Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
File: mzQGmcjtlwqMntjBYgiPIGfDMlA.mft (raw, json)
Hash identifier: zdL7dQkIf79fACIybPMu9DHcdtGoXGFq878y1xraR6U=
Subject key identifier: EC:6E:C5:FD:DD:36:49:06:12:1E:B9:61:B2:C9:1A:D4:D8:D0:2A:3A
Authority key identifier: 9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
Certificate issuer: /CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Certificate serial: 01A0DE05361C9CD0E6921A4EABE8A8A0F0E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
Manifest number: 1A77
Signing time: Sat 26 Sep 2026 14:01:18 +0000
Manifest this update: Sat 26 Sep 2026 14:01:18 +0000
Manifest next update: Sun 27 Sep 2026 14:01:18 +0000
Files and hashes: 1: 01uypEz92w-PEtDCDrkmRt7joB0.roa (hash: 6Ybp9mfbJVOd/HK8t41CSRVz5fBDwLWJNUbKMQQxn7A=)
2: Y5c5tHMCRfTtPuxnVvAxwpXSl28.roa (hash: NZdjkPEkUO+Uw6GFkmHziM3D1Wwqjp5gqekMma3ncw0=)
3: mzQGmcjtlwqMntjBYgiPIGfDMlA.crl (hash: MSA6/4Uq2hjJfdnS4OgP1MZDYfbmcg33+KAs3DBiY7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:05:36:1c:9c:d0:e6:92:1a:4e:ab:e8:a8:a0:f0:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Validity
Not Before: Sep 26 14:01:18 2026 GMT
Not After : Sep 27 14:01:18 2026 GMT
Subject: CN=ec6ec5fddd364906121eb961b2c91ad4d8d02a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:29:de:cb:4e:b1:53:ff:6c:fb:7c:18:5b:67:
79:e8:ff:ce:e1:f9:41:34:6c:7e:e1:24:52:e2:62:
a9:9e:3a:6e:5f:86:3a:ac:1e:31:97:82:8d:a0:53:
55:78:4d:78:49:44:f0:67:51:cd:c7:76:35:d0:3d:
6d:6c:4b:e3:a6:a3:4f:da:ad:2b:05:e1:49:49:43:
f6:b7:00:b3:81:8b:d1:34:f0:5f:60:cb:98:4a:d9:
f8:32:7e:a0:da:6a:b7:88:1c:45:09:9d:a4:81:ba:
e3:88:e9:72:1c:a1:73:f6:e9:1e:ed:73:fe:91:ea:
db:98:d4:57:20:f0:60:1d:2b:1a:a6:14:bc:54:0d:
d1:47:7a:2f:1e:7d:b5:49:b7:66:f6:82:d7:2f:ea:
3a:45:d9:bb:40:ff:eb:73:ec:28:22:95:6e:3c:8b:
b3:72:3e:31:6f:93:dd:20:22:55:ca:2f:03:ed:62:
3c:9b:06:ad:70:bc:c3:4d:9b:42:65:b6:ca:85:08:
40:a8:c5:f5:d5:95:26:dd:9f:c1:95:54:b5:bc:4a:
5d:46:ad:7f:ba:8b:99:fa:7c:62:1f:08:2c:0a:5d:
e5:56:d5:7f:29:63:f6:a5:a4:f8:c3:fd:de:c9:91:
f4:aa:87:8e:db:6d:ce:da:ee:60:fa:31:21:b6:3a:
87:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6E:C5:FD:DD:36:49:06:12:1E:B9:61:B2:C9:1A:D4:D8:D0:2A:3A
X509v3 Authority Key Identifier:
keyid:9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:a9:ec:3c:8a:71:1f:ee:ca:f3:da:00:1f:0f:f8:5f:d6:c4:
cf:77:a2:ee:eb:42:eb:f1:1a:4b:f7:8c:82:86:92:75:e5:23:
98:70:f2:08:e2:c4:f3:7f:85:7d:ac:27:18:dd:20:99:e7:0c:
86:d3:d6:13:8f:df:9e:56:41:a8:e9:84:30:c1:bc:19:65:11:
92:a1:ea:78:9e:c7:24:aa:8c:ed:c2:79:66:8e:2a:9a:6f:ef:
0c:8d:bd:07:53:88:27:ee:e8:8b:34:51:9c:73:f3:4d:7f:5b:
de:e9:14:77:02:59:19:1e:90:f7:f8:79:16:40:2a:da:44:d6:
9a:45:5f:d0:6f:ac:a7:53:9e:87:83:f7:64:f1:d6:86:22:9a:
d3:af:f2:0e:71:44:9f:66:73:30:06:cc:a6:76:24:9b:6b:7f:
2e:d4:bf:ac:55:45:95:03:9c:02:c4:10:d6:80:10:9d:28:07:
3a:86:e4:f6:9f:d0:50:33:0e:6e:4b:da:e4:9e:d0:22:4f:d2:
f6:0c:fb:ad:69:cc:68:35:ec:ff:f8:a0:5d:cc:4a:6e:3d:48:
bf:38:48:d0:8f:b7:0b:92:2a:79:1b:91:51:9d:c1:6f:95:f0:
85:b2:13:a2:df:20:17:4e:d3:19:6f:d4:65:1d:ed:27:3c:82:
e1:9f:2a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:40:56 2026 by rpki-client