Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
File: zoqNQOQ3rfSs182zjgQCR3ouUaY.mft (raw, json)
Hash identifier: 5D8ZzzQTUNXLZqVhdH3eUrUOxYLY6YcDosUhmeon6Rs=
Subject key identifier: 48:F5:3E:14:B2:37:34:14:56:FA:56:D0:B3:12:3F:91:B4:14:A7:A5
Authority key identifier: CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6
Certificate issuer: /CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6
Certificate serial: 01A13D80EC3CA26C88BB506B120BF5D2646F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
Manifest number: 0DB8
Signing time: Thu 15 Oct 2026 03:00:21 +0000
Manifest this update: Thu 15 Oct 2026 03:00:21 +0000
Manifest next update: Fri 16 Oct 2026 03:00:21 +0000
Files and hashes: 1: 9Pp2n7Q5bS4sKqtdoxR4D7Rtxoo.roa (hash: mD/l5zdsFJGNZ8p29GMjIaEXus0bg3O0b3+7D4zGWpI=)
2: OBLMUGZooru5WuUse6LJOkuTz70.roa (hash: xJrMc/yTNWmmgImV90G4WNUvy9d7gyIEGZPZ8Hiw5LY=)
3: VJ76kPFRh3Ww8Is5M704WVV-vPA.roa (hash: yBUtgXGi1nLg+3akssVacnV8r6cvgHcXwp/SrlxIpHQ=)
4: zoqNQOQ3rfSs182zjgQCR3ouUaY.crl (hash: QRifq4vu9qu6xg5WCznpRhZ4D6uKppjXYkxj/Lg393Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:80:ec:3c:a2:6c:88:bb:50:6b:12:0b:f5:d2:64:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6
Validity
Not Before: Oct 15 03:00:21 2026 GMT
Not After : Oct 16 03:00:21 2026 GMT
Subject: CN=48f53e14b237341456fa56d0b3123f91b414a7a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:19:b5:ce:20:40:0f:6e:a8:ae:5d:dd:6f:91:
74:3e:ba:1d:76:a5:95:1f:32:97:7b:b5:9d:97:8e:
50:fc:e6:40:53:2d:11:92:36:c9:3e:8a:41:c7:ea:
6b:a7:6c:ab:98:b4:95:aa:3a:fd:eb:13:ba:2e:da:
0e:ca:fc:94:ee:92:2c:ed:43:c2:a9:1f:a7:93:04:
96:ea:24:e2:26:6d:cd:6b:4f:c7:24:7e:d6:19:99:
9c:d9:0c:e5:7d:ae:06:ba:63:1e:5c:88:3e:81:5e:
85:dc:4a:89:c1:f2:12:56:ac:d6:3f:dd:a2:ca:5c:
d1:d1:ad:d8:19:2f:a8:d6:6d:11:27:48:43:d1:98:
27:76:e5:95:0e:61:3a:69:cd:c9:ee:46:d1:cc:76:
13:a8:4b:bc:c4:d2:dc:56:f2:10:0f:89:75:d9:ab:
60:92:c9:a8:0c:a2:f2:4e:b0:1e:ef:5a:ec:9e:21:
2d:c5:4a:41:5a:43:a3:3e:ff:ff:d7:49:7e:7b:85:
7c:ef:6e:fa:2a:c6:92:ef:53:56:bd:42:09:71:2c:
9d:77:0c:04:32:87:d8:75:73:e8:62:02:72:08:7a:
5e:a3:c5:9c:1f:d9:45:33:f3:05:f2:d7:e1:ed:b4:
51:1b:f3:16:68:74:fa:15:7a:9e:b2:c4:cc:ad:ec:
60:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F5:3E:14:B2:37:34:14:56:FA:56:D0:B3:12:3F:91:B4:14:A7:A5
X509v3 Authority Key Identifier:
keyid:CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:96:16:96:35:11:2b:e3:d2:65:26:6e:c4:a2:cc:1a:0d:3b:
6c:9f:63:69:d8:e4:b6:89:2c:fd:a1:6f:0f:c0:d7:e9:e1:43:
f5:9a:48:6c:32:80:dd:ff:f5:81:74:45:47:ff:c6:4d:54:6b:
98:16:5b:28:0c:c3:ba:d3:da:f0:63:9a:67:c8:5d:21:10:0d:
fb:e5:2a:85:ca:9f:58:47:1b:30:6a:ac:0c:12:16:f4:8a:76:
ce:05:dc:61:b8:b5:c0:ee:59:12:87:0e:c7:94:35:e8:d3:f4:
f5:ef:cc:07:24:70:ba:57:0f:7b:73:e2:68:1c:d9:21:4c:e0:
0a:05:75:88:46:48:38:85:bd:29:1d:71:52:32:09:26:60:d5:
0f:9a:6d:d5:71:f1:80:a5:e8:a7:6a:60:ab:16:c5:0e:d1:2f:
1e:79:ae:5f:8a:eb:a1:68:19:6d:26:75:57:3e:b5:0f:70:0a:
d7:b3:92:01:b4:26:96:df:5a:53:40:b5:42:fa:80:cc:af:a4:
ab:97:19:fb:fd:33:51:7b:22:25:ed:15:f1:99:28:62:27:a7:
c4:a5:ea:1a:26:53:e7:e1:9d:16:0b:ce:e8:09:54:f6:9d:c0:
92:aa:33:cf:6c:3c:85:6b:ba:7f:9d:bf:ca:8b:fe:05:d3:10:
35:ab:4f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:56:49 2026 by rpki-client