Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
File: zmdqMChOFLAsxt2qA053VAbkYaY.mft (raw, json)
Hash identifier: lB3ERtWrhObOJrcvsytUrQ3aMF+jwODZp5NhvBKv2bk=
Subject key identifier: 46:97:1E:02:9E:AA:C3:33:A6:48:5D:E8:70:3A:33:1C:1D:E8:44:5F
Authority key identifier: CE:67:6A:30:28:4E:14:B0:2C:C6:DD:AA:03:4E:77:54:06:E4:61:A6
Certificate issuer: /CN=ce676a30284e14b02cc6ddaa034e775406e461a6
Certificate serial: 019F83B0F90010B32CDE1F6FB079DBEDFD06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmdqMChOFLAsxt2qA053VAbkYaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
Manifest number: 0D58
Signing time: Tue 21 Jul 2026 08:00:40 +0000
Manifest this update: Tue 21 Jul 2026 08:00:40 +0000
Manifest next update: Wed 22 Jul 2026 08:00:40 +0000
Files and hashes: 1: Q3WmyVx2hL_ulJlmWV4wBuMv3sY.roa (hash: qNBXvE4FodOwmoHeT/8KvY1e+YtkkhFfaz/pGiYECDk=)
2: zmdqMChOFLAsxt2qA053VAbkYaY.crl (hash: kdT1utFrEIrANkK/2pwwqamL1dOd918Q+pE5B5FmBv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zmdqMChOFLAsxt2qA053VAbkYaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 07:59:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:b0:f9:00:10:b3:2c:de:1f:6f:b0:79:db:ed:fd:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce676a30284e14b02cc6ddaa034e775406e461a6
Validity
Not Before: Jul 21 08:00:40 2026 GMT
Not After : Jul 22 08:00:40 2026 GMT
Subject: CN=46971e029eaac333a6485de8703a331c1de8445f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:cc:12:31:aa:cc:cd:8b:59:de:c0:ff:83:79:
59:8a:8c:44:73:97:c1:5f:13:7b:70:0e:10:74:40:
ca:f8:78:fb:a3:77:99:5f:84:bf:d0:c7:0b:fe:89:
34:8d:3a:c5:9c:5a:65:e9:82:47:0e:81:6b:74:1c:
32:ac:f1:0c:0a:e8:b4:2d:ed:4e:83:d4:31:85:7e:
a7:eb:ce:4b:ad:b5:99:66:b0:ae:30:9a:e7:92:0f:
a7:b4:a1:4f:95:37:11:cd:5f:df:74:4a:ad:a9:93:
d8:41:86:ff:4e:56:f0:1f:f1:f2:94:61:d7:22:68:
63:4b:49:c5:f1:8a:0f:d8:64:3e:f3:c4:3c:9e:91:
20:b6:ad:49:dc:d6:c3:d7:b8:c6:f2:c1:a7:9e:3b:
13:4c:82:36:d6:81:d8:de:93:a0:95:64:93:9d:46:
1d:9f:c1:90:20:8f:f0:52:37:93:35:ed:23:8e:e0:
b9:40:7a:37:75:88:ca:14:c4:bd:47:a1:01:46:cb:
5d:77:fd:e5:e7:1e:78:63:a0:0d:77:50:4c:02:4c:
30:9b:09:ea:9a:f6:81:6b:22:4b:56:a4:09:35:ce:
7f:63:e9:c6:9d:3f:50:d3:2e:2e:6c:3f:5e:d7:d7:
ea:c1:8b:56:78:a8:2a:fe:86:91:90:97:d3:02:56:
a4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:97:1E:02:9E:AA:C3:33:A6:48:5D:E8:70:3A:33:1C:1D:E8:44:5F
X509v3 Authority Key Identifier:
keyid:CE:67:6A:30:28:4E:14:B0:2C:C6:DD:AA:03:4E:77:54:06:E4:61:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmdqMChOFLAsxt2qA053VAbkYaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:a8:9a:39:41:5f:63:05:68:a3:42:36:21:7f:41:c5:9c:55:
03:5b:39:37:9c:54:84:4f:01:13:0b:cb:e3:69:3c:56:9b:20:
d3:85:3b:eb:ec:ae:46:63:16:5a:09:8f:0c:bc:d9:b8:fd:5f:
13:4a:cc:48:09:70:9c:c6:ec:7f:cc:6f:ac:4e:d4:c0:c7:bd:
c4:51:20:8d:95:7b:84:f5:10:c2:00:85:54:00:09:2d:c5:ae:
c3:6e:9b:3d:43:34:88:15:cc:a4:fb:b3:f8:61:3d:91:06:f2:
73:1d:16:d3:f2:18:0c:a6:b0:91:7b:82:7d:83:8f:db:99:46:
b1:92:ed:ba:27:99:88:fc:dd:d4:69:d3:72:22:40:b6:56:43:
7a:2b:57:50:53:4f:82:5d:a8:5f:84:a1:90:1c:3a:69:02:5e:
5d:48:47:11:4a:4b:99:ce:2e:6d:3b:6e:cd:99:f4:09:47:0b:
f0:97:bc:5a:ae:91:41:10:70:ab:c4:08:34:21:52:5a:8a:52:
ce:37:ec:e9:59:55:13:89:52:a3:dd:f5:98:99:51:83:c3:5e:
aa:17:c2:23:c7:b0:93:ec:fa:5e:59:ac:fd:fa:80:cb:eb:90:
e7:cd:a3:f0:e2:fc:fc:32:32:80:28:6a:62:8f:6f:12:7d:41:
d4:eb:73:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:07:26 2026 by rpki-client