Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
File: zoqNQOQ3rfSs182zjgQCR3ouUaY.mft (raw, json)
Hash identifier: DYHcHnUOhwhdLedpsPtABvFJChACzrswfTReWBRWsyA=
Subject key identifier: B4:6E:55:E6:1D:D2:3D:3A:32:C6:5F:BE:66:6D:C1:53:49:93:B6:16
Authority key identifier: CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6
Certificate issuer: /CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6
Certificate serial: 019F31825D8670CD25BF0990232375EEBC1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
Manifest number: 0CA8
Signing time: Sun 05 Jul 2026 09:00:54 +0000
Manifest this update: Sun 05 Jul 2026 09:00:54 +0000
Manifest next update: Mon 06 Jul 2026 09:00:54 +0000
Files and hashes: 1: 9Pp2n7Q5bS4sKqtdoxR4D7Rtxoo.roa (hash: mD/l5zdsFJGNZ8p29GMjIaEXus0bg3O0b3+7D4zGWpI=)
2: VJ76kPFRh3Ww8Is5M704WVV-vPA.roa (hash: yBUtgXGi1nLg+3akssVacnV8r6cvgHcXwp/SrlxIpHQ=)
3: zoqNQOQ3rfSs182zjgQCR3ouUaY.crl (hash: IAK0qJwYJs/1ZiTqxqIzqFGGALCfMwVXjrndxfwSS7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Jul 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:31:82:5d:86:70:cd:25:bf:09:90:23:23:75:ee:bc:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6
Validity
Not Before: Jul 5 09:00:54 2026 GMT
Not After : Jul 6 09:00:54 2026 GMT
Subject: CN=b46e55e61dd23d3a32c65fbe666dc1534993b616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b1:e1:0c:9a:18:98:81:94:1c:c0:14:96:a0:
0f:46:84:d4:b4:05:1b:3c:13:f7:34:63:86:70:ff:
1b:fe:aa:11:7f:46:29:d7:ff:4d:f7:d4:c4:22:29:
00:7d:5a:28:49:42:bb:13:82:e2:79:24:a5:1a:6e:
9d:a0:1d:e0:d9:4f:0b:2b:19:bc:6a:4f:28:11:57:
29:11:8d:62:56:db:d7:b4:52:89:49:b0:e1:14:dc:
56:72:d2:7b:25:e8:86:89:42:f8:ca:fa:12:2c:f9:
4b:a8:75:00:9c:4f:41:48:80:34:cf:bc:3d:05:f2:
31:44:7c:2f:2d:cd:47:fd:80:9c:fe:91:80:21:f9:
a7:ca:f3:e7:66:57:e1:98:c2:06:14:91:2e:3a:36:
0a:d0:30:90:62:7c:1f:36:6e:b1:c0:2d:d7:2c:d2:
3b:6f:1c:17:93:12:68:b4:8f:c0:9b:56:a6:b6:97:
51:e3:02:ec:fc:90:c7:32:80:72:ac:b4:5e:59:68:
d3:e2:7b:84:91:33:3a:dd:f9:3f:91:5a:24:89:41:
8b:6f:02:6d:db:56:35:18:c1:2d:bd:52:51:13:d7:
06:ef:ba:19:ed:e8:d5:3e:e2:7a:73:ea:c0:cb:e0:
d6:cb:a1:40:b1:46:65:67:18:8f:5f:71:74:06:65:
f2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:6E:55:E6:1D:D2:3D:3A:32:C6:5F:BE:66:6D:C1:53:49:93:B6:16
X509v3 Authority Key Identifier:
keyid:CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:29:7d:a0:67:cf:60:cd:a1:7f:c8:a8:6a:0d:8b:ce:d3:65:
2a:fc:f9:2d:0c:04:4c:c0:76:96:b6:8c:7e:50:f6:02:ef:f5:
5f:01:f3:8e:19:74:9c:e1:e9:6b:54:c9:9c:9a:d0:cb:df:79:
4e:19:53:fe:fd:8a:83:43:8e:23:01:1b:2d:e0:34:7b:ba:07:
06:80:27:4e:8b:be:c2:70:5e:43:93:7d:b2:8c:c5:50:f9:5c:
9b:51:26:71:fd:bb:17:24:28:bd:08:22:27:12:7e:f5:9f:f7:
07:dd:57:70:39:2c:4b:96:46:b5:87:8e:5a:a0:d4:5b:dc:71:
df:c3:30:2c:c3:42:f1:01:b5:03:97:fd:68:1a:2b:bc:ba:6a:
60:98:c6:36:95:e8:b5:61:ef:d3:8c:7a:ee:49:3b:0f:73:cc:
c0:63:90:6d:80:be:02:81:70:19:2d:32:be:86:82:b1:12:0e:
e0:19:15:5f:ce:53:0d:c6:98:45:4f:ab:ab:7a:64:27:57:9b:
91:d4:99:82:9b:f2:3a:e0:7a:34:4f:36:cb:9d:f7:52:87:70:
b9:ed:51:23:f6:64:40:8b:7c:7a:ec:8f:83:19:c1:f5:df:1f:
07:66:0a:2d:95:58:40:e6:88:92:b0:1e:c6:61:cb:95:3b:7c:
96:0a:d0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 17:45:42 2026 by rpki-client