Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
File: mzQGmcjtlwqMntjBYgiPIGfDMlA.mft (raw, json)
Hash identifier: JfHV56LWhBdpkrS9O6iQPviMqtOPGn/+tsdgVPPRn7o=
Subject key identifier: 69:07:90:0F:33:E2:7F:C9:16:DF:2A:6B:91:D6:C1:6A:CE:14:94:18
Authority key identifier: 9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
Certificate issuer: /CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Certificate serial: 01A08AFAB98103C9FA17E7809EF11FA6144B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
Manifest number: 1A4C
Signing time: Thu 10 Sep 2026 11:01:22 +0000
Manifest this update: Thu 10 Sep 2026 11:01:22 +0000
Manifest next update: Fri 11 Sep 2026 11:01:22 +0000
Files and hashes: 1: 01uypEz92w-PEtDCDrkmRt7joB0.roa (hash: 6Ybp9mfbJVOd/HK8t41CSRVz5fBDwLWJNUbKMQQxn7A=)
2: Y5c5tHMCRfTtPuxnVvAxwpXSl28.roa (hash: NZdjkPEkUO+Uw6GFkmHziM3D1Wwqjp5gqekMma3ncw0=)
3: mzQGmcjtlwqMntjBYgiPIGfDMlA.crl (hash: ChTlxfjtd63vupZTTJ53/qR9lAn/MIgNXIOK1gWCsFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:b9:81:03:c9:fa:17:e7:80:9e:f1:1f:a6:14:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Validity
Not Before: Sep 10 11:01:22 2026 GMT
Not After : Sep 11 11:01:22 2026 GMT
Subject: CN=6907900f33e27fc916df2a6b91d6c16ace149418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d2:02:1b:31:b9:a3:2f:e0:24:5a:60:79:57:
fe:2a:21:bb:ac:cf:82:d7:cb:76:67:ea:4d:93:b4:
c6:81:d1:54:a9:f0:17:ae:3b:7d:4f:1b:24:b7:0f:
a8:5b:29:c5:ca:bb:ca:9a:1d:df:8a:54:5d:bd:cd:
04:6d:42:9f:ce:94:10:c7:c3:73:90:11:d1:a6:3d:
82:ce:77:4d:ce:38:eb:11:00:d5:df:23:80:21:38:
a4:4f:d5:d6:62:12:25:2e:7b:67:5c:13:c6:02:cb:
27:d8:66:a9:48:d7:f6:9c:74:e4:8a:70:51:99:48:
8e:c9:f6:b5:54:aa:28:5f:ee:8d:3e:2d:25:b5:93:
fa:08:2d:14:fc:1f:24:0b:36:75:fb:a1:90:5e:1b:
e3:21:b5:93:11:4e:3e:15:96:9b:68:9a:aa:15:fe:
82:4a:8e:c0:a8:0b:db:b1:67:a0:b7:f7:73:d5:09:
a2:b8:b8:c3:6f:d7:72:43:2d:7e:a7:53:8f:79:d9:
9e:0d:37:ee:7a:e2:fb:72:fd:23:13:55:e5:64:ca:
ca:0b:84:26:16:0b:f9:c5:05:fe:d7:f2:52:53:13:
45:c4:62:91:5d:d0:a3:46:e2:2f:b6:aa:57:37:c9:
12:c0:64:54:be:63:5a:16:a9:ad:8c:dc:84:4e:37:
8e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:07:90:0F:33:E2:7F:C9:16:DF:2A:6B:91:D6:C1:6A:CE:14:94:18
X509v3 Authority Key Identifier:
keyid:9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:20:10:6b:3b:21:1c:ff:de:c1:a8:24:b9:84:3c:8e:83:7e:
8d:bd:65:dc:18:ca:56:cd:92:ed:50:1c:b1:ab:e7:d8:b1:16:
24:d8:71:fa:9c:ae:e3:90:88:82:84:5d:91:9d:b4:1b:3f:c4:
14:dd:f5:d5:7c:80:e5:a1:3e:29:e7:0e:ab:ad:97:a9:d9:6f:
3a:73:13:e1:3a:f5:68:25:a7:84:0f:61:4d:f9:e2:45:21:7c:
72:1b:11:6d:5b:e3:31:b7:8b:d5:2c:6b:d1:47:6e:f6:5e:87:
7d:e7:5c:4b:bb:c6:95:84:15:2b:54:31:ff:68:63:a3:ff:e6:
3f:16:26:b1:1a:cd:ec:68:e6:8a:5b:36:d4:0f:ec:fa:3f:dc:
b1:c8:04:5d:cd:1e:46:7c:97:9d:f7:72:a5:70:3d:8c:1a:1e:
18:c8:c7:21:2a:ad:3c:62:06:cf:f6:a0:ae:32:df:35:df:c8:
8f:2a:8f:0f:2e:79:4d:6f:ad:33:53:09:4f:fd:65:b6:e4:17:
5c:77:2d:0e:f7:99:c6:3c:5f:ec:03:77:74:4a:4e:6d:a8:5c:
fd:5b:97:b2:94:09:3c:aa:9d:bf:92:38:f9:2d:20:9a:d7:15:
56:d9:a4:9b:57:d8:38:d8:e4:c9:1a:24:4b:54:ff:ca:c9:c0:
05:0d:a1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:02:55 2026 by rpki-client