Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
File: zUBlln3sCStfyQFS5KlTObodIok.mft (raw, json)
Hash identifier: /NvcKbA8amQlNXEtYS6j/ACFJ1FpXRGFