Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
File: zmdqMChOFLAsxt2qA053VAbkYaY.mft (raw, json)
Hash identifier: 9u2cttm7xBDQlamw3oYZYt1q0sILLsopE+uBBvtKAZU=
Subject key identifier: FF:C1:C8:68:1E:65:DE:FB:ED:F0:A2:77:DD:D5:1B:BE:91:70:C6:36
Authority key identifier: CE:67:6A:30:28:4E:14:B0:2C:C6:DD:AA:03:4E:77:54:06:E4:61:A6
Certificate issuer: /CN=ce676a30284e14b02cc6ddaa034e775406e461a6
Certificate serial: 01A11F08944C20C7F2923F9BEC371834DB70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmdqMChOFLAsxt2qA053VAbkYaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
Manifest number: 0E2D
Signing time: Fri 09 Oct 2026 05:00:18 +0000
Manifest this update: Fri 09 Oct 2026 05:00:18 +0000
Manifest next update: Sat 10 Oct 2026 05:00:18 +0000
Files and hashes: 1: Q3WmyVx2hL_ulJlmWV4wBuMv3sY.roa (hash: qNBXvE4FodOwmoHeT/8KvY1e+YtkkhFfaz/pGiYECDk=)
2: zmdqMChOFLAsxt2qA053VAbkYaY.crl (hash: 7X0JbxfZc6o27wO9TkxyO8bPzDIpsubZPxIQXMwZWx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zmdqMChOFLAsxt2qA053VAbkYaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:08:94:4c:20:c7:f2:92:3f:9b:ec:37:18:34:db:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce676a30284e14b02cc6ddaa034e775406e461a6
Validity
Not Before: Oct 9 05:00:18 2026 GMT
Not After : Oct 10 05:00:18 2026 GMT
Subject: CN=ffc1c8681e65defbedf0a277ddd51bbe9170c636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b8:b6:c5:f5:d8:2b:be:96:4a:d3:ad:02:ee:
9e:66:c4:50:a4:ae:9d:5d:41:8c:93:3e:bb:bc:66:
51:de:0f:64:c9:42:73:19:60:39:6e:17:23:9c:e0:
e1:d2:2b:83:db:6d:25:b0:c1:9d:67:61:d1:65:b3:
88:d1:54:3c:4d:86:67:50:17:19:74:a8:db:7c:79:
f7:4d:33:62:87:3d:06:32:21:44:8a:17:30:b1:22:
c3:67:99:78:4a:d8:24:47:91:11:ec:fd:9c:7b:1e:
93:21:6b:80:be:44:06:61:98:ff:63:fc:2f:f5:40:
4d:f5:45:b5:d1:1b:bd:ca:8e:62:01:43:31:34:f3:
68:4e:cd:6c:a2:14:2f:92:c5:66:1c:54:fb:e3:90:
ae:fa:0f:5c:d5:65:4d:d9:de:42:c6:79:be:04:86:
1e:72:12:05:ec:24:77:53:a1:06:1d:d6:b3:50:34:
bc:c5:5f:69:e7:49:86:a4:a8:7d:ca:39:90:4a:90:
b0:28:2d:16:41:54:b5:1e:59:03:df:e1:5f:c0:1b:
a6:d1:fb:c4:9f:76:f9:b3:7d:1b:a1:fb:b4:9a:c9:
37:57:58:37:d8:43:30:69:80:a6:37:cb:b4:f0:78:
f4:12:1e:1d:61:7e:35:df:3a:c5:40:7e:bb:69:17:
8b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C1:C8:68:1E:65:DE:FB:ED:F0:A2:77:DD:D5:1B:BE:91:70:C6:36
X509v3 Authority Key Identifier:
keyid:CE:67:6A:30:28:4E:14:B0:2C:C6:DD:AA:03:4E:77:54:06:E4:61:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmdqMChOFLAsxt2qA053VAbkYaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:28:55:bb:75:a5:2a:0b:fe:34:58:19:f6:b8:c3:54:a8:55:
ec:da:f3:ff:9c:56:68:88:cd:3e:5d:67:a2:0b:fd:f9:41:7b:
7e:b6:f4:d3:a3:db:d5:90:06:a4:6d:24:32:a7:b0:e0:36:99:
d1:a3:8c:16:19:4d:ec:56:99:e2:d1:ac:7f:de:a7:a9:57:52:
a4:6c:5f:13:58:66:78:77:0b:d4:1a:a7:50:39:41:6b:ca:e1:
5c:7a:0a:a8:74:f0:07:bd:da:c5:0e:50:d0:ee:0b:1b:d0:ef:
b7:f1:1f:de:d0:0c:4b:70:16:f7:47:a7:9a:2f:50:eb:93:04:
4d:34:85:17:f5:6b:e6:01:e5:67:fb:c8:4d:bb:b4:76:54:51:
24:2a:3b:f2:80:31:2f:39:51:f9:da:a6:e4:12:0c:31:0b:11:
52:bb:0e:7b:35:a2:8c:2c:d3:66:72:43:de:c8:1d:07:0e:77:
d7:d1:c9:e2:50:ce:5c:3a:0b:f1:1c:0b:66:8e:d0:71:d2:86:
48:3d:e5:ea:08:f3:b0:64:f8:5a:b0:f5:1c:3f:e7:04:e1:9b:
da:ea:69:24:5f:99:fb:1c:5c:d5:eb:05:b8:fb:70:e7:ab:e4:
df:ac:6c:09:55:bc:4c:db:49:de:4c:00:ef:db:8b:81:e5:68:
9c:c4:2d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 18:47:33 2026 by rpki-client