Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
File: zQYCONBmjUWgQWGKxd92f1mgxK4.mft (raw, json)
Hash identifier: QPjeRUewYP3jhvYJmWLBUf+/GPeVAeednugao9r5o1s=
Subject key identifier: 1B:DC:DA:FE:3E:ED:65:22:5E:ED:37:62:CD:F8:5C:CF:35:13:20:39
Authority key identifier: CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE
Certificate issuer: /CN=cd060238d0668d45a041618ac5df767f59a0c4ae
Certificate serial: 01A0EBF91AB8FD906FE4C74111F9FD1C1637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
Manifest number: 110A
Signing time: Tue 29 Sep 2026 07:02:45 +0000
Manifest this update: Tue 29 Sep 2026 07:02:45 +0000
Manifest next update: Wed 30 Sep 2026 07:02:45 +0000
Files and hashes: 1: B0xeJ6OlptEzuwHkDKb2uLt1U_4.roa (hash: 0mnm00N6t5GT0+PQLMuChkiPF3X09nPjo6FNCsIiX9w=)
2: DHWxwhm5BstgQrswTpmXlNRqB68.roa (hash: U4MLvKfxIOpMtW85VWgOrj7JclXnEEYGlYHrxV44rNY=)
3: zQYCONBmjUWgQWGKxd92f1mgxK4.crl (hash: ImuaK0R7ENfE3h+9wv9jsnovHGeyknGlIgzgoeAVo3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 07:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:f9:1a:b8:fd:90:6f:e4:c7:41:11:f9:fd:1c:16:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd060238d0668d45a041618ac5df767f59a0c4ae
Validity
Not Before: Sep 29 07:02:45 2026 GMT
Not After : Sep 30 07:02:45 2026 GMT
Subject: CN=1bdcdafe3eed65225eed3762cdf85ccf35132039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c8:68:af:26:a0:ed:3a:b4:9e:35:c8:06:4a:
84:6e:1a:76:25:dd:ee:8d:60:52:14:27:64:e3:5a:
b6:0c:99:29:02:9b:f1:ff:a3:eb:15:99:ec:ff:d9:
93:1e:ae:e6:3a:35:0c:0b:12:b5:73:92:38:8a:3a:
9e:de:74:b7:a9:be:c0:05:fb:a9:85:5e:82:47:8c:
01:14:69:8c:94:ad:7f:28:41:89:96:b5:2b:1b:c3:
90:75:e4:7f:41:7a:53:86:48:94:46:e1:95:78:af:
85:d0:c7:77:a5:a3:2a:0d:11:ff:de:30:3e:07:71:
8f:d5:11:db:87:dc:13:7f:bb:13:4d:55:63:88:a6:
19:47:a8:3a:71:50:2a:51:13:e4:bf:25:1d:93:8f:
af:94:d6:93:21:ac:2a:31:ca:ee:13:76:9b:ba:9b:
0b:aa:d1:5c:3f:b6:47:7b:bb:57:91:96:3b:12:3a:
8d:76:c3:3f:a4:a8:8a:e1:44:df:50:c1:bc:c4:21:
c2:2f:43:6d:14:e9:a6:d4:62:54:2f:42:68:6e:9b:
74:4c:8e:82:b7:b4:24:e6:ab:98:7c:05:82:01:06:
d2:23:1c:d1:46:0a:c1:0b:b0:e2:9e:5e:be:c7:10:
8f:87:4f:d7:12:09:ec:4c:44:e6:07:66:63:d4:2c:
4e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DC:DA:FE:3E:ED:65:22:5E:ED:37:62:CD:F8:5C:CF:35:13:20:39
X509v3 Authority Key Identifier:
keyid:CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:66:51:bc:ea:00:52:c7:d1:36:90:24:68:2f:6c:fc:ca:75:
6e:58:6f:00:68:6d:08:c4:98:05:8c:e8:a1:c4:8d:cf:aa:4b:
84:f1:ca:95:07:65:86:e7:ff:28:43:6a:d7:01:48:c5:12:c0:
45:65:24:d6:fb:5d:be:c6:ae:03:8c:e2:9d:44:71:07:f9:0d:
72:0e:3d:af:97:9a:fa:b3:38:11:4b:3c:ee:16:02:2a:8c:ac:
a4:13:fd:98:ef:1e:55:c5:5f:38:db:04:e7:be:b0:f3:f3:f4:
ce:96:fe:8f:a9:75:22:f6:fc:90:30:c5:2c:04:91:45:09:e1:
71:4d:4f:71:b6:95:c1:37:75:79:a1:f8:f1:14:6f:ea:a1:18:
54:b7:b4:e0:12:fc:4b:17:8c:5b:41:da:80:06:cc:84:1d:ea:
3c:27:d6:25:e2:e1:de:9b:6e:bd:61:45:5b:87:2d:9a:50:d4:
84:3c:62:9c:55:49:c3:dc:ad:3b:a4:41:3e:a3:b5:e1:ac:34:
ee:e8:06:ea:4f:fd:46:4d:6f:b9:4b:f3:ac:f3:fb:fc:de:d3:
5d:64:9a:67:b1:e5:05:e6:77:8a:8f:19:4e:f9:36:8e:bd:a4:
a1:eb:83:1b:ce:c9:e3:3b:c8:88:9d:6f:b8:5b:4d:67:e9:d6:
d1:96:71:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:40:17 2026 by rpki-client