Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
File: zoqNQOQ3rfSs182zjgQCR3ouUaY.mft (raw, json)
Hash identifier: N6d25K7ljSa5iqr954t4WnaEWPIK5AzkQTS+b02RFBc=
Subject key identifier: FB:7E:7B:71:2B:BC:49:0D:8D:BB:C4:DE:17:CE:DC:07:25:7A:FB:6B
Authority key identifier: CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6
Certificate issuer: /CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6
Certificate serial: 01A13F700EC2C308225CA63999C062D0C052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
Manifest number: 0DB9
Signing time: Thu 15 Oct 2026 12:01:10 +0000
Manifest this update: Thu 15 Oct 2026 12:01:10 +0000
Manifest next update: Fri 16 Oct 2026 12:01:10 +0000
Files and hashes: 1: 9Pp2n7Q5bS4sKqtdoxR4D7Rtxoo.roa (hash: mD/l5zdsFJGNZ8p29GMjIaEXus0bg3O0b3+7D4zGWpI=)
2: OBLMUGZooru5WuUse6LJOkuTz70.roa (hash: xJrMc/yTNWmmgImV90G4WNUvy9d7gyIEGZPZ8Hiw5LY=)
3: VJ76kPFRh3Ww8Is5M704WVV-vPA.roa (hash: yBUtgXGi1nLg+3akssVacnV8r6cvgHcXwp/SrlxIpHQ=)
4: zoqNQOQ3rfSs182zjgQCR3ouUaY.crl (hash: xpkATvMco661+rZWIGwXDJ0Nt5F8njaAR7WnpyfgrF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:0e:c2:c3:08:22:5c:a6:39:99:c0:62:d0:c0:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6
Validity
Not Before: Oct 15 12:01:10 2026 GMT
Not After : Oct 16 12:01:10 2026 GMT
Subject: CN=fb7e7b712bbc490d8dbbc4de17cedc07257afb6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:24:52:63:d8:b3:cf:d6:24:0b:16:96:de:5d:
4d:de:86:90:95:60:9d:11:f8:9d:16:b9:ae:7f:1f:
11:31:2e:83:d4:21:d9:f7:d6:43:81:48:a5:7c:1c:
98:a1:2b:f7:25:bf:b5:49:d9:79:32:2c:b8:8c:6f:
cd:4c:5c:6a:c4:7f:51:3a:b1:60:31:65:ff:2b:01:
86:94:fc:50:b8:7a:f4:d8:69:70:08:12:3f:93:0c:
b8:a0:f4:e5:16:95:b4:90:2e:bc:ab:4c:5e:89:e0:
b4:75:27:a7:ef:87:25:2d:6c:07:d5:c4:58:77:59:
fe:12:82:f7:45:ae:fb:56:b7:ea:d0:f4:8a:52:61:
95:13:d5:7b:79:78:58:23:a2:63:ce:04:de:67:69:
17:f0:2b:e2:e5:45:01:fa:65:07:f3:f7:8a:52:58:
12:02:c8:0a:86:08:8e:ec:5c:73:66:5d:57:c6:9d:
a0:cc:96:c4:d2:dd:10:c5:50:80:4c:68:e7:a5:57:
a0:7e:44:ba:55:0d:ef:4a:fd:99:06:80:f8:2c:36:
c1:a5:94:f7:ee:f7:34:1d:c9:26:7f:08:cb:bd:1b:
71:0a:34:71:35:9f:96:ac:af:14:ce:43:9e:85:03:
2f:92:7e:bc:72:28:2a:41:4d:ec:61:65:fa:99:d6:
50:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7E:7B:71:2B:BC:49:0D:8D:BB:C4:DE:17:CE:DC:07:25:7A:FB:6B
X509v3 Authority Key Identifier:
keyid:CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:1c:cf:21:ef:54:c4:c7:92:e5:d1:87:e9:2d:e8:98:c8:18:
dd:6b:ab:32:8f:be:5b:4f:2e:96:f2:7a:e0:df:1c:c5:e7:e5:
6e:47:aa:de:26:d0:51:ba:f5:e2:e4:24:8f:b4:4f:d1:77:22:
b8:f6:ee:3b:e9:63:38:a6:52:5a:35:b1:37:fa:7f:e2:ea:2a:
53:57:e0:75:2d:81:7f:7d:77:02:56:a5:aa:a3:52:5b:6d:f2:
b9:cd:5d:0c:71:af:07:01:f1:ab:ca:89:8c:56:2b:c8:ce:c9:
77:ae:50:53:9a:6e:b1:2d:59:9a:8d:67:be:62:dd:6b:66:d7:
6c:cf:8a:e4:4f:21:8e:b4:2f:de:d4:e2:4d:12:93:6d:86:f8:
21:b6:09:dd:68:0e:8c:3d:ef:a8:a0:41:a7:8a:26:53:17:d8:
8c:53:db:34:7e:c4:76:18:2f:aa:e1:ab:55:a8:ea:eb:27:fc:
f2:2a:25:64:2d:f6:9e:7e:fe:6f:53:be:59:96:35:33:14:b5:
56:a0:cc:f5:0d:3e:f3:53:1f:0b:ee:35:b7:4a:e1:59:48:42:
48:3e:7e:37:26:68:23:64:d1:e6:4e:1c:d8:f8:d2:c0:8b:0b:
89:5f:83:df:bf:37:25:15:4d:9c:7a:2c:ca:d2:e5:8f:03:80:
01:10:38:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:27:21 2026 by rpki-client