Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
File: zoqNQOQ3rfSs182zjgQCR3ouUaY.mft (raw, json)
Hash identifier: X7RBPciMWEQGIvV2B4a61FvlSdAsWJPSFNj78yAr0Uc=
Subject key identifier: 8C:CB:8C:31:CA:F6:56:3D:51:06:B5:D3:0A:03:7B:D6:CA:17:A3:D5
Authority key identifier: CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6
Certificate issuer: /CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6
Certificate serial: 019D26289ABE939DABBDB3BF5115FEC24DA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
Manifest number: 0B99
Signing time: Wed 25 Mar 2026 18:01:28 +0000
Manifest this update: Wed 25 Mar 2026 18:01:28 +0000
Manifest next update: Thu 26 Mar 2026 18:01:28 +0000
Files and hashes: 1: 9Pp2n7Q5bS4sKqtdoxR4D7Rtxoo.roa (hash: mD/l5zdsFJGNZ8p29GMjIaEXus0bg3O0b3+7D4zGWpI=)
2: VJ76kPFRh3Ww8Is5M704WVV-vPA.roa (hash: yBUtgXGi1nLg+3akssVacnV8r6cvgHcXwp/SrlxIpHQ=)
3: zoqNQOQ3rfSs182zjgQCR3ouUaY.crl (hash: 7rQ8NeD1SfwvW5cbSlOWE9CJ3XZRh6jzD8nasYRJWRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:9a:be:93:9d:ab:bd:b3:bf:51:15:fe:c2:4d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6
Validity
Not Before: Mar 25 18:01:28 2026 GMT
Not After : Mar 26 18:01:28 2026 GMT
Subject: CN=8ccb8c31caf6563d5106b5d30a037bd6ca17a3d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:64:c7:35:ec:09:b2:ba:fe:1c:c7:47:37:b8:
39:d6:89:8d:ba:67:e9:e2:51:a8:56:03:ed:11:15:
de:63:46:ea:5f:60:9e:25:69:8b:61:36:c0:4f:1d:
46:70:9e:27:3f:a0:18:17:33:6f:05:dd:ae:76:87:
9e:90:52:86:eb:10:19:a0:d8:4d:b2:a8:f3:29:a6:
23:de:1d:2c:95:bd:ba:39:84:95:4b:cf:0c:3a:9c:
38:42:45:19:86:2e:6e:a1:13:9c:6c:63:66:79:0f:
1d:3e:db:14:fa:15:20:6d:12:76:bb:7e:3e:04:85:
42:a2:e0:7e:ee:3f:0a:f2:62:eb:f6:92:21:5e:f6:
b3:d3:c4:bc:c6:e1:b5:94:3e:24:b3:80:d6:35:a8:
7e:96:8f:2b:eb:e8:c7:7e:f4:b8:94:05:1b:f7:75:
62:21:26:ac:5a:a8:98:93:7a:dd:f8:d0:65:a9:1c:
62:96:fd:84:e0:a9:df:04:00:c9:57:4b:0f:48:77:
83:0c:a5:4b:6d:65:60:d3:90:8b:13:f2:c3:aa:a7:
c2:c3:9d:77:ee:8c:08:04:89:74:20:d1:ba:36:4a:
40:eb:df:ff:46:d9:48:c0:b2:8e:50:69:d1:0a:02:
a5:af:a3:53:4c:d7:f0:de:d0:0d:29:49:be:55:38:
ab:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CB:8C:31:CA:F6:56:3D:51:06:B5:D3:0A:03:7B:D6:CA:17:A3:D5
X509v3 Authority Key Identifier:
keyid:CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:6c:25:eb:1b:37:a5:b2:a6:48:ab:e8:e2:8e:5f:4d:c3:24:
ed:9f:53:71:87:f2:2b:6e:59:54:14:14:96:b6:ca:3e:ec:aa:
41:56:01:7b:6c:39:21:dc:fd:a6:b5:3e:33:8a:c5:8a:8f:b5:
79:6c:21:4c:7f:2a:99:52:f9:60:6c:f7:b7:de:b5:90:2e:8b:
ac:86:b9:65:e8:d0:9b:4c:dd:68:de:ea:36:c8:7a:34:9e:f6:
f3:f2:de:da:88:c9:ab:46:1e:12:ec:26:1c:da:cc:b5:d7:25:
38:8f:6a:04:ce:98:16:e8:94:0e:e5:c3:3f:37:ea:b9:82:d3:
db:b7:30:af:c3:89:41:eb:de:2f:9b:40:70:99:db:e7:66:4d:
cd:59:3e:6e:25:da:43:79:9c:65:20:cd:ac:86:1e:67:61:06:
f3:32:93:3c:8a:66:ce:08:bd:5e:e6:c6:e0:f0:d9:14:a7:2e:
b5:f8:46:b9:79:06:92:19:06:d2:a4:50:8b:c3:62:9d:43:e4:
57:e8:eb:1c:d7:cf:3f:23:3f:46:a5:07:fe:4c:57:70:98:9f:
93:66:40:7d:cc:d5:17:d2:0f:f2:11:d2:02:f0:0d:b6:b1:e4:
33:58:bf:ff:de:1b:9a:76:c4:0d:b3:b6:9e:5b:b3:62:33:62:
c7:e6:9f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:41:45 2026 by rpki-client