Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
File: zmdqMChOFLAsxt2qA053VAbkYaY.mft (raw, json)
Hash identifier: MgxzVQ8iCLUXF0oWfKXS7MSc9CdiXSWsFUZ0bLtD4lc=
Subject key identifier: B2:38:85:5E:4C:14:F0:FC:08:FD:43:69:3F:F0:5D:D2:CD:42:4E:5D
Authority key identifier: CE:67:6A:30:28:4E:14:B0:2C:C6:DD:AA:03:4E:77:54:06:E4:61:A6
Certificate issuer: /CN=ce676a30284e14b02cc6ddaa034e775406e461a6
Certificate serial: 01A196C4B2372239EB24F4EE23CF356ECE46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmdqMChOFLAsxt2qA053VAbkYaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
Manifest number: 0E6B
Signing time: Sun 01 Nov 2026 11:00:35 +0000
Manifest this update: Sun 01 Nov 2026 11:00:35 +0000
Manifest next update: Mon 02 Nov 2026 11:00:35 +0000
Files and hashes: 1: Q3WmyVx2hL_ulJlmWV4wBuMv3sY.roa (hash: qNBXvE4FodOwmoHeT/8KvY1e+YtkkhFfaz/pGiYECDk=)
2: zmdqMChOFLAsxt2qA053VAbkYaY.crl (hash: k1K+7Kc2KDBOSto+KscTD7p8BtMLqCzSxBwFn+taG48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zmdqMChOFLAsxt2qA053VAbkYaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:96:c4:b2:37:22:39:eb:24:f4:ee:23:cf:35:6e:ce:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce676a30284e14b02cc6ddaa034e775406e461a6
Validity
Not Before: Nov 1 11:00:35 2026 GMT
Not After : Nov 2 11:00:35 2026 GMT
Subject: CN=b238855e4c14f0fc08fd43693ff05dd2cd424e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:37:1c:fc:dc:e2:73:45:75:b0:b5:3e:55:32:
86:d8:bf:e8:a4:a6:4c:1e:71:08:5d:c7:8f:68:ae:
af:f2:1a:57:40:42:a0:60:45:2c:57:37:80:50:10:
9e:d4:30:e4:fd:28:75:69:1d:10:03:b4:2d:da:15:
af:8e:8f:0c:7e:e9:ac:50:e7:05:92:0e:17:e7:25:
bb:fe:49:6a:d7:30:49:ba:fb:f9:72:aa:79:e3:f0:
ff:94:14:aa:fb:f9:b9:ef:f2:b1:09:99:cc:12:35:
04:dc:f2:84:64:d0:61:4c:08:16:5d:d6:cc:59:1a:
e8:73:16:7e:f7:33:49:a0:e2:08:7e:82:5f:1d:2e:
50:ea:6d:e1:53:6c:d7:73:b0:1f:9b:3e:95:b0:40:
e9:5e:d0:54:e3:d2:d4:c9:60:8b:f3:71:d3:40:a7:
5d:d0:91:38:a3:13:77:9b:ab:f3:a3:8d:5e:5f:87:
a8:cf:84:36:d0:b8:5b:ad:a5:76:bb:99:7c:c9:e2:
28:b2:0e:19:34:54:78:7c:39:aa:cd:f7:be:d0:95:
7c:16:56:7c:1d:fc:3a:e0:2b:e2:49:a8:5c:44:5b:
2d:db:18:84:b5:fc:31:50:af:d9:42:af:2f:0f:20:
89:08:d5:a2:76:ff:c6:ce:15:6c:38:da:8e:a3:b4:
a9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:38:85:5E:4C:14:F0:FC:08:FD:43:69:3F:F0:5D:D2:CD:42:4E:5D
X509v3 Authority Key Identifier:
keyid:CE:67:6A:30:28:4E:14:B0:2C:C6:DD:AA:03:4E:77:54:06:E4:61:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmdqMChOFLAsxt2qA053VAbkYaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b4:7c:42:f5:04:2c:67:a9:a5:e3:55:4e:41:4b:98:4d:e4:
