Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
File: zmdqMChOFLAsxt2qA053VAbkYaY.mft (raw, json)
Hash identifier: m8762usI/TxlmObclTQqT7T001komQSbo3fHa3SQQAc=
Subject key identifier: 2C:34:CF:53:9D:46:C5:A5:5A:47:F0:3E:A1:C4:60:58:AD:30:2B:DE
Authority key identifier: CE:67:6A:30:28:4E:14:B0:2C:C6:DD:AA:03:4E:77:54:06:E4:61:A6
Certificate issuer: /CN=ce676a30284e14b02cc6ddaa034e775406e461a6
Certificate serial: 01A06D5DE4FEAFDBFEFA5783F9D2E4EA43A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmdqMChOFLAsxt2qA053VAbkYaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
Manifest number: 0DD1
Signing time: Fri 04 Sep 2026 17:01:04 +0000
Manifest this update: Fri 04 Sep 2026 17:01:04 +0000
Manifest next update: Sat 05 Sep 2026 17:01:04 +0000
Files and hashes: 1: Q3WmyVx2hL_ulJlmWV4wBuMv3sY.roa (hash: qNBXvE4FodOwmoHeT/8KvY1e+YtkkhFfaz/pGiYECDk=)
2: zmdqMChOFLAsxt2qA053VAbkYaY.crl (hash: fZGpltHGhLX5usBUDfCDQkOQAISdyZ2lzBatMF4t3c0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zmdqMChOFLAsxt2qA053VAbkYaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:5d:e4:fe:af:db:fe:fa:57:83:f9:d2:e4:ea:43:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce676a30284e14b02cc6ddaa034e775406e461a6
Validity
Not Before: Sep 4 17:01:04 2026 GMT
Not After : Sep 5 17:01:04 2026 GMT
Subject: CN=2c34cf539d46c5a55a47f03ea1c46058ad302bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bb:51:39:10:b8:d4:a4:7c:c0:a7:3d:c5:a9:
ad:f4:a6:7c:dc:05:48:04:5e:18:c2:1f:63:9c:a6:
a2:27:ac:59:0a:3d:25:a2:8e:93:0d:90:1a:6d:10:
c1:a7:07:dc:b0:29:4b:66:37:a9:53:e3:7d:13:49:
f8:02:9a:bb:82:55:72:b4:01:e2:36:56:d9:f6:2b:
9f:71:b4:1d:82:31:80:cb:ff:56:47:eb:00:21:0f:
fa:9b:4f:04:9a:9f:1e:29:8e:3c:b6:e4:3e:c5:de:
4d:c3:7d:16:62:23:d6:0f:28:da:ac:28:e7:35:bb:
2f:6c:99:e2:ed:17:a2:59:95:4b:77:7a:e0:3f:46:
d6:e5:c8:f1:c6:b3:1e:c1:1c:cc:31:cd:e6:c0:16:
4c:f6:5e:1a:fb:59:8c:f9:b9:0d:c1:8e:1c:b1:6c:
38:85:a4:66:b0:90:82:d3:40:ad:63:c7:91:75:51:
25:6c:8f:87:ac:44:d5:c6:a8:86:8f:5a:e1:fb:a5:
41:9c:eb:d9:c6:2c:8c:62:d0:2c:1b:f3:38:7f:22:
ae:87:36:92:b6:81:2e:bc:ac:85:13:e2:aa:9a:b0:
c0:76:e6:37:c2:17:df:42:db:b7:17:48:d0:7b:82:
1d:80:8a:51:4c:08:d6:8d:22:3d:0f:b4:f9:32:63:
b2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:34:CF:53:9D:46:C5:A5:5A:47:F0:3E:A1:C4:60:58:AD:30:2B:DE
X509v3 Authority Key Identifier:
keyid:CE:67:6A:30:28:4E:14:B0:2C:C6:DD:AA:03:4E:77:54:06:E4:61:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmdqMChOFLAsxt2qA053VAbkYaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:32:59:65:66:84:6a:50:25:e4:9e:ad:d5:73:e7:73:ee:24:
41:33:43:60:9a:4c:1f:e1:e2:02:0d:8e:5c:3a:bf:1b:76:cf:
7f:72:90:b0:50:e7:12:bd:7d:28:ff:87:1e:19:2e:3a:50:98:
56:57:f0:29:20:d7:c6:f5:ab:ff:7f:70:d4:84:7c:8f:88:b0:
a5:1e:97:bc:b8:43:f1:9d:35:15:85:44:20:0e:76:fc:0e:59:
13:53:0d:62:ef:30:8d:65:c3:58:b4:cf:b3:a5:dd:7e:79:81:
a3:d6:53:12:78:d9:41:30:d4:4a:e2:1b:7f:1c:f2:89:fb:24:
34:9f:79:b9:5a:62:31:b2:28:bd:65:3b:37:c5:60:ba:2a:1b:
b5:e2:0f:4e:6d:37:4e:9f:7c:b3:f2:02:1b:52:36:b0:10:3e:
5f:7a:4f:c2:be:97:70:1f:38:62:96:37:e5:41:63:a9:e1:40:
c2:87:ba:dc:d7:24:3d:b4:f3:fb:2d:1d:3b:66:af:e1:8c:52:
3e:d7:0d:83:3e:24:e2:38:2d:60:75:c3:b1:91:74:21:f3:f1:
1c:26:70:87:5b:ff:b3:48:f4:31:44:92:95:5a:3a:e0:89:86:
af:aa:d1:f5:96:f1:56:2a:eb:89:ab:0c:25:d2:dd:2a:84:ce:
94:31:e0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:02:03 2026 by rpki-client