Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
File: zUBlln3sCStfyQFS5KlTObodIok.mft (raw, json)
Hash identifier: Z+hAPNtWMEoDhyNxrNpNT/rtM9ChqTGDZ1fUSehyTBM=
Subject key identifier: 0C:25:47:AB:72:BB:5F:3F:6A:C9:DB:B6:B0:D4:FC:CE:4B:A5:E2:F9
Authority key identifier: CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
Certificate issuer: /CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Certificate serial: 019CAC7DE707A1C720BBE902031C13AB76E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
Manifest number: 0E9D
Signing time: Mon 02 Mar 2026 03:00:58 +0000
Manifest this update: Mon 02 Mar 2026 03:00:58 +0000
Manifest next update: Tue 03 Mar 2026 03:00:58 +0000
Files and hashes: 1: XrmmbPIgnA61rh6z_5Wfj4vJ374.roa (hash: DtOM3AG98xq9adArrqetx0s2cyFgsSbYyCzOOvAoXqc=)
2: wm5FHuXn0yj2Fzs7mssloklRCsc.roa (hash: nSYa0rr7dwu5dctQzszV3Gq5wfYwUX466+D2hjWAmcE=)
3: zUBlln3sCStfyQFS5KlTObodIok.crl (hash: 2lRCAJJDN7Bho2da15jOEzl4f6rAWCvW7+tqio1eOqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:e7:07:a1:c7:20:bb:e9:02:03:1c:13:ab:76:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Validity
Not Before: Mar 2 03:00:58 2026 GMT
Not After : Mar 3 03:00:58 2026 GMT
Subject: CN=0c2547ab72bb5f3f6ac9dbb6b0d4fcce4ba5e2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8d:3f:d8:cf:24:80:91:b7:e1:90:28:9b:d2:
5b:27:53:41:58:e4:1d:4f:01:f2:22:db:11:d4:b6:
27:e7:d7:7e:75:0c:15:ce:ee:3e:13:7d:0d:93:59:
54:87:3e:5c:a0:70:55:8d:53:42:9b:88:01:43:de:
e8:48:00:34:40:ae:c8:95:d2:9d:a6:84:c0:76:31:
9e:db:53:82:5e:be:c2:2e:2d:68:fc:e2:79:2d:37:
86:20:57:c7:c8:2f:73:1f:a2:a5:57:4c:91:fb:18:
7b:8d:1b:e8:e6:b1:8c:d3:23:23:52:bf:52:63:cf:
3a:80:09:50:21:4e:7c:e7:a3:5a:59:3a:0a:69:09:
35:97:17:ca:80:b4:12:b7:97:81:93:4e:2f:5b:1b:
e4:09:b0:c8:46:b5:ec:0d:ea:70:7d:d4:8b:35:e7:
a8:ba:1f:eb:b3:49:a3:83:1b:cf:8e:c3:ec:2a:cd:
18:86:56:f5:ab:f8:c7:01:3e:aa:46:72:2d:0b:ec:
c8:af:b0:05:26:59:c9:d7:56:e9:ea:e4:8b:ca:d3:
62:4d:3f:fc:fb:0a:57:d6:5f:aa:0c:a9:54:b8:6c:
d7:c7:65:ae:0e:b1:2c:5a:04:51:57:55:d5:1a:20:
ef:ad:8b:00:b1:10:06:72:56:cd:6b:be:ad:82:9d:
e3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:25:47:AB:72:BB:5F:3F:6A:C9:DB:B6:B0:D4:FC:CE:4B:A5:E2:F9
X509v3 Authority Key Identifier:
keyid:CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:73:fe:03:25:05:f6:65:35:b9:68:b5:6f:a4:50:a5:e3:e7:
cf:da:61:c0:ea:30:36:27:99:0c:e2:bb:4d:06:ca:eb:6b:32:
0f:9b:5c:dc:13:31:a6:f1:f4:9b:a7:8e:8b:5b:05:33:92:60:
31:51:3b:41:3e:52:ca:f7:3d:69:b2:8f:7c:58:e0:bf:aa:e6:
00:16:62:06:4d:61:71:31:3b:bf:7e:21:26:86:e0:4a:1c:55:
2e:07:bb:8b:97:27:5b:07:b6:12:22:9f:59:4b:4a:a1:2e:a6:
9a:ca:ed:5c:e3:97:9c:1c:0a:0a:3b:88:1c:2a:68:95:de:1d:
1a:2d:f3:ae:49:c9:9f:eb:f3:2b:91:c0:71:87:2a:ea:3c:6a:
a0:ca:db:7a:04:92:c9:d6:7f:71:e5:8d:80:9d:6a:18:f6:88:
4a:50:32:60:b0:03:52:75:b8:5c:97:a4:dd:67:cf:fd:6c:7d:
6c:16:1d:5d:21:51:47:d2:f8:a2:70:eb:f7:c4:b4:f4:ac:ae:
fb:0a:a2:17:85:58:5c:6f:5d:24:ab:ef:f2:50:ad:6d:99:23:
16:2c:c6:c9:b2:8a:2c:5e:1b:87:95:99:c2:d5:0c:48:1c:59:
5c:7e:ea:c0:4a:9c:4b:92:d0:35:3f:98:74:78:96:f6:36:8f:
00:89:4c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:06:13 2026 by rpki-client