Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
File: mzQGmcjtlwqMntjBYgiPIGfDMlA.mft (raw, json)
Hash identifier: SEojOJqT+DgiMRn9OllCowO5+ZYLmlqN828zCaG7xwI=
Subject key identifier: B9:36:43:8D:7B:11:D2:3C:B7:8D:BA:00:84:97:F6:93:BB:1F:D2:AE
Authority key identifier: 9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
Certificate issuer: /CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Certificate serial: 01A17A71DFFAB3040C6A6DA307733635C3E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
Manifest number: 1AC8
Signing time: Mon 26 Oct 2026 23:00:45 +0000
Manifest this update: Mon 26 Oct 2026 23:00:45 +0000
Manifest next update: Tue 27 Oct 2026 23:00:45 +0000
Files and hashes: 1: 01uypEz92w-PEtDCDrkmRt7joB0.roa (hash: 6Ybp9mfbJVOd/HK8t41CSRVz5fBDwLWJNUbKMQQxn7A=)
2: Y5c5tHMCRfTtPuxnVvAxwpXSl28.roa (hash: NZdjkPEkUO+Uw6GFkmHziM3D1Wwqjp5gqekMma3ncw0=)
3: mzQGmcjtlwqMntjBYgiPIGfDMlA.crl (hash: WKYI8GJf8Wnhlbu4aNXYBTZW7HGdbRL+lVpQCw4cewg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:71:df:fa:b3:04:0c:6a:6d:a3:07:73:36:35:c3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Validity
Not Before: Oct 26 23:00:45 2026 GMT
Not After : Oct 27 23:00:45 2026 GMT
Subject: CN=b936438d7b11d23cb78dba008497f693bb1fd2ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3a:97:c0:a4:76:23:8f:bb:c7:fd:25:7f:77:
73:8f:81:4d:b6:95:d3:1f:d5:fe:2e:24:ff:a8:16:
00:69:27:00:d4:bf:77:49:05:5a:c3:f5:dc:4d:8c:
99:b5:18:4e:29:05:bc:46:6b:0e:5f:cd:5c:05:3f:
a0:94:91:3d:42:49:ef:1b:8c:83:1d:13:15:c8:5d:
36:b2:7e:b2:d4:2c:c9:d9:20:f3:66:24:28:04:b3:
04:02:e5:59:62:46:01:73:92:f2:2e:45:4a:19:25:
8c:3a:bb:05:28:b7:d7:84:ae:b4:a8:7f:ed:36:10:
f7:88:bf:2c:d8:d2:86:ce:2a:b7:71:f0:3b:97:32:
f2:f6:03:98:ab:a6:f3:31:58:0b:b5:44:90:df:fe:
fa:f5:b6:21:a4:7d:03:62:31:57:d0:84:bc:ad:6b:
7f:0d:c0:19:32:2e:66:ee:58:cb:64:70:2a:27:cc:
8e:33:e8:8d:32:4d:fa:df:14:0e:6f:a7:4f:fb:9c:
5c:dd:d7:74:8d:cd:96:ae:76:93:22:2a:22:22:80:
ac:e2:9d:f7:a3:11:98:22:cc:32:21:98:62:40:50:
66:a5:82:83:ce:b2:3c:2e:1a:db:8d:f9:93:e9:28:
45:82:af:a7:a0:36:30:c0:8b:56:b5:8d:70:db:1c:
86:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:36:43:8D:7B:11:D2:3C:B7:8D:BA:00:84:97:F6:93:BB:1F:D2:AE
X509v3 Authority Key Identifier:
keyid:9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:6e:c6:76:a7:f7:e0:54:e5:67:fb:8a:96:d4:69:e8:fa:e2:
e4:9a:da:07:25:bb:b0:1f:36:b4:b5:b6:8d:2e:bd:d3:7d:1d:
b0:27:23:86:49:b9:f9:56:ac:21:ff:40:f9:17:b1:60:6b:55:
9c:2e:47:0d:29:9d:9a:30:7a:a9:4b:a0:a1:cd:39:6c:9b:7a:
e1:46:a8:39:ca:df:c0:34:6a:4f:f1:53:97:57:43:e2:9e:8d:
42:f4:64:36:b9:49:47:be:14:05:c2:20:79:01:52:d6:43:17:
48:c5:e7:37:2b:b2:a5:c3:4e:4e:17:52:69:e2:6d:ed:1c:76:
5d:9f:55:0e:b4:b7:7e:80:15:c4:ac:46:b2:78:0a:0f:3e:56:
8f:d3:fc:45:46:b8:7d:48:84:87:b1:93:6f:d7:d1:a7:a0:ba:
a9:f8:8f:3d:e5:e0:a3:07:34:61:29:9a:f2:e5:23:23:18:4d:
c3:07:c5:c9:6b:ae:6d:d6:55:73:03:00:60:82:28:3f:e0:c6:
d3:f8:f6:b9:36:07:6a:c1:5f:fd:d2:5b:49:99:b1:f4:31:1f:
4f:39:87:ff:58:e4:47:d2:2c:a8:ed:ae:63:fe:18:9b:66:48:
98:9d:1c:92:bc:78:4a:75:4e:7c:6f:01:9a:3d:d9:b7:a6:aa:
7d:a9:7f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:37:04 2026 by rpki-client