Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
File: zUBlln3sCStfyQFS5KlTObodIok.mft (raw, json)
Hash identifier: zW0h5LyG+s+d+WHJWmwzr2AU6T0NI7Niry6Cq5f5/a4=
Subject key identifier: 27:1B:E7:11:A5:DC:2B:F5:8B:7E:FA:81:46:09:9D:13:C1:CF:6E:F3
Authority key identifier: CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
Certificate issuer: /CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Certificate serial: 019D99627BB8FA6A97225B43A37FAB20F7CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
Manifest number: 0F18
Signing time: Fri 17 Apr 2026 03:01:01 +0000
Manifest this update: Fri 17 Apr 2026 03:01:01 +0000
Manifest next update: Sat 18 Apr 2026 03:01:01 +0000
Files and hashes: 1: FkRKPYmdQ_5Uw6uf-qrKiu1z604.roa (hash: 7d3RQe8zUsFi/wr7V2puj4vtJZCBuk3sMl8g2gQ6BlI=)
2: zUBlln3sCStfyQFS5KlTObodIok.crl (hash: LIEm4ehuonHgtkwbfqHZHBzk+sx6FwRcVcp9HCTLAZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:7b:b8:fa:6a:97:22:5b:43:a3:7f:ab:20:f7:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Validity
Not Before: Apr 17 03:01:01 2026 GMT
Not After : Apr 18 03:01:01 2026 GMT
Subject: CN=271be711a5dc2bf58b7efa8146099d13c1cf6ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:30:05:f9:0e:16:e8:4c:09:ee:d6:86:5e:5f:
05:86:51:b8:90:8f:41:38:d9:35:a7:84:c1:0d:28:
ff:a6:10:0f:02:44:29:bb:c2:23:fb:df:e6:01:ae:
f7:cc:00:b5:d6:d0:d7:57:7b:0a:3f:62:67:c4:42:
a4:66:e6:3a:24:a4:f6:00:c5:14:f7:4f:d4:bd:13:
8e:b1:8f:e1:39:4b:91:62:04:c4:5e:d5:35:28:0d:
75:7d:28:0f:b9:17:75:fc:8f:28:97:27:44:da:57:
16:8b:d6:f3:27:91:94:31:18:84:4c:aa:2d:04:f2:
85:81:25:8b:44:74:22:ba:be:d3:be:39:5c:97:bc:
1e:84:fc:e3:f4:1a:43:40:75:da:89:ae:22:b6:e1:
8a:69:1f:e4:cc:08:f7:f3:54:a8:e7:7b:bb:4a:14:
1e:d7:11:80:27:78:f8:9c:61:cd:ad:35:93:1c:66:
0e:08:14:12:42:65:91:bc:1b:ca:3f:d1:57:b2:4f:
4e:22:88:8d:d9:57:33:21:61:07:04:25:c9:a4:b4:
9f:42:ff:35:56:7d:35:8d:4b:7d:cd:b1:2d:97:a1:
af:78:81:f5:f9:ff:e2:ca:5e:2c:fe:19:e5:a0:99:
cd:4b:26:21:19:22:0b:14:e7:c3:ef:42:3e:31:08:
f1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1B:E7:11:A5:DC:2B:F5:8B:7E:FA:81:46:09:9D:13:C1:CF:6E:F3
X509v3 Authority Key Identifier:
keyid:CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:45:03:e6:6f:c4:9c:cd:d4:06:c8:f0:71:ab:dd:73:a9:75:
d1:10:6f:16:23:2d:cb:92:a1:c7:b0:7a:a2:db:71:ee:32:8b:
e9:45:ed:60:96:11:6a:23:f8:94:27:b2:66:18:af:b3:99:6a:
86:64:e3:19:fe:7c:75:8d:8d:a8:ab:b1:5b:ed:65:2f:8f:42:
e4:ac:59:f2:cd:8e:33:81:66:eb:dd:84:a4:25:7b:1d:5e:57:
d6:8f:ff:5f:a7:75:d4:cf:a4:45:d8:55:3c:ae:4e:5d:c1:aa:
57:2e:cb:46:ea:36:67:1b:95:f7:a1:09:fa:db:40:0a:82:09:
19:b6:4f:ed:43:f2:6d:18:75:04:be:64:1d:be:3f:b9:e5:d8:
47:33:4d:f1:6f:89:d2:d0:89:57:99:be:72:3c:a8:37:a6:be:
47:5c:f3:7a:1d:3f:5e:05:dd:2c:6e:80:58:7c:b3:47:90:49:
23:da:5e:ec:44:8f:aa:83:c8:a9:45:97:70:2e:cb:26:95:cd:
7a:67:11:78:f2:2f:2d:ce:9e:3a:df:29:9f:9d:df:0a:01:a6:
8c:b3:2f:41:94:33:9e:69:e2:20:e2:14:d3:57:2a:ad:9a:d2:
c0:5b:3f:55:1d:c9:f9:47:fa:cb:4a:8b:72:64:4a:4f:22:f1:
0a:79:b9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:23:06 2026 by rpki-client