Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
File: zQYCONBmjUWgQWGKxd92f1mgxK4.mft (raw, json)
Hash identifier: vzyAvPOuilQGolNhskTjAdfmiQbvgzkU9ASZZje+kB4=
Subject key identifier: 89:19:FB:7E:A4:FF:9E:41:D8:B0:57:72:E9:2E:89:AB:C3:C5:21:E8
Authority key identifier: CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE
Certificate issuer: /CN=cd060238d0668d45a041618ac5df767f59a0c4ae
Certificate serial: 01A0EA09AB4A1B2CEBDE17923C12DF467462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
Manifest number: 1109
Signing time: Mon 28 Sep 2026 22:01:37 +0000
Manifest this update: Mon 28 Sep 2026 22:01:37 +0000
Manifest next update: Tue 29 Sep 2026 22:01:37 +0000
Files and hashes: 1: B0xeJ6OlptEzuwHkDKb2uLt1U_4.roa (hash: 0mnm00N6t5GT0+PQLMuChkiPF3X09nPjo6FNCsIiX9w=)
2: DHWxwhm5BstgQrswTpmXlNRqB68.roa (hash: U4MLvKfxIOpMtW85VWgOrj7JclXnEEYGlYHrxV44rNY=)
3: zQYCONBmjUWgQWGKxd92f1mgxK4.crl (hash: wFwyF11im6BmYJR6XK79XyR+0ZwWRMgpj3mADKxUWkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:09:ab:4a:1b:2c:eb:de:17:92:3c:12:df:46:74:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd060238d0668d45a041618ac5df767f59a0c4ae
Validity
Not Before: Sep 28 22:01:37 2026 GMT
Not After : Sep 29 22:01:37 2026 GMT
Subject: CN=8919fb7ea4ff9e41d8b05772e92e89abc3c521e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:08:76:1d:bc:2f:52:77:b7:48:78:06:7b:13:
77:0d:65:93:37:32:0c:6d:6e:0d:1f:27:0f:7c:9c:
63:84:99:5e:3f:dc:ee:b0:c0:02:a8:60:d3:58:49:
09:b0:59:69:1d:1e:73:a1:6c:d7:04:e0:21:52:a0:
f4:d6:ba:d3:26:d1:bb:a2:a7:e7:55:8d:32:df:f9:
41:eb:f2:67:ca:dd:a1:e8:06:a9:ae:0d:e2:ba:e5:
75:3a:d0:f6:3d:cf:80:54:6e:25:13:c5:7c:9c:6a:
18:1d:71:1c:05:51:39:de:73:f9:d4:80:40:bb:9f:
02:a7:a1:68:8a:c4:2c:5b:22:81:c3:82:01:c9:24:
2d:b6:d6:d5:56:ce:81:c8:cf:b2:a0:1f:22:d2:cc:
31:ec:b7:22:3f:37:9f:bb:aa:5b:0f:3d:75:a8:44:
70:4f:ab:1a:cd:df:06:e7:5d:8a:2e:31:82:27:66:
1d:14:78:57:4f:64:b9:0a:40:22:f7:da:24:dd:49:
aa:2b:8a:db:49:3e:bd:44:72:4e:cc:f8:c0:75:dc:
99:4b:30:4e:ae:da:6e:34:ab:8c:d9:e4:13:41:44:
00:87:ed:14:8b:a1:b8:50:20:1b:3b:fd:d5:24:6e:
c0:ac:ae:61:bc:7d:3e:ba:ff:0c:07:47:73:f2:57:
84:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:19:FB:7E:A4:FF:9E:41:D8:B0:57:72:E9:2E:89:AB:C3:C5:21:E8
X509v3 Authority Key Identifier:
keyid:CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:fa:ce:1c:d1:6c:bf:9e:b7:65:8a:ca:f6:e7:18:12:84:38:
8c:a8:98:7a:2f:e6:92:31:04:07:12:2d:63:71:d9:df:a8:62:
b5:bc:e9:01:ec:b2:cf:a9:aa:a5:ac:93:8b:64:1f:cc:1f:6c:
3a:9d:cb:49:0e:20:16:d1:0a:e7:55:94:f3:4a:05:4f:cd:b3:
31:c1:e0:02:12:0c:ae:3a:cc:36:4a:53:5f:59:77:49:1e:c3:
a2:1b:62:da:e7:59:ab:0c:77:42:c6:35:87:b5:48:ac:80:de:
76:ac:6c:c6:0d:05:5e:bd:6a:e0:c7:37:80:c7:6e:82:4b:d6:
b2:96:6b:82:e3:0c:40:fb:f1:48:e6:bc:ba:06:a8:37:54:27:
70:8e:6c:a0:01:63:2c:c2:04:39:82:9f:c3:d8:25:17:f0:31:
81:78:bd:88:de:e0:e7:8c:14:07:db:ef:40:7d:67:b1:7e:38:
27:8f:97:ec:cc:be:be:56:1a:59:19:e2:80:62:2e:c4:03:29:
84:b9:3f:ec:50:8a:f7:24:65:7d:b4:f4:64:64:95:5c:6d:8b:
7b:0f:cc:f5:cf:27:39:6b:4b:8a:fe:a6:47:47:e0:f8:e0:4d:
7e:7a:d6:41:fc:80:8d:6d:a1:47:2a:60:fc:ba:b0:c1:b3:81:
d0:ea:76:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:41:29 2026 by rpki-client