Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
File: zUBlln3sCStfyQFS5KlTObodIok.mft (raw, json)
Hash identifier: i9YojhmpuD/asSIBcrI5EFjLOkwA7Ja8Vj/WVM32AnQ=
Subject key identifier: C0:BF:F3:36:68:A9:DC:06:63:5F:F6:15:95:7C:70:65:41:AD:E5:13
Authority key identifier: CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
Certificate issuer: /CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Certificate serial: 019FAB2CA23F0B948DF2B1005BDDA291A2AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
Manifest number: 102B
Signing time: Wed 29 Jul 2026 00:00:56 +0000
Manifest this update: Wed 29 Jul 2026 00:00:56 +0000
Manifest next update: Thu 30 Jul 2026 00:00:56 +0000
Files and hashes: 1: wRE9U-STcq388gs--_aR0rhDAmE.roa (hash: PeDJ2qi9G/BGwM64tes30qEst81Dt7OlqBewf1kK90o=)
2: zUBlln3sCStfyQFS5KlTObodIok.crl (hash: qbVkEjZAa4SZOgsNy0o1cgFsBYVsOgCQ8roQhyunXCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:a2:3f:0b:94:8d:f2:b1:00:5b:dd:a2:91:a2:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Validity
Not Before: Jul 29 00:00:56 2026 GMT
Not After : Jul 30 00:00:56 2026 GMT
Subject: CN=c0bff33668a9dc06635ff615957c706541ade513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:cc:99:62:0b:8b:ed:8b:52:8a:c2:28:a1:06:
43:9d:d9:d5:77:43:f0:38:80:69:38:e5:0c:59:cc:
b6:67:d8:70:19:81:20:6c:c6:19:27:ad:a4:43:f0:
97:68:6d:65:19:1b:ff:b4:e5:4a:fa:91:56:70:7a:
cf:af:98:95:ab:29:20:f8:ad:36:07:7f:91:e9:43:
4b:c2:0a:49:2d:81:17:0b:d6:b5:c7:ba:99:31:00:
dc:c5:fa:f5:87:a9:7b:6c:a6:1d:a0:9d:4d:91:76:
7f:36:8f:f1:ae:f9:fb:33:20:9d:b2:1c:8f:de:14:
78:76:b4:9a:44:27:d4:fa:23:b6:cc:fa:c8:b4:59:
cc:b7:37:f6:86:e2:0a:15:23:d4:63:eb:ed:2a:2e:
67:a8:45:fb:c1:9d:25:cf:78:f3:31:6e:57:28:5c:
75:04:f0:9f:c2:4f:a3:60:6a:4d:ff:2c:78:69:de:
13:c8:d2:77:79:24:05:a4:fb:aa:93:6b:58:04:d4:
d9:d8:19:6f:d6:8e:a2:ee:55:64:00:16:9b:cb:4a:
be:9d:45:91:78:cf:c1:62:a3:70:be:c9:38:9c:61:
c3:3c:2d:77:f2:f5:5a:bb:a9:2f:21:d5:be:5d:b0:
86:39:6d:b2:31:f9:40:14:0c:c5:19:1d:b2:5e:49:
6b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BF:F3:36:68:A9:DC:06:63:5F:F6:15:95:7C:70:65:41:AD:E5:13
X509v3 Authority Key Identifier:
keyid:CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:2c:ea:b1:a8:6d:da:24:7a:84:b4:45:28:2c:91:b0:38:71:
4d:3b:8f:9d:44:9d:aa:43:61:4e:fd:1e:97:9f:ad:68:7b:4f:
cb:54:0f:ba:cf:fc:85:75:06:f1:d6:3e:00:5c:6d:d7:e4:73:
8d:c5:51:46:f3:65:42:2b:a9:62:56:06:b9:b4:c9:22:0d:3a:
0a:ad:26:f6:8c:a2:06:be:bb:2d:fb:c5:be:9a:1f:a1:3c:db:
fe:5f:d1:25:fc:83:f2:0a:ca:94:82:be:d4:ad:c1:cd:da:7f:
f8:fe:88:d0:37:2e:cf:ca:2b:c1:c1:b6:8a:2c:c1:29:e0:75:
52:c4:17:09:44:08:dd:1f:8a:4a:a8:c2:97:1a:10:e9:d4:7c:
52:d3:16:6a:85:14:d6:20:35:a9:c3:60:06:d9:f3:df:f1:18:
03:ba:1b:03:14:ba:dd:89:6c:5f:d9:6f:4c:2e:c9:47:18:82:
ab:65:3b:3e:81:91:e1:0e:32:d4:bb:d6:58:88:8d:7b:8f:18:
26:f1:2f:69:cc:fa:1c:18:c4:1a:4d:df:c0:2b:8b:cb:ce:a3:
87:79:ab:13:ba:ff:44:de:74:09:74:c9:c3:1c:a1:43:af:d9:
e1:44:fa:4d:8f:26:7a:83:0f:56:87:2c:13:ac:a5:c6:47:e8:
19:84:9e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:08:28 2026 by rpki-client