Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
File: zoqNQOQ3rfSs182zjgQCR3ouUaY.mft (raw, json)
Hash identifier: N5WP/N/aIQCtfBM3YcKJqGL+BI38Ny7a5yYrolvXXmc=
Subject key identifier: A9:8B:B9:4B:85:E9:58:CD:FD:4B:4C:E2:B2:E9:B8:F2:F0:37:23:61
Authority key identifier: CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6
Certificate issuer: /CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6
Certificate serial: 019ED4CFAAD50254C7E25479F4943F4A2B3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
Manifest number: 0C78
Signing time: Wed 17 Jun 2026 09:00:39 +0000
Manifest this update: Wed 17 Jun 2026 09:00:39 +0000
Manifest next update: Thu 18 Jun 2026 09:00:39 +0000
Files and hashes: 1: 9Pp2n7Q5bS4sKqtdoxR4D7Rtxoo.roa (hash: mD/l5zdsFJGNZ8p29GMjIaEXus0bg3O0b3+7D4zGWpI=)
2: VJ76kPFRh3Ww8Is5M704WVV-vPA.roa (hash: yBUtgXGi1nLg+3akssVacnV8r6cvgHcXwp/SrlxIpHQ=)
3: zoqNQOQ3rfSs182zjgQCR3ouUaY.crl (hash: TE3/WgF3TGgsbXJ44H1ex3iI8tZxvwv0YpgnmyH0Fto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:cf:aa:d5:02:54:c7:e2:54:79:f4:94:3f:4a:2b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6
Validity
Not Before: Jun 17 09:00:39 2026 GMT
Not After : Jun 18 09:00:39 2026 GMT
Subject: CN=a98bb94b85e958cdfd4b4ce2b2e9b8f2f0372361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f8:83:c5:27:63:a3:c6:7c:6b:79:c1:6c:cb:
d2:36:5d:4a:ae:bb:b0:29:a3:96:11:d6:fb:d5:22:
ee:88:5f:45:ed:21:52:07:9f:a0:0f:0f:97:75:c5:
ed:2a:af:c7:11:01:56:0b:53:d5:5f:9d:43:5e:4e:
0f:9e:b6:7c:af:23:af:f0:f2:1e:c0:89:af:19:c8:
15:a2:d3:84:fc:fc:81:d2:a5:e6:7d:c7:10:a7:28:
84:19:79:26:10:55:73:8a:ab:19:02:84:dc:b7:46:
28:a2:68:d9:ac:84:e0:2e:84:92:06:50:97:27:e3:
e7:d9:3c:dc:f3:5e:90:de:3d:6b:66:d1:8a:c5:80:
67:a4:b0:5c:85:66:29:4b:1c:1f:b5:7d:75:df:20:
5f:5f:0f:be:c5:21:50:92:bb:cd:eb:1e:f2:3e:3c:
83:b8:20:a6:3a:25:5b:06:6d:8f:2f:d8:09:c5:0e:
43:82:2c:d3:5e:24:4f:ca:30:c2:0a:c0:81:be:48:
a8:b6:65:a1:38:ae:fb:a5:4d:02:5f:0c:5c:8e:06:
b9:e3:85:3d:af:19:ae:7e:c9:0f:1c:64:48:eb:c0:
85:9f:d2:a4:05:2f:0a:2f:df:78:e6:97:b6:6d:6e:
77:fc:6d:aa:33:a3:f6:ce:d9:76:85:df:4a:92:c0:
a1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8B:B9:4B:85:E9:58:CD:FD:4B:4C:E2:B2:E9:B8:F2:F0:37:23:61
X509v3 Authority Key Identifier:
keyid:CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:45:66:7b:5f:16:44:45:a9:47:6c:b0:95:77:e8:b1:89:4b:
1c:65:ef:1b:01:e4:5a:3e:95:c8:4e:20:3b:2d:2b:74:9f:08:
71:dd:a7:d0:3a:bb:72:84:cb:8d:b2:f0:b5:8e:dc:04:f5:36:
db:c7:5d:43:2d:3a:12:88:3d:c4:08:a7:a6:fe:61:9b:0e:6a:
e5:39:8b:c7:9d:8b:fa:40:dc:a8:c3:39:17:de:e0:d1:a4:64:
10:c1:39:d8:af:9d:b4:8e:5f:dd:63:d1:99:6d:dd:24:ad:af:
fe:95:f7:dd:3e:e8:10:a4:d0:21:66:23:0a:29:a0:5e:0b:46:
f5:6a:b0:2c:2e:8f:23:d9:0a:54:07:62:e0:9b:0b:c1:6a:0d:
0c:85:38:bb:79:ac:41:29:39:9f:a1:df:54:c5:55:cc:a2:60:
77:bd:20:f9:f2:8c:d2:26:12:ec:ef:b2:28:88:0e:b6:b1:c2:
a7:86:27:d1:42:10:86:6a:35:f2:97:35:cf:41:3a:8c:32:4f:
0c:8b:b2:91:4a:7b:6d:ee:b3:08:31:ab:f8:96:8b:a9:b7:22:
a6:ab:38:aa:cf:5b:a6:5d:d3:c5:b0:97:cb:82:a0:f4:d5:5c:
0b:57:45:3c:b1:3a:97:a2:3a:64:e1:ab:7b:6b:e4:a2:e4:cd:
e7:a8:6e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 17:48:03 2026 by rpki-client