Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
File: zoqNQOQ3rfSs182zjgQCR3ouUaY.mft (raw, json)
Hash identifier: OzwBRQ5SyQX0tXvXyCh2XjtNg+STGdbuW3IX7GTKG5I=
Subject key identifier: 3E:D7:AA:3E:83:02:21:40:D1:19:5E:AC:43:D5:23:C5:5A:7D:7C:66
Authority key identifier: CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6
Certificate issuer: /CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6
Certificate serial: 019E21364824D41CF0562B5947224DD5AD94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
Manifest number: 0C1B
Signing time: Wed 13 May 2026 12:01:06 +0000
Manifest this update: Wed 13 May 2026 12:01:06 +0000
Manifest next update: Thu 14 May 2026 12:01:06 +0000
Files and hashes: 1: 9Pp2n7Q5bS4sKqtdoxR4D7Rtxoo.roa (hash: mD/l5zdsFJGNZ8p29GMjIaEXus0bg3O0b3+7D4zGWpI=)
2: VJ76kPFRh3Ww8Is5M704WVV-vPA.roa (hash: yBUtgXGi1nLg+3akssVacnV8r6cvgHcXwp/SrlxIpHQ=)
3: zoqNQOQ3rfSs182zjgQCR3ouUaY.crl (hash: b3etgv7NGRzzi/BwzojhHjUv88FMWgDiem7MY0spI00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 12:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:36:48:24:d4:1c:f0:56:2b:59:47:22:4d:d5:ad:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6
Validity
Not Before: May 13 12:01:06 2026 GMT
Not After : May 14 12:01:06 2026 GMT
Subject: CN=3ed7aa3e83022140d1195eac43d523c55a7d7c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c5:82:22:af:47:27:78:c3:a6:93:51:e6:40:
47:87:07:c5:bd:d9:a7:38:b9:08:b6:7f:33:22:de:
3f:35:f3:73:fe:15:51:06:b3:91:e8:6c:25:b0:b6:
c3:7e:15:55:d2:ea:44:9a:65:69:5e:89:dc:ae:08:
1f:6f:0c:2c:00:c6:c5:f8:16:39:f7:94:48:ea:b6:
c3:76:d8:03:f7:e6:36:53:00:c9:93:19:3c:15:35:
8c:f2:bc:14:eb:3f:ea:ae:9d:c0:e2:72:06:c7:6e:
1e:a6:42:1d:3d:d9:12:b8:d0:a9:d4:62:18:a6:ab:
b6:1a:bf:06:93:f8:c0:f0:62:cf:b2:98:d5:64:0d:
60:a4:46:44:27:4a:8d:98:e6:29:3a:c0:34:8f:67:
dc:c7:5e:d1:47:29:50:65:e1:6a:39:4d:fb:fd:94:
14:24:56:82:17:d0:1f:10:4f:97:1f:80:3f:0e:3d:
a3:a7:dc:96:76:61:c9:70:b6:c6:d7:83:70:ce:85:
51:ad:73:c5:93:2b:90:2e:99:7c:5f:00:9c:97:4d:
3f:05:47:25:bb:72:28:f5:af:1b:ff:91:df:96:ab:
d9:89:a8:f7:93:23:8f:77:15:df:d3:34:e3:1c:dd:
31:cb:54:3e:25:e0:da:f0:a7:02:66:a1:cb:50:f1:
dd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D7:AA:3E:83:02:21:40:D1:19:5E:AC:43:D5:23:C5:5A:7D:7C:66
X509v3 Authority Key Identifier:
keyid:CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:8e:f3:3e:5d:8d:48:01:15:3f:73:21:9c:dc:43:c0:a5:48:
89:ce:92:21:5b:af:98:6b:78:1d:03:66:79:f4:5b:b0:ea:df:
10:db:cc:de:7d:1c:d2:0b:ee:41:6f:c2:fa:35:b5:16:17:3f:
94:da:85:8f:77:8e:95:57:ab:e3:b7:1f:c9:fc:78:c7:0f:e8:
74:19:54:f6:43:6e:da:70:c9:4b:5b:a0:20:80:6d:9f:40:77:
2e:4b:4a:90:2f:d3:61:d1:0a:c8:84:3c:b9:c3:a4:81:72:50:
25:9e:5f:a8:06:d4:fb:9a:cb:a4:82:f6:25:a7:de:28:23:14:
09:e9:11:86:0e:0b:11:df:07:4f:12:34:8d:9b:b1:ff:cc:71:
87:2f:46:67:30:b6:57:10:17:58:ad:db:2c:c0:70:5e:c5:30:
c3:94:28:0d:3b:ec:fa:6a:f6:fb:fa:2e:76:0b:fb:aa:e0:d8:
75:8d:7a:e0:0e:94:44:f6:f6:d7:c3:b7:37:b5:09:cb:fe:11:
68:7d:8d:b5:35:c4:d0:62:bd:7d:37:5b:10:0b:93:a1:91:1c:
e7:46:be:02:1d:da:ad:99:e7:9b:e5:2b:57:96:f2:39:7c:01:
e8:2a:da:d7:19:d4:0e:e2:0d:49:ac:ec:53:d7:13:87:14:ca:
7a:b6:0a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:56:02 2026 by rpki-client