Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
File: zUBlln3sCStfyQFS5KlTObodIok.mft (raw, json)
Hash identifier: RmX88QnekTM6IYsXnh8IaluUe5kAntVE8MlTYtdR688=
Subject key identifier: E6:E3:E6:1A:C4:A8:FE:2D:34:43:E2:19:87:F2:9E:AD:07:57:A6:04
Authority key identifier: CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
Certificate issuer: /CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Certificate serial: 019FA93E51857E3AD51620E19CF057A4B341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
Manifest number: 102A
Signing time: Tue 28 Jul 2026 15:01:01 +0000
Manifest this update: Tue 28 Jul 2026 15:01:01 +0000
Manifest next update: Wed 29 Jul 2026 15:01:01 +0000
Files and hashes: 1: wRE9U-STcq388gs--_aR0rhDAmE.roa (hash: PeDJ2qi9G/BGwM64tes30qEst81Dt7OlqBewf1kK90o=)
2: zUBlln3sCStfyQFS5KlTObodIok.crl (hash: qkImn6EXlJGwt+e8v1FcYxSRZm9g7yZyJrjF97cEBaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:51:85:7e:3a:d5:16:20:e1:9c:f0:57:a4:b3:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Validity
Not Before: Jul 28 15:01:01 2026 GMT
Not After : Jul 29 15:01:01 2026 GMT
Subject: CN=e6e3e61ac4a8fe2d3443e21987f29ead0757a604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:30:f8:98:fb:2e:d6:08:fd:10:a0:68:01:4e:
8a:a5:91:21:79:76:e8:2c:f2:60:b0:02:16:c0:95:
bb:3d:e5:d6:f1:11:23:43:82:7c:b6:81:f6:81:ff:
62:96:71:bd:c3:dd:67:f9:f0:07:5c:5c:f6:bd:01:
e8:c5:eb:17:57:b4:af:61:f4:38:81:2c:11:7f:63:
69:ee:9d:de:80:89:5d:85:8a:9d:24:99:da:05:a6:
be:8b:1f:46:ba:a7:c3:2e:c1:d4:59:9c:56:8d:71:
d5:f0:f1:a7:c6:20:d7:66:27:b6:4a:de:6b:20:e5:
32:4f:28:1c:7a:4b:ce:11:f0:b0:4c:7b:63:15:d8:
64:23:8b:10:5c:88:7b:da:0a:43:4c:0c:23:33:da:
a1:24:0c:2f:81:ff:9c:c9:f0:50:bb:19:fc:83:b4:
77:35:3a:bc:97:18:9e:55:6f:ea:9f:45:0a:9e:9f:
11:5e:3e:76:75:49:2e:68:c9:06:a6:b3:24:f5:3e:
45:a1:bf:4e:38:da:69:75:57:93:68:2f:ab:c3:10:
d2:e8:40:98:26:e3:d3:e2:e0:dd:83:86:b7:8c:7f:
58:07:72:10:c4:30:97:eb:96:0e:11:c0:97:5b:29:
c1:36:94:e1:92:52:a6:06:cd:61:e0:a7:68:dd:61:
f4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E3:E6:1A:C4:A8:FE:2D:34:43:E2:19:87:F2:9E:AD:07:57:A6:04
X509v3 Authority Key Identifier:
keyid:CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:7a:c4:4c:31:af:4b:48:44:ba:02:9b:84:58:07:cc:75:3d:
de:ec:cf:72:d0:86:64:4e:58:e3:69:ce:2e:33:3a:fb:b7:7f:
