Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
File: zoqNQOQ3rfSs182zjgQCR3ouUaY.mft (raw, json)
Hash identifier: G1AMoPygZFvv1Lg1Gw9LjDtcX32/gAmcfj1w/gttD5o=
Subject key identifier: 43:47:FD:94:55:13:19:BE:56:42:85:AD:31:8C:85:45:85:51:D1:FB
Authority key identifier: CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6
Certificate issuer: /CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6
Certificate serial: 019D397787BEA4C9A0BB5F1A29C3F073A3DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
Manifest number: 0BA3
Signing time: Sun 29 Mar 2026 12:00:27 +0000
Manifest this update: Sun 29 Mar 2026 12:00:27 +0000
Manifest next update: Mon 30 Mar 2026 12:00:27 +0000
Files and hashes: 1: 9Pp2n7Q5bS4sKqtdoxR4D7Rtxoo.roa (hash: mD/l5zdsFJGNZ8p29GMjIaEXus0bg3O0b3+7D4zGWpI=)
2: VJ76kPFRh3Ww8Is5M704WVV-vPA.roa (hash: yBUtgXGi1nLg+3akssVacnV8r6cvgHcXwp/SrlxIpHQ=)
3: zoqNQOQ3rfSs182zjgQCR3ouUaY.crl (hash: aw7XgGm12f7E5brPILDq3US58/4GlecAEp7hOs5lIhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:87:be:a4:c9:a0:bb:5f:1a:29:c3:f0:73:a3:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6
Validity
Not Before: Mar 29 12:00:27 2026 GMT
Not After : Mar 30 12:00:27 2026 GMT
Subject: CN=4347fd94551319be564285ad318c85458551d1fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ed:9f:8b:b5:9f:e2:6f:86:e8:0f:5a:cd:13:
6d:97:a6:bc:d2:a7:14:f9:28:70:db:10:53:6a:62:
86:5c:49:4e:af:7a:03:97:46:30:9a:4e:3f:8b:86:
94:e0:3b:70:82:d2:bb:e4:ea:19:27:e8:08:df:4d:
e7:bb:ad:3d:f1:16:ec:b6:a8:d6:ab:9a:d6:28:0b:
4c:26:0e:c6:59:c4:36:cf:35:fe:46:e9:53:28:5a:
8e:cf:00:f3:c7:c6:b4:4c:2d:47:04:72:69:48:79:
63:09:57:c4:cf:02:0e:22:a0:a9:8a:99:ce:7c:fc:
2f:1f:ee:92:a2:95:03:eb:db:2a:9a:3c:e6:60:2b:
fc:e4:47:91:7c:18:79:7e:fd:ca:1b:c8:0a:44:fe:
62:c7:95:04:90:c4:b1:fc:d0:7b:4a:e2:06:70:e1:
1b:12:36:78:c2:c6:0a:6b:8e:3e:46:f2:c4:f8:fb:
fd:95:91:b9:dd:7f:39:47:6f:50:f3:a0:79:7f:ab:
d3:4a:fb:6b:74:92:92:dc:f5:ba:2c:b6:29:21:e5:
12:d7:87:ca:c9:48:d2:8e:85:bf:64:96:7a:9d:47:
28:d5:11:8b:2f:57:6d:a2:dd:3d:a6:e2:3f:06:3b:
f2:3f:49:85:d4:a9:36:0c:c7:1a:46:46:1c:d7:b9:
f2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:47:FD:94:55:13:19:BE:56:42:85:AD:31:8C:85:45:85:51:D1:FB
X509v3 Authority Key Identifier:
keyid:CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c7:e8:20:5e:cb:75:af:4e:08:bd:2d:89:27:7c:df:0a:41:
5e:8b:cc:c0:99:f2:55:c4:78:d0:fa:53:ab:d1:b0:0f:16:5e:
21:be:ec:c7:b7:88:c9:18:79:e8:61:8a:ad:a9:ba:39:d5:ec:
c3:80:98:ed:54:c7:44:6b:b6:d6:3d:11:f4:ca:76:65:5e:ec:
93:44:a5:b4:86:f2:b0:44:00:32:dd:76:27:f7:ac:61:76:de:
b6:c6:bc:6c:da:8a:d6:1c:4c:be:3a:0b:47:03:fd:8d:0e:12:
c5:f0:ac:14:d9:df:fe:f5:95:74:66:67:cb:27:b2:1e:22:7c:
6f:29:3d:f7:96:5a:80:e1:31:ef:34:a4:bf:1f:19:ba:fe:cd:
bd:9b:d2:58:47:cc:71:b3:d6:e3:ad:9c:c2:cf:ed:ba:f9:38:
c2:a7:b8:bc:dd:22:da:77:47:86:e7:ff:b4:92:58:d8:06:d2:
7a:8d:fa:b7:10:63:ec:bc:46:b6:34:d7:01:05:45:93:c8:f8:
02:5e:fa:a2:b6:83:ab:60:fd:ad:b5:25:21:83:5f:3c:6b:fd:
2d:a2:89:60:6d:e6:04:b9:ef:16:88:fe:d1:26:b0:20:20:d9:
a4:dd:5f:c9:b7:0d:d2:5c:2e:7c:7f:85:28:04:ca:a2:dc:82:
c8:ed:83:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:50:34 2026 by rpki-client