Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
File: zmdqMChOFLAsxt2qA053VAbkYaY.mft (raw, json)
Hash identifier: lAW7+f2lvcKHN6vNE2WyaKKyASMn2H0hP+SAuaLfDt8=
Subject key identifier: 3C:A8:EF:2F:88:3B:39:CF:5D:F7:64:26:AF:80:7F:50:04:FD:59:B7
Authority key identifier: CE:67:6A:30:28:4E:14:B0:2C:C6:DD:AA:03:4E:77:54:06:E4:61:A6
Certificate issuer: /CN=ce676a30284e14b02cc6ddaa034e775406e461a6
Certificate serial: 01A13823D65B13BF78E00C00F99FCD94E431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmdqMChOFLAsxt2qA053VAbkYaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
Manifest number: 0E3A
Signing time: Wed 14 Oct 2026 02:00:34 +0000
Manifest this update: Wed 14 Oct 2026 02:00:34 +0000
Manifest next update: Thu 15 Oct 2026 02:00:34 +0000
Files and hashes: 1: Q3WmyVx2hL_ulJlmWV4wBuMv3sY.roa (hash: qNBXvE4FodOwmoHeT/8KvY1e+YtkkhFfaz/pGiYECDk=)
2: zmdqMChOFLAsxt2qA053VAbkYaY.crl (hash: AOibphiPLA1WZhyYLTx9mk7V40rXbBVEUJh+9Y0Vsis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zmdqMChOFLAsxt2qA053VAbkYaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:23:d6:5b:13:bf:78:e0:0c:00:f9:9f:cd:94:e4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce676a30284e14b02cc6ddaa034e775406e461a6
Validity
Not Before: Oct 14 02:00:34 2026 GMT
Not After : Oct 15 02:00:34 2026 GMT
Subject: CN=3ca8ef2f883b39cf5df76426af807f5004fd59b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:06:35:a5:bb:9f:8b:c5:bd:e1:55:bc:44:d9:
9a:91:f7:2e:ef:dd:9f:9d:8c:f4:8e:d2:54:4a:dc:
a2:fd:d0:19:33:e1:10:4c:39:a7:78:67:bf:00:49:
e6:c1:0d:28:31:a7:02:46:b0:07:8a:38:ec:61:8f:
9a:db:00:58:fc:7e:b7:a0:9d:a3:c8:fd:ac:c1:cc:
43:e1:44:27:8e:71:4d:3b:8f:0e:2d:63:4b:fe:d1:
ea:f4:f8:03:d8:1a:e6:f3:fd:40:1e:38:cd:a5:d6:
b2:63:ef:55:bc:86:32:5b:06:5a:e0:06:90:ec:0e:
da:3b:a2:cf:b5:42:53:e1:42:dd:b6:f0:bb:db:7b:
89:d6:e1:4b:6e:66:ea:22:e3:fb:33:0f:db:7f:c8:
e5:e5:40:96:26:b2:f9:e7:ed:87:c6:66:13:18:e3:
38:4b:0b:6b:d0:cb:c6:8b:de:64:f8:b5:d0:d4:82:
20:b5:8a:6e:55:4f:15:ab:f4:14:ff:11:61:4c:f9:
b7:fa:8d:a1:44:c7:d4:ed:50:f6:4d:c5:ac:88:41:
05:d2:eb:8e:d7:f1:52:45:e0:5e:39:64:79:89:f7:
28:10:b2:3e:79:7b:90:16:aa:01:d8:b3:ac:f5:39:
17:83:b7:9d:88:d9:a0:6d:99:83:3d:23:00:a9:39:
9e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A8:EF:2F:88:3B:39:CF:5D:F7:64:26:AF:80:7F:50:04:FD:59:B7
X509v3 Authority Key Identifier:
keyid:CE:67:6A:30:28:4E:14:B0:2C:C6:DD:AA:03:4E:77:54:06:E4:61:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmdqMChOFLAsxt2qA053VAbkYaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:80:42:73:f6:2d:81:dd:aa:e8:ab:b6:86:76:2a:6d:ad:04:
ee:12:52:4b:81:02:87:33:31:4d:e8:62:5c:bc:04:e1:74:43:
38:fe:e3:52:51:0f:66:b4:2f:47:c6:d5:b6:b1:a0:d4:dd:de:
f4:33:50:6a:fe:5e:72:dc:2f:74:75:bc:00:f8:58:29:de:cf:
20:27:9f:c7:02:59:b2:43:96:c0:77:81:10:03:35:fb:87:92:
01:50:15:d4:0f:82:40:81:29:5e:1f:b1:4c:ee:bd:3c:c2:b5:
eb:b6:9c:26:dd:11:98:df:23:df:65:b7:bf:eb:ad:75:ec:be:
17:4c:10:cf:f5:71:8b:1b:16:7b:09:d5:7e:e9:23:18:30:23:
ec:30:9c:9d:96:c0:75:9a:bc:ee:4a:27:7e:7e:9f:f2:0c:a8:
59:3f:f6:a6:69:2b:77:fe:ed:30:45:ef:5f:8f:30:25:ea:8f:
5e:c5:78:2e:4f:2c:e5:8c:98:d9:79:77:5b:ff:66:d8:6e:36:
31:f3:ee:0e:b0:43:f1:5d:78:e9:51:54:53:57:69:52:88:4d:
74:53:35:83:9a:78:02:a0:d8:05:da:d1:c2:39:a7:24:ff:6f:
4f:f4:e1:ca:68:b1:75:ca:47:8c:e5:88:1a:75:29:49:c5:43:
97:9e:1f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 13:11:39 2026 by rpki-client