bb:1f:37:af:b8:bb:c5:7c:b2:92:c5:4c:de:2c:a8:25:84:48:
01:5c:4b:b6:a3:20:e1:7c:9a:de:fc:b8:b3:2d:58:9b:08:5d:
52:f4:1d:2a:16:73:9b:7c:c3:4c:b0:c7:dd:52:f4:85:6f:f4:
35:0b:63:93:2d:10:07:b4:97:b5:51:79:3d:c7:c3:58:89:1e:
07:2b:d5:5b:22:fb:31:16:d9:b2:66:15:fa:f4:20:4b:a8:17:
e7:19:6e:f8:b5:ab:b6:f3:89:22:f2:29:d1:ca:20:97:ce:06:
e8:6f:12:70:b0:a5:90:c2:06:f1:4a:3a:8a:c6:00:a6:1e:34:
5d:f4:da:01:15:3e:df:70:bf:8d:4f:f4:1a:9a:bd:c1:6a:31:
2c:d5:a7:0a:12:69:10:4a:90:0a:3d:50:93:83:82:5e:44:8e:
7d:38:ac:54:9f:92:7d:fc:29:34:13:12:c2:d2:75:2f:79:1f:
b6:51:d2:4b:25:0b:e7:7d:c3:98:c3:0c:bd:a0:5f:9c:44:f8:
73:f9:1a:33:26:99:e4:5b:9d:df:97:a9:2c:f3:02:bf:2f:fa:
39:d7:77:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pPlGFfjrVFiDhnPBXpLNBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNDA2NTk2N2RlYzA5MmI1ZmM5MDE1MmU0YTk1MzM5YmEx
ZDIyODkwHhcNMjYwNzI4MTUwMTAxWhcNMjYwNzI5MTUwMTAxWjAzMTEwLwYDVQQD
EyhlNmUzZTYxYWM0YThmZTJkMzQ0M2UyMTk4N2YyOWVhZDA3NTdhNjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDD4mPsu1gj9EKBoAU6KpZEheXbo
LPJgsAIWwJW7PeXW8REjQ4J8toH2gf9ilnG9w91n+fAHXFz2vQHoxesXV7SvYfQ4
gSwRf2Np7p3egIldhYqdJJnaBaa+ix9GuqfDLsHUWZxWjXHV8PGnxiDXZie2St5r
IOUyTygcekvOEfCwTHtjFdhkI4sQXIh72gpDTAwjM9qhJAwvgf+cyfBQuxn8g7R3
NTq8lxieVW/qn0UKnp8RXj52dUkuaMkGprMk9T5Fob9OONppdVeTaC+rwxDS6ECY
JuPT4uDdg4a3jH9YB3IQxDCX65YOEcCXWynBNpThklKmBs1h4Kdo3WH0+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFObj5hrEqP4tNEPiGYfynq0HV6YEMB8GA1UdIwQY
MBaAFM1AZZZ97AkrX8kBUuSpUzm6HSKJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelVCbGxuM3NDU3RmeVFGUzVLbFRPYm9kSW9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85NDRmMmEtZjY3My00MmJmLTllM2Qt
ZWRjZWY3NDUxZWY0LzEvelVCbGxuM3NDU3RmeVFGUzVLbFRPYm9kSW9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS85NDRmMmEtZjY3My00MmJmLTllM2QtZWRjZWY3NDUxZWY0
LzEvelVCbGxuM3NDU3RmeVFGUzVLbFRPYm9kSW9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqnrETDGv
S0hEugKbhFgHzHU93uzPctCGZE5Y42nOLjM6+7d/ux83r7i7xXyyksVM3iyoJYRI
AVxLtqMg4Xya3vy4sy1YmwhdUvQdKhZzm3zDTLDH3VL0hW/0NQtjky0QB7SXtVF5
PcfDWIkeByvVWyL7MRbZsmYV+vQgS6gX5xlu+LWrtvOJIvIp0cogl84G6G8ScLCl
kMIG8Uo6isYAph40XfTaARU+33C/jU/0Gpq9wWoxLNWnChJpEEqQCj1Qk4OCXkSO
fTisVJ+SffwpNBMSwtJ1L3kftlHSSyUL533DmMMMvaBfnET4c/kaMyaZ5Fud35ep
LPMCvy/6Odd3cw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:44:36 2026 by rpki-client