Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
File: zmdqMChOFLAsxt2qA053VAbkYaY.mft (raw, json)
Hash identifier: bsRlvn30FmC1rgXl4u0wTnUYND6NTb/kf0arvjh1RE8=
Subject key identifier: F3:51:3E:03:E9:47:11:6A:F5:B6:2C:7A:36:2C:96:AD:9C:92:FB:3A
Authority key identifier: CE:67:6A:30:28:4E:14:B0:2C:C6:DD:AA:03:4E:77:54:06:E4:61:A6
Certificate issuer: /CN=ce676a30284e14b02cc6ddaa034e775406e461a6
Certificate serial: 019F932405594A7D07EEDAD5CC1DFBF5D662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmdqMChOFLAsxt2qA053VAbkYaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
Manifest number: 0D60
Signing time: Fri 24 Jul 2026 08:00:39 +0000
Manifest this update: Fri 24 Jul 2026 08:00:39 +0000
Manifest next update: Sat 25 Jul 2026 08:00:39 +0000
Files and hashes: 1: Q3WmyVx2hL_ulJlmWV4wBuMv3sY.roa (hash: qNBXvE4FodOwmoHeT/8KvY1e+YtkkhFfaz/pGiYECDk=)
2: zmdqMChOFLAsxt2qA053VAbkYaY.crl (hash: LnVIC/lFjIjJ/+oOTpBXL/Zlx5/TUJxbj+37Io0a4CM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zmdqMChOFLAsxt2qA053VAbkYaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:05:59:4a:7d:07:ee:da:d5:cc:1d:fb:f5:d6:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce676a30284e14b02cc6ddaa034e775406e461a6
Validity
Not Before: Jul 24 08:00:39 2026 GMT
Not After : Jul 25 08:00:39 2026 GMT
Subject: CN=f3513e03e947116af5b62c7a362c96ad9c92fb3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d8:7c:11:17:e6:ea:1c:e7:74:55:87:b8:88:
17:e4:9a:ce:7b:06:cb:c5:f3:b9:20:1f:0c:f3:9c:
31:f3:02:6c:47:3e:be:69:51:10:1a:90:f8:62:95:
f1:9f:db:53:48:c3:db:ef:11:de:73:e1:35:b8:f1:
ad:4e:b3:4d:b5:6a:e4:cc:43:b1:d7:d0:62:ad:4b:
d0:e9:ff:fc:d8:90:07:ec:22:f0:68:69:c4:76:b1:
10:39:3b:5c:ed:d8:0a:8f:38:42:a0:c8:07:f3:25:
ef:1c:cb:5c:8d:50:19:0f:68:9b:f7:99:c8:12:bb:
98:4f:af:c5:fa:b7:51:68:01:df:78:95:66:66:39:
03:d3:f9:b4:58:b6:f7:6a:2b:02:97:9d:ca:84:b2:
fc:61:f1:7a:d5:f6:f3:1e:a0:2a:d9:f0:52:b3:18:
5f:d3:3d:77:b1:79:db:f8:77:8b:46:ec:ad:2d:b5:
ae:ab:56:8f:71:4b:1b:33:82:e4:d8:c7:25:0f:76:
2e:43:7b:47:ea:f8:c4:f0:86:e7:11:b3:1d:a0:3e:
b5:29:20:ae:77:bc:f7:f8:bf:63:db:b9:b8:3f:b7:
80:0a:e2:27:4b:17:2f:27:04:f0:c5:b0:41:86:8e:
5d:92:16:c5:1f:2f:c5:b6:93:32:79:42:c6:1d:5a:
66:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:51:3E:03:E9:47:11:6A:F5:B6:2C:7A:36:2C:96:AD:9C:92:FB:3A
X509v3 Authority Key Identifier:
keyid:CE:67:6A:30:28:4E:14:B0:2C:C6:DD:AA:03:4E:77:54:06:E4:61:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmdqMChOFLAsxt2qA053VAbkYaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:58:c1:7e:81:de:66:b7:0c:09:2a:09:ef:9e:76:62:68:1e:
4f:61:de:99:17:5e:b6:cf:04:b2:95:64:13:2f:03:60:6b:7f:
5c:f4:5f:7f:0c:b1:48:92:57:ee:e0:46:41:8d:c0:b3:88:d0:
be:fa:a9:3f:74:eb:11:1c:71:a4:42:61:c6:70:59:58:22:b5:
30:bb:d6:5b:03:62:3d:83:b6:ee:4c:be:e2:75:12:3f:32:56:
91:22:75:74:61:73:18:2a:f4:86:ee:c3:a3:aa:3b:77:13:72:
67:19:ec:4a:09:84:4c:81:77:e9:9b:57:00:cc:6e:2d:4a:2b:
33:ed:e8:15:1d:11:ee:54:1b:fe:0d:5f:e4:9c:76:69:7f:d2:
2b:79:7c:0d:06:d1:83:12:fd:b1:6e:95:cf:66:ce:03:e4:05:
ba:91:ae:0f:3a:19:7f:ce:97:15:df:41:c4:d9:03:7d:09:a0:
26:63:19:c6:45:75:d0:a1:1f:d7:3b:37:36:9a:38:17:c1:3d:
b9:85:14:f9:bc:fa:91:68:c3:9e:dd:c9:ef:44:01:84:18:2b:
51:cb:18:02:8a:27:66:83:bd:9e:fd:d4:e6:0e:5b:09:f3:cb:
68:76:c1:53:71:a3:24:58:bd:0f:4e:ce:dc:4a:90:47:6a:78:
ff:df:b7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:56:09 2026 by rpki-client