Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
File: mzQGmcjtlwqMntjBYgiPIGfDMlA.mft (raw, json)
Hash identifier: Do1RI9qXD84yT/X/8QSK6mrNki9ZKvLytS8RNt9M6NM=
Subject key identifier: 06:3B:D6:77:25:EC:BD:17:7F:11:E6:70:D4:71:02:23:18:CB:CE:C4
Authority key identifier: 9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
Certificate issuer: /CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Certificate serial: 01A0C8C61B206E1B51BF7BA79AB90D362CDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
Manifest number: 1A6C
Signing time: Tue 22 Sep 2026 11:00:21 +0000
Manifest this update: Tue 22 Sep 2026 11:00:21 +0000
Manifest next update: Wed 23 Sep 2026 11:00:21 +0000
Files and hashes: 1: 01uypEz92w-PEtDCDrkmRt7joB0.roa (hash: 6Ybp9mfbJVOd/HK8t41CSRVz5fBDwLWJNUbKMQQxn7A=)
2: Y5c5tHMCRfTtPuxnVvAxwpXSl28.roa (hash: NZdjkPEkUO+Uw6GFkmHziM3D1Wwqjp5gqekMma3ncw0=)
3: mzQGmcjtlwqMntjBYgiPIGfDMlA.crl (hash: 1dTxBJJcLKIi3M2LriJvLtH//k6lWp/aAfLyl2kzeu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:1b:20:6e:1b:51:bf:7b:a7:9a:b9:0d:36:2c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Validity
Not Before: Sep 22 11:00:21 2026 GMT
Not After : Sep 23 11:00:21 2026 GMT
Subject: CN=063bd67725ecbd177f11e670d471022318cbcec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8e:c6:ec:fa:1c:25:c4:4a:ff:c7:69:e6:6c:
cf:42:51:96:4c:3c:56:aa:2c:8c:b2:a9:63:76:86:
78:a1:b6:f6:f3:a1:06:77:40:10:d4:05:10:c8:f2:
98:57:7b:1d:d3:6e:04:bc:e2:62:68:21:65:d4:13:
4a:56:21:3e:1a:93:4f:80:45:a9:cf:00:3c:58:58:
a4:31:1e:70:6b:87:96:21:15:cd:7d:1b:44:ab:11:
b8:e8:e1:98:66:da:9f:7f:f7:6b:d4:f2:bb:0d:30:
ff:78:58:bd:59:63:0f:1e:90:4e:02:20:96:af:b3:
95:96:aa:a3:37:1c:73:09:c6:d4:6c:72:13:01:8c:
cf:47:e9:cf:10:82:91:c3:d8:a3:c3:15:7f:15:0c:
c5:da:cb:ed:7e:06:43:aa:75:60:79:d7:8c:4e:f3:
05:e8:ec:5e:7a:f0:a2:9e:e9:b0:b4:f9:b6:63:a3:
cd:93:82:69:6b:4c:91:48:c4:15:7b:39:78:99:9c:
9e:cd:a7:be:6b:08:9e:1f:fe:d1:53:30:11:89:9a:
ed:15:8d:e0:fe:1b:76:d8:0c:24:b9:41:9f:5a:aa:
72:61:54:06:4b:57:97:a1:20:18:c1:14:90:3d:b9:
c0:c2:c2:5c:ab:a3:6f:50:0a:42:0b:8e:26:b0:4e:
aa:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3B:D6:77:25:EC:BD:17:7F:11:E6:70:D4:71:02:23:18:CB:CE:C4
X509v3 Authority Key Identifier:
keyid:9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:6a:6a:a4:19:d5:c0:78:54:46:28:10:40:7c:3f:46:ee:65:
d6:06:b8:cb:d9:f1:24:34:b1:fd:a0:19:6d:47:39:14:c1:30:
b2:45:59:44:eb:02:aa:1b:a3:02:62:ec:86:7e:a2:07:45:45:
80:83:dd:5c:04:71:53:bd:38:41:e2:20:b2:8a:89:f4:78:9e:
f2:21:42:6b:e5:28:72:27:fe:d0:75:fa:e3:f3:d3:ed:83:6e:
25:0b:d5:d6:f5:d4:de:09:76:42:82:96:5f:e1:7f:ab:93:7c:
9e:72:cf:38:2d:d7:8c:32:cf:f2:34:ac:f6:8b:6c:21:85:c6:
d6:02:87:b6:98:5d:0a:42:ac:35:dd:db:1f:cb:94:76:cb:ac:
fc:e1:d0:40:7d:36:8f:4d:eb:3d:18:dc:76:57:10:80:ba:a4:
d5:e0:e8:d0:f2:d2:11:b8:6c:20:b5:19:18:d1:42:fe:f7:79:
d7:44:ca:28:b0:62:f4:45:af:68:9c:69:ac:0e:cd:f1:95:31:
40:e0:34:7d:20:75:93:4e:b2:f8:a0:2e:2a:a2:ee:7b:58:9a:
6d:7c:88:45:12:8e:38:7c:a6:c8:18:eb:cf:a1:65:be:af:6b:
8b:58:92:45:62:79:d4:05:27:d4:0b:a8:83:46:b7:c5:88:5f:
f4:2c:42:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIxhsgbhtRv3unmrkNNizaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMzQwNjk5YzhlZDk3MGE4YzllZDhjMTYyMDg4ZjIwNjdj
MzMyNTAwHhcNMjYwOTIyMTEwMDIxWhcNMjYwOTIzMTEwMDIxWjAzMTEwLwYDVQQD
EygwNjNiZDY3NzI1ZWNiZDE3N2YxMWU2NzBkNDcxMDIyMzE4Y2JjZWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAro7G7PocJcRK/8dp5mzPQlGWTDxW
qiyMsqljdoZ4obb286EGd0AQ1AUQyPKYV3sd024EvOJiaCFl1BNKViE+GpNPgEWp
zwA8WFikMR5wa4eWIRXNfRtEqxG46OGYZtqff/dr1PK7DTD/eFi9WWMPHpBOAiCW
r7OVlqqjNxxzCcbUbHITAYzPR+nPEIKRw9ijwxV/FQzF2svtfgZDqnVgedeMTvMF
6OxeevCinumwtPm2Y6PNk4Jpa0yRSMQVezl4mZyezae+awieH/7RUzARiZrtFY3g
/ht22AwkuUGfWqpyYVQGS1eXoSAYwRSQPbnAwsJcq6NvUApCC44msE6qOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAY71ncl7L0XfxHmcNRxAiMYy87EMB8GA1UdIwQY
MBaAFJs0BpnI7ZcKjJ7YwWIIjyBnwzJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXpRR21janRsd3FNbnRqQllnaVBJR2ZETWxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi82ZjQ5NDAtNWFiYy00OWI0LTk3NDct
ZTA4YmUwZWRhZjc2LzEvbXpRR21janRsd3FNbnRqQllnaVBJR2ZETWxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi82ZjQ5NDAtNWFiYy00OWI0LTk3NDctZTA4YmUwZWRhZjc2
LzEvbXpRR21janRsd3FNbnRqQllnaVBJR2ZETWxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE2pqpBnV
wHhURigQQHw/Ru5l1ga4y9nxJDSx/aAZbUc5FMEwskVZROsCqhujAmLshn6iB0VF
gIPdXARxU704QeIgsoqJ9Hie8iFCa+Uocif+0HX64/PT7YNuJQvV1vXU3gl2QoKW
X+F/q5N8nnLPOC3XjDLP8jSs9otsIYXG1gKHtphdCkKsNd3bH8uUdsus/OHQQH02
j03rPRjcdlcQgLqk1eDo0PLSEbhsILUZGNFC/vd510TKKLBi9EWvaJxprA7N8ZUx
QOA0fSB1k06y+KAuKqLue1iabXyIRRKOOHymyBjrz6Flvq9ri1iSRWJ51AUn1Auo
g0a3xYhf9CxCXw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 15:09:17 2026 by rpki-client