57:02:c4:e7:d7:a9:ae:ca:7c:
87:a9:c9:ad:57:95:4d:6e:0b:70:22:8e:cb:31:31:
85:e5:d0:24:3c:a4:43:0d:24:04:10:d8:8a:20:40:
2d:4f:4f:40:c1:f0:63:32:89:85:08:ef:7d:0c:75:
52:be:bc:63:16:f5:ca:33:e5:1f:ec:34:90:47:e3:
7c:d4:78:d8:72:35:c2:a9:af:3b:19:8e:af:ca:15:
3c:9b:cb:e5:36:ef:ce:fd:f6:53:c5:2e:d1:6e:e9:
f9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:97:C6:EA:68:61:BD:42:E1:60:F1:92:A2:54:85:42:93:34:3F:76
X509v3 Authority Key Identifier:
keyid:CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:50:5f:c3:a2:0b:9a:02:05:b3:0f:c1:aa:09:a1:37:d8:e8:
75:aa:a7:bb:d4:e7:c9:8a:76:91:ca:7d:f7:55:0c:b6:8d:1a:
4d:bb:5f:cb:d1:74:f3:12:6a:89:2d:9b:36:3e:0f:38:38:ce:
63:a8:52:1d:7a:a7:d1:52:fc:80:e1:4e:a6:56:56:be:4c:a2:
2c:65:fb:03:2b:87:ad:98:2f:e8:02:59:31:8e:69:0c:2b:83:
8d:46:29:24:8f:2d:3b:a4:95:60:2b:8a:85:fa:6c:75:34:d0:
08:f4:c6:d7:ba:00:31:1f:a6:68:c5:9c:f9:67:c2:73:f8:bc:
05:b7:0d:e7:e8:66:99:38:c8:51:b2:d3:a8:2d:3d:d4:de:b3:
a8:96:f4:83:e9:fb:b9:02:bc:a3:2d:82:51:b0:56:fd:e7:83:
f0:4e:80:1e:8c:69:60:89:66:23:fd:0c:40:2f:06:c5:d6:27:
83:d1:4a:a4:e2:6b:1b:59:4b:ab:23:da:74:4c:b6:c6:45:06:
9f:be:d1:6b:ae:37:f4:eb:90:c9:0d:5a:fc:30:f1:61:cd:9c:
4d:c4:f5:07:00:d3:7f:0f:f7:47:5a:b9:95:3d:47:a6:13:9a:
6f:f9:f2:3d:70:30:20:7a:d8:6e:44:d3:19:87:ac:8a:b8:db:
70:a7:61:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/Zp5VxlpGGyuj5xpmRw6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMDE4MzNjN2VlNWYzNDNmZjA5M2I2YzRlNjE1MWQwZTM2
NDU3NjgwHhcNMjYwMzAxMjAwMTEyWhcNMjYwMzAyMjAwMTEyWjAzMTEwLwYDVQQD
EygwMjk3YzZlYTY4NjFiZDQyZTE2MGYxOTJhMjU0ODU0MjkzMzQzZjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSLGHvlEk/9VM7jb2E1g3smDwLQK
yb4l23GVya5/tdmbyO8hHsZSQ1KmLdT+19ZSnrmS+gnY9ppduQ9AKXE4pNSB0x+h
SEaYYzgzKDvpkJlFzQwlBxr/xbgoY6UaCxxE45ZeNHTEWeKQ56sKRG2+LYd7QgXS
rCj7gDWuadnmMOny6+9G/KZTphUYA2gmPbGUfQiZoBZ9x1nDX6tXAsTn16muynyH
qcmtV5VNbgtwIo7LMTGF5dAkPKRDDSQEENiKIEAtT09AwfBjMomFCO99DHVSvrxj
FvXKM+Uf7DSQR+N81HjYcjXCqa87GY6vyhU8m8vlNu/O/fZTxS7Rbun5cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKXxupoYb1C4WDxkqJUhUKTND92MB8GA1UdIwQY
MBaAFMwBgzx+5fND/wk7bE5hUdDjZFdoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekFHRFBIN2w4MFBfQ1R0c1RtRlIwT05rVjJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9kNDA3NzMtY2YyZC00MTk4LThiM2Yt
NzI3YWI2ZDA3ZmYyLzEvekFHRFBIN2w4MFBfQ1R0c1RtRlIwT05rVjJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9kNDA3NzMtY2YyZC00MTk4LThiM2YtNzI3YWI2ZDA3ZmYy
LzEvekFHRFBIN2w4MFBfQ1R0c1RtRlIwT05rVjJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAilBfw6IL
mgIFsw/BqgmhN9jodaqnu9TnyYp2kcp991UMto0aTbtfy9F08xJqiS2bNj4PODjO
Y6hSHXqn0VL8gOFOplZWvkyiLGX7AyuHrZgv6AJZMY5pDCuDjUYpJI8tO6SVYCuK
hfpsdTTQCPTG17oAMR+maMWc+WfCc/i8BbcN5+hmmTjIUbLTqC091N6zqJb0g+n7
uQK8oy2CUbBW/eeD8E6AHoxpYIlmI/0MQC8GxdYng9FKpOJrG1lLqyPadEy2xkUG
n77Ra6439OuQyQ1a/DDxYc2cTcT1BwDTfw/3R1q5lT1HphOab/nyPXAwIHrYbkTT
GYesirjbcKdh9Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:08 2026 by rpki-client