89:17:44:92:f0:a4:4d:b8:6d:59:c0:24:be:ca:7f:86:37:85:
4a:55:2c:94:57:db:f6:0d:c0:49:9f:73:59:0b:24:78:18:46:
94:99:f8:d0:4c:da:87:68:a0:c7:0d:d2:fe:69:25:ed:1c:02:
d1:5f:ee:f8:e6:f5:fa:53:8a:5e:c9:9f:ee:c1:3c:5a:4a:d3:
4a:d5:47:88:66:dc:0d:eb:b8:2e:70:ef:b4:45:e9:9d:1f:ae:
5e:d8:75:19:8e:46:22:33:12:19:67:b2:f6:8a:80:5d:d9:4b:
1c:c8:88:c1:a9:c1:70:4e:91:52:f6:d7:03:d8:92:42:55:2b:
c9:d6:d9:25:4e:a7:95:d9:a6:44:37:13:46:73:ea:3b:5f:a6:
de:30:57:92:c9:67:d8:ef:f4:35:e4:ce:ff:d2:bc:ed:3a:6e:
e1:47:3c:01:d5:bd:a7:1a:e6:ea:07:ac:57:21:64:c1:e9:d7:
93:59:37:c8:c3:61:3f:4a:89:80:cf:32:0c:b8:81:66:90:b5:
56:49:10:1a:cb:9a:1a:76:06:58:c9:12:84:4b:50:2a:1d:f3:
29:88:e0:37:5f:72:18:93:2f:d0:94:65:b3:a0:06:86:6b:74:
28:37:1a:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGWxLI3IjnrJPTuI881bs5GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNjc2YTMwMjg0ZTE0YjAyY2M2ZGRhYTAzNGU3NzU0MDZl
NDYxYTYwHhcNMjYxMTAxMTEwMDM1WhcNMjYxMTAyMTEwMDM1WjAzMTEwLwYDVQQD
EyhiMjM4ODU1ZTRjMTRmMGZjMDhmZDQzNjkzZmYwNWRkMmNkNDI0ZTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jcc/Nzic0V1sLU+VTKG2L/opKZM
HnEIXcePaK6v8hpXQEKgYEUsVzeAUBCe1DDk/Sh1aR0QA7Qt2hWvjo8MfumsUOcF
kg4X5yW7/klq1zBJuvv5cqp54/D/lBSq+/m57/KxCZnMEjUE3PKEZNBhTAgWXdbM
WRrocxZ+9zNJoOIIfoJfHS5Q6m3hU2zXc7Afmz6VsEDpXtBU49LUyWCL83HTQKdd
0JE4oxN3m6vzo41eX4eoz4Q20LhbraV2u5l8yeIosg4ZNFR4fDmqzfe+0JV8FlZ8
Hfw64CviSahcRFst2xiEtfwxUK/ZQq8vDyCJCNWidv/GzhVsONqOo7SpqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLI4hV5MFPD8CP1DaT/wXdLNQk5dMB8GA1UdIwQY
MBaAFM5najAoThSwLMbdqgNOd1QG5GGmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem1kcU1DaE9GTEFzeHQycUEwNTNWQWJrWWFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9iODYwNWEtMjEzNi00Mzg5LWE0MDUt
ZWE2MDY1NzA5NDZhLzEvem1kcU1DaE9GTEFzeHQycUEwNTNWQWJrWWFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9iODYwNWEtMjEzNi00Mzg5LWE0MDUtZWE2MDY1NzA5NDZh
LzEvem1kcU1DaE9GTEFzeHQycUEwNTNWQWJrWWFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI7R8QvUE
LGeppeNVTkFLmE3kiRdEkvCkTbhtWcAkvsp/hjeFSlUslFfb9g3ASZ9zWQskeBhG
lJn40Ezah2igxw3S/mkl7RwC0V/u+Ob1+lOKXsmf7sE8WkrTStVHiGbcDeu4LnDv
tEXpnR+uXth1GY5GIjMSGWey9oqAXdlLHMiIwanBcE6RUvbXA9iSQlUrydbZJU6n
ldmmRDcTRnPqO1+m3jBXksln2O/0NeTO/9K87Tpu4Uc8AdW9pxrm6gesVyFkwenX
k1k3yMNhP0qJgM8yDLiBZpC1VkkQGsuaGnYGWMkShEtQKh3zKYjgN19yGJMv0JRl
s6AGhmt0KDcaqw==
-----END CERTIFICATE-----
Generated at Sun Nov 1 17:49:57 2026 by rpki-client