Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
File: mzQGmcjtlwqMntjBYgiPIGfDMlA.mft (raw, json)
Hash identifier: nAnW5DnKST11egsO7+VEq5FLWZ+PFnkVGowsGxU4Xqg=
Subject key identifier: 83:48:0B:23:73:CF:45:14:56:F9:26:41:E8:37:38:BD:9B:15:8A:7B
Authority key identifier: 9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
Certificate issuer: /CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Certificate serial: 01A0C4E97B1D2216F09113E3C29BC2F649F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
Manifest number: 1A6A
Signing time: Mon 21 Sep 2026 17:00:30 +0000
Manifest this update: Mon 21 Sep 2026 17:00:30 +0000
Manifest next update: Tue 22 Sep 2026 17:00:30 +0000
Files and hashes: 1: 01uypEz92w-PEtDCDrkmRt7joB0.roa (hash: 6Ybp9mfbJVOd/HK8t41CSRVz5fBDwLWJNUbKMQQxn7A=)
2: Y5c5tHMCRfTtPuxnVvAxwpXSl28.roa (hash: NZdjkPEkUO+Uw6GFkmHziM3D1Wwqjp5gqekMma3ncw0=)
3: mzQGmcjtlwqMntjBYgiPIGfDMlA.crl (hash: uIbsGUhSz9ZyYpPsfGDB8Diki/q2uNfRavOLgXGwC7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 17:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:e9:7b:1d:22:16:f0:91:13:e3:c2:9b:c2:f6:49:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Validity
Not Before: Sep 21 17:00:30 2026 GMT
Not After : Sep 22 17:00:30 2026 GMT
Subject: CN=83480b2373cf451456f92641e83738bd9b158a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ea:c5:30:e4:91:5e:24:ed:64:79:4b:74:54:
46:ec:c8:ba:cf:f7:5a:47:b8:93:19:a5:8a:f9:4c:
f5:53:a0:61:60:79:00:ec:82:95:3d:e6:08:1d:f1:
2c:af:1a:c3:15:40:ff:91:1f:8f:16:07:07:a1:b8:
4b:f9:1a:76:ac:3d:d7:9e:4f:63:06:2e:f0:b2:1d:
62:d1:7d:4c:76:35:5e:28:0c:3d:10:fd:be:bf:a4:
dd:5f:5b:8a:aa:77:49:49:6d:a4:f0:ac:26:4d:ec:
24:58:37:71:a8:32:3b:17:36:fd:6a:0e:c1:18:71:
b8:bf:0c:23:fe:11:cd:a0:b3:b2:f2:b9:71:20:95:
86:8c:87:93:52:ee:66:a4:84:42:0c:13:6a:a1:20:
3e:b0:af:8c:60:8a:62:33:b1:43:42:43:a4:ad:e9:
0b:de:10:3c:e1:be:55:45:b3:95:14:7f:b3:4d:2d:
9d:6c:30:a5:11:f9:f3:d3:0f:b3:02:b0:47:e7:06:
4d:4a:13:3f:f3:3a:20:ac:14:2e:bc:0e:ef:89:ae:
b8:9c:ea:2b:b4:c7:b8:58:85:83:86:2e:5b:00:ad:
68:96:47:e4:88:1b:03:d5:3a:38:76:90:d9:3f:8f:
8d:74:90:24:fa:e9:70:ca:36:39:a9:fc:f1:c5:ad:
eb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:48:0B:23:73:CF:45:14:56:F9:26:41:E8:37:38:BD:9B:15:8A:7B
X509v3 Authority Key Identifier:
keyid:9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:1d:06:25:5a:ff:aa:48:79:1a:4c:c3:5d:c3:1a:3d:0b:47:
c3:c2:fd:7c:70:c7:d1:ef:45:bd:95:36:46:c9:45:31:1a:3f:
2a:81:93:23:47:55:6e:97:b3:4b:0f:bf:6a:8c:68:ed:90:5e:
e1:ab:b9:1a:23:a9:be:48:b0:88:28:4d:f4:6e:a3:c5:c5:95:
05:65:fa:00:f2:7c:02:ec:39:23:a3:35:c8:45:d9:a8:2b:50:
8f:90:90:8d:2a:5b:7e:b7:38:10:93:b8:59:3d:02:ee:8c:4f:
b2:e0:42:6e:28:72:02:d2:db:8f:0c:e5:85:49:70:bf:8b:4f:
e3:4b:c0:5d:0b:18:a0:03:d6:e5:90:02:5c:1e:0c:7a:05:c8:
b9:f4:3c:60:5c:01:a7:f6:a7:dc:a3:ef:55:01:8a:34:b2:95:
aa:0b:cb:d8:cc:1e:76:ca:8c:46:96:74:93:47:a7:c0:df:0e:
23:0f:6d:f4:86:d4:ab:6b:f1:ac:82:b4:4f:0e:9d:b4:4d:15:
1f:67:b8:73:aa:9f:02:31:23:d4:f8:e4:82:89:b4:59:04:db:
54:52:51:28:26:4a:b3:bd:20:60:af:17:ea:49:73:30:87:55:
0f:0e:b7:69:3e:06:78:a3:d4:ed:51:09:f6:72:30:12:6a:d2:
1b:cb:ca:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:18:10 2026 by rpki-client