Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
File: zUBlln3sCStfyQFS5KlTObodIok.mft (raw, json)
Hash identifier: O1rJD7rixfW4LayIaphCP4qiiDo5leFPQMVq7Yo2STo=
Subject key identifier: DE:CE:11:BF:98:F7:FB:98:16:6A:A5:07:FC:2A:C3:EC:CC:41:4B:C5
Authority key identifier: CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
Certificate issuer: /CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Certificate serial: 01A0E5F60405B12897F8A5C83159E69940DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
Manifest number: 10CE
Signing time: Mon 28 Sep 2026 03:01:40 +0000
Manifest this update: Mon 28 Sep 2026 03:01:40 +0000
Manifest next update: Tue 29 Sep 2026 03:01:40 +0000
Files and hashes: 1: wRE9U-STcq388gs--_aR0rhDAmE.roa (hash: PeDJ2qi9G/BGwM64tes30qEst81Dt7OlqBewf1kK90o=)
2: zUBlln3sCStfyQFS5KlTObodIok.crl (hash: zEH3Zswaralq/G5Tz/3ENtTNbtv79bGnPw3n1HePWFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:f6:04:05:b1:28:97:f8:a5:c8:31:59:e6:99:40:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Validity
Not Before: Sep 28 03:01:40 2026 GMT
Not After : Sep 29 03:01:40 2026 GMT
Subject: CN=dece11bf98f7fb98166aa507fc2ac3eccc414bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:13:7b:db:fa:7e:ce:d2:ca:ed:1c:03:76:86:
2e:f5:8f:d3:69:17:c3:76:4f:37:48:4d:10:ff:4c:
86:09:ef:8e:13:2c:e7:3a:c7:eb:06:1c:93:01:90:
a3:9b:af:f7:81:12:5d:2c:77:28:f3:3b:7b:d0:14:
85:bd:94:b8:a9:b6:85:8a:81:32:cd:f8:e8:87:12:
bf:5c:e3:a2:79:42:ae:25:45:d1:59:ef:b5:6c:01:
b1:b1:aa:f9:c3:13:d8:a1:5a:a1:23:e5:c9:9a:be:
0e:8f:02:85:ca:30:03:03:35:21:f5:e5:b9:b2:0e:
f9:1d:70:e1:fe:84:a8:cf:ca:45:fb:73:fa:09:c1:
cc:ef:ec:28:81:76:c0:cc:f6:47:31:8c:bf:6f:65:
63:56:ce:c7:1d:5a:a7:06:0a:27:03:6c:66:fc:8a:
ee:4b:7a:29:c6:3f:3b:06:47:21:95:f5:78:da:2f:
f4:ce:7f:76:2a:1f:42:01:07:62:5f:5a:62:53:6d:
06:a3:7c:ea:ce:d7:8c:9b:2c:69:0f:b8:24:87:9f:
86:94:de:33:66:9d:91:0e:76:29:f1:63:a2:fa:3f:
b6:31:2e:55:b4:ac:af:c9:f6:1e:b7:24:c3:db:95:
50:57:93:fd:a9:d0:a4:a7:b8:ec:3a:14:d7:a0:ad:
a3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CE:11:BF:98:F7:FB:98:16:6A:A5:07:FC:2A:C3:EC:CC:41:4B:C5
X509v3 Authority Key Identifier:
keyid:CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f4:05:ab:6a:68:bf:3e:d5:6e:c2:9b:e7:c9:33:bd:80:31:
7d:63:c0:19:6a:ea:03:d1:d3:73:44:ab:f0:d2:fd:84:a6:78:
05:38:8c:ae:c7:2b:53:12:dd:d9:48:e2:e0:9c:4e:f8:00:33:
3a:a2:a8:b7:ce:fa:91:1a:72:93:f2:12:ca:bd:18:f1:53:4c:
ff:95:b9:9f:07:e7:f7:68:21:aa:42:e8:8c:5f:93:45:3a:26:
cf:6f:43:5c:68:ab:a6:a6:c0:28:ac:dd:30:e5:4a:d0:8e:ed:
fd:7c:dc:42:1d:e5:a4:73:6f:09:1b:b0:98:dd:37:c7:c8:62:
1b:ed:9e:1b:f6:28:7b:4c:0e:48:a9:5e:af:af:a6:dd:5a:d2:
d9:d3:c0:41:98:11:74:4d:b7:37:62:c3:41:29:4e:b8:55:f4:
6a:d5:30:3f:db:3f:5d:60:f9:29:30:ce:0b:15:59:00:8a:56:
97:b8:4c:d0:f9:f6:94:f4:61:a1:20:31:67:0e:03:49:97:3b:
ad:38:26:3b:28:fb:30:90:a6:74:b7:c1:b6:64:30:05:02:03:
1c:a3:c2:26:24:ee:1d:da:32:78:a6:d8:20:9f:67:7e:ee:b6:
29:9c:12:96:a2:23:0f:9d:2e:89:04:a4:3b:1c:fe:55:fe:a0:
0c:25:f0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:47:14 2026 by rpki-client