Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
File: zUBlln3sCStfyQFS5KlTObodIok.mft (raw, json)
Hash identifier: sARKnfdCeiLe9wf7e/vndJCIGKkNqK2TuLAe40HXjrY=
Subject key identifier: FF:56:D9:58:FA:A9:17:60:07:7D:AD:0E:8B:C4:D0:47:FE:CA:45:A7
Authority key identifier: CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
Certificate issuer: /CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Certificate serial: 019EC1801998651928CDA83455290F8745A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
Manifest number: 0FB2
Signing time: Sat 13 Jun 2026 15:00:58 +0000
Manifest this update: Sat 13 Jun 2026 15:00:58 +0000
Manifest next update: Sun 14 Jun 2026 15:00:58 +0000
Files and hashes: 1: wRE9U-STcq388gs--_aR0rhDAmE.roa (hash: PeDJ2qi9G/BGwM64tes30qEst81Dt7OlqBewf1kK90o=)
2: zUBlln3sCStfyQFS5KlTObodIok.crl (hash: n7B/uf2Aw+aWPcZ0cakUlO55Dhv7KtXu8tq1mhGlGx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:80:19:98:65:19:28:cd:a8:34:55:29:0f:87:45:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Validity
Not Before: Jun 13 15:00:58 2026 GMT
Not After : Jun 14 15:00:58 2026 GMT
Subject: CN=ff56d958faa91760077dad0e8bc4d047feca45a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c2:f0:9e:48:a9:3b:c9:05:cd:a3:d9:12:d6:
10:1d:d1:db:95:35:a8:1e:67:e5:f0:e0:99:bb:29:
0f:43:91:5f:33:c1:86:b6:ee:fc:ad:74:8e:5b:54:
d9:36:45:23:1a:97:30:0f:b1:dc:51:76:de:54:0a:
cc:06:bf:ff:94:05:48:ad:ac:47:f7:2c:87:f8:e4:
8e:57:e1:be:7f:23:e3:5d:07:88:d0:10:6a:38:3b:
04:19:38:d5:3f:be:b1:7f:66:1b:94:e8:37:74:4a:
88:11:d6:9e:71:dc:3e:00:b3:24:ad:8a:6b:17:f3:
be:1e:00:e6:2a:d4:c4:25:ca:23:3a:eb:48:c4:35:
57:4a:8c:11:ec:3b:81:84:38:d8:b4:e6:a9:fa:5f:
6b:0d:ac:58:a9:5f:b3:40:21:57:d4:76:90:28:45:
49:f8:44:b8:19:54:f3:48:82:5f:ac:fb:ba:80:2a:
0b:2a:9b:a8:7c:17:e4:2b:af:6f:23:de:c0:fc:f6:
e4:85:fb:d8:60:62:74:a5:14:62:3a:b4:4d:e9:76:
d4:7b:48:73:93:d8:f4:14:9c:8b:66:01:bd:fd:4e:
f2:ad:6c:7a:60:78:cc:c7:ff:86:8e:f6:5a:ba:87:
48:60:09:74:82:b7:a4:ba:cb:74:14:b6:4b:eb:6c:
ad:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:56:D9:58:FA:A9:17:60:07:7D:AD:0E:8B:C4:D0:47:FE:CA:45:A7
X509v3 Authority Key Identifier:
keyid:CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:fb:80:e8:86:50:01:6c:1d:35:47:a1:6b:3c:ee:15:e2:e2:
51:9e:ab:a9:75:b4:96:f5:17:de:24:58:d1:9a:1d:87:9b:11:
b3:e5:b1:5c:b4:7c:89:07:c9:e4:09:93:86:df:ca:a3:22:11:
1b:2f:a6:17:d0:3e:4c:0f:03:8f:e1:53:4a:5e:0b:de:f7:45:
b0:6c:89:39:b8:58:b2:0c:fe:f1:96:ff:e8:a0:3b:33:31:f8:
40:29:c5:e5:12:3b:6e:14:75:73:28:2e:77:ad:6d:3a:80:ba:
49:9a:89:a5:ee:a2:25:b6:ef:a2:a0:76:b5:6f:c6:64:4a:69:
ca:c9:c9:eb:60:b4:07:f7:02:d6:d4:31:46:13:40:3e:ce:5f:
91:4f:91:3d:5a:c8:07:e2:ca:26:72:c5:ed:ae:95:eb:82:c2:
00:59:fa:83:53:7c:a0:ec:cb:dc:96:cf:28:e6:36:ca:71:cc:
0e:e9:a9:e1:72:72:83:fd:29:69:e0:50:01:18:9e:33:f5:d8:
7d:d1:ab:44:4a:99:cc:1d:d3:66:03:fe:52:86:29:7b:05:04:
f8:19:de:b7:cc:2c:d7:30:9e:9a:71:ab:d6:9d:3d:fe:31:3a:
95:d8:b6:7f:98:0b:dd:61:1a:2d:08:c1:e2:b2:2b:5e:62:4c:
57:96:24:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:49:25 2026 by rpki-client