Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
File: zmdqMChOFLAsxt2qA053VAbkYaY.mft (raw, json)
Hash identifier: OE9fcJqIf30AJ1vewwgBYvI07t0hp3jCGUnovgNRGHM=
Subject key identifier: EC:26:D0:8A:CD:E7:DE:B1:E4:3A:AB:55:24:A8:E5:9D:2F:1E:13:DB
Authority key identifier: CE:67:6A:30:28:4E:14:B0:2C:C6:DD:AA:03:4E:77:54:06:E4:61:A6
Certificate issuer: /CN=ce676a30284e14b02cc6ddaa034e775406e461a6
Certificate serial: 01A11D1A30859391FC8B8D3449DDCE4A1549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmdqMChOFLAsxt2qA053VAbkYaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
Manifest number: 0E2C
Signing time: Thu 08 Oct 2026 20:00:17 +0000
Manifest this update: Thu 08 Oct 2026 20:00:17 +0000
Manifest next update: Fri 09 Oct 2026 20:00:17 +0000
Files and hashes: 1: Q3WmyVx2hL_ulJlmWV4wBuMv3sY.roa (hash: qNBXvE4FodOwmoHeT/8KvY1e+YtkkhFfaz/pGiYECDk=)
2: zmdqMChOFLAsxt2qA053VAbkYaY.crl (hash: Jc65jefUzBfrTWgLz4RnkD6uFG3S0CvCyN9rXlPosac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zmdqMChOFLAsxt2qA053VAbkYaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1d:1a:30:85:93:91:fc:8b:8d:34:49:dd:ce:4a:15:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce676a30284e14b02cc6ddaa034e775406e461a6
Validity
Not Before: Oct 8 20:00:17 2026 GMT
Not After : Oct 9 20:00:17 2026 GMT
Subject: CN=ec26d08acde7deb1e43aab5524a8e59d2f1e13db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0e:f2:0a:b8:46:89:6b:f6:86:cb:3c:18:8b:
fe:6f:1d:b6:92:9b:d6:75:76:10:a2:05:da:db:79:
9c:e5:a2:27:2e:e7:f7:ea:b3:d2:d6:a9:aa:30:eb:
0f:b4:35:fe:8a:ac:32:72:36:b3:95:f3:eb:8f:a5:
71:af:e1:4f:1a:28:0e:7d:46:36:fa:ba:3d:49:e7:
c2:e9:52:22:b2:52:62:bf:fa:3f:9a:2f:25:04:22:
45:18:fd:b2:ab:63:54:aa:ba:99:bc:f5:fd:29:19:
ab:98:45:e8:87:c6:5a:03:94:88:7c:c9:66:b2:61:
2f:e9:bc:ef:00:b6:c2:46:a9:ec:93:5b:b0:58:96:
ec:47:c6:a7:dc:81:ee:a6:ba:6a:61:a0:55:8a:00:
01:1b:c5:4b:f5:59:be:9c:d1:d0:ed:74:6d:56:24:
02:17:07:ca:6d:e3:02:f6:d8:c2:07:99:a9:ed:b1:
88:62:29:28:48:3d:64:86:88:ae:2b:a0:dc:66:25:
d6:5f:c1:48:cb:38:69:b0:b8:99:51:cc:2f:32:9a:
34:11:a6:fa:ed:8f:57:6f:de:17:71:23:56:48:5a:
54:f7:92:01:33:9d:59:0e:91:61:11:11:3a:47:c6:
c2:ff:c8:29:75:75:91:18:d5:ad:e2:13:be:bc:08:
1a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:26:D0:8A:CD:E7:DE:B1:E4:3A:AB:55:24:A8:E5:9D:2F:1E:13:DB
X509v3 Authority Key Identifier:
keyid:CE:67:6A:30:28:4E:14:B0:2C:C6:DD:AA:03:4E:77:54:06:E4:61:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmdqMChOFLAsxt2qA053VAbkYaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:00:67:5f:93:05:58:f3:df:fd:15:97:80:1a:00:4d:50:ca:
1f:8b:45:43:09:25:a7:83:19:28:61:55:a1:50:97:8c:f6:7c:
c8:b2:76:d5:d1:c0:6c:3a:9a:2f:95:b6:5f:db:f1:13:30:f7:
c9:86:ff:c5:88:02:07:17:9b:2d:a5:41:4e:8d:55:0f:c9:b9:
49:1c:6b:40:a8:af:6b:b1:6e:39:eb:d1:04:0d:d3:6e:ea:40:
b3:dd:45:eb:2b:7e:5e:43:b0:90:19:27:ab:a5:9f:51:c1:55:
53:73:85:77:a1:5b:05:bc:6d:ed:c7:93:2c:9a:b6:56:3e:d9:
b8:02:f8:0a:5c:90:ef:15:20:2a:e8:3e:ac:a0:1e:ab:a2:71:
7d:25:3f:d5:a5:d6:59:24:27:d0:a9:a1:0d:b4:d7:3f:2d:8f:
be:16:ec:ef:8c:23:50:6e:a6:04:5e:60:3b:5e:1e:1c:98:40:
66:64:36:73:cf:38:1c:19:c2:bf:cb:8f:88:c9:9f:8f:bc:42:
5c:d4:e8:4d:67:78:a8:c1:30:bd:85:75:9c:ea:a6:9f:7c:1f:
9a:d0:ae:41:3a:af:22:77:13:03:46:0a:9e:0a:60:e1:23:f1:
20:61:af:22:1c:18:a3:6a:e5:99:79:4d:1d:00:f7:7b:12:8a:
f3:06:a3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 23:33:14 2026 by rpki-client