Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
File: zoqNQOQ3rfSs182zjgQCR3ouUaY.mft (raw, json)
Hash identifier: R/wsnhzHD+JXWkkvSv0Ommr/TuaGq0rdZKPeHJvEO4o=
Subject key identifier: 3D:50:DF:4B:54:8E:9A:4A:15:6C:71:12:02:2A:7B:D6:8D:06:9F:9A
Authority key identifier: CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6
Certificate issuer: /CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6
Certificate serial: 019D9BF59792CF3D064BF4B67A8149157386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
Manifest number: 0BD6
Signing time: Fri 17 Apr 2026 15:00:56 +0000
Manifest this update: Fri 17 Apr 2026 15:00:56 +0000
Manifest next update: Sat 18 Apr 2026 15:00:56 +0000
Files and hashes: 1: 9Pp2n7Q5bS4sKqtdoxR4D7Rtxoo.roa (hash: mD/l5zdsFJGNZ8p29GMjIaEXus0bg3O0b3+7D4zGWpI=)
2: VJ76kPFRh3Ww8Is5M704WVV-vPA.roa (hash: yBUtgXGi1nLg+3akssVacnV8r6cvgHcXwp/SrlxIpHQ=)
3: zoqNQOQ3rfSs182zjgQCR3ouUaY.crl (hash: UMw1bHBR1hmLHnJhPSBHzlokvUP5kpQAhhfQN4K/GKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:97:92:cf:3d:06:4b:f4:b6:7a:81:49:15:73:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6
Validity
Not Before: Apr 17 15:00:56 2026 GMT
Not After : Apr 18 15:00:56 2026 GMT
Subject: CN=3d50df4b548e9a4a156c7112022a7bd68d069f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9e:32:97:9e:4b:3d:88:e0:61:bc:f6:6e:c5:
76:85:f1:f7:25:2e:35:32:5b:7a:47:01:0b:f8:a3:
17:48:1f:a5:97:39:b9:4b:b4:4c:c0:94:ca:34:fc:
e8:d3:e7:52:b7:8b:f3:7e:d8:b7:ec:e2:00:81:d8:
07:19:b8:e5:44:ed:9e:1d:d1:cd:23:fe:d2:44:ef:
63:2c:13:cd:9f:90:e1:82:a9:90:90:17:17:6c:a9:
7d:36:ec:26:40:e4:43:0d:00:d2:a2:66:21:d9:26:
ff:ff:1c:7c:64:73:d1:1d:e0:50:61:72:2e:d2:13:
d2:c9:7e:47:b0:11:2d:b5:e6:2a:29:9d:e0:0c:26:
d7:7b:ba:3e:e3:0b:fa:18:95:3b:c3:8a:ac:68:be:
3b:94:93:63:8c:e1:e0:f7:ef:51:ab:c5:44:f8:0f:
5e:a4:eb:1f:69:3d:51:59:1f:51:53:f6:65:a3:e9:
38:3a:57:2d:20:71:f4:57:b4:bc:99:35:5c:8b:3a:
cb:9a:2e:88:b6:ce:7b:82:3a:5c:a2:22:9d:5b:75:
bc:33:d2:ba:c1:1a:19:03:18:eb:0b:2d:41:e9:e4:
e6:92:9f:49:97:57:f1:53:87:62:43:b0:48:6f:85:
fd:9d:2d:bc:5e:19:ba:01:b9:49:2b:37:06:e5:39:
b3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:50:DF:4B:54:8E:9A:4A:15:6C:71:12:02:2A:7B:D6:8D:06:9F:9A
X509v3 Authority Key Identifier:
keyid:CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:4a:2f:44:d5:e2:b1:fb:55:af:af:74:b3:f5:12:af:dc:69:
a8:d1:d4:d6:eb:8f:db:3f:11:e8:ab:d9:45:2e:ba:70:96:b6:
46:30:d7:5b:cf:14:bf:37:ff:24:42:f3:13:50:f2:7c:7e:7d:
10:ae:d3:d1:8a:bd:d8:77:ac:47:2f:0d:65:1e:04:ff:b0:06:
f5:2e:75:ec:a0:26:eb:a6:0c:ce:e6:50:cc:89:0a:2f:17:09:
ed:8e:fd:2e:af:f9:1b:fa:b3:83:7c:43:69:f8:29:9e:1f:08:
e0:ed:1e:8e:8a:95:4a:aa:90:15:83:ef:00:9a:b1:4b:75:42:
bc:a0:ca:4f:2b:bd:50:a5:d1:be:f7:bc:81:99:8f:a6:f7:93:
86:a3:cb:27:66:71:83:36:f0:19:78:7e:5e:15:59:85:7b:43:
52:e7:bb:5e:07:8e:8a:cb:eb:9e:be:70:0b:61:e4:e9:b0:ff:
b6:1f:46:c8:e6:2f:a4:a5:66:c8:2b:b4:60:57:f0:fb:dd:48:
a1:1f:97:3b:02:79:2d:0f:ff:e3:33:5c:e4:89:8a:73:a9:b5:
e8:4a:b0:e2:cc:34:8e:4e:85:69:4f:98:d2:23:be:a4:20:80:
5d:f3:20:f8:6a:97:99:8f:5c:1c:1a:e0:fd:66:bf:a3:e2:c0:
2a:06:8e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:17:53 2026 by rpki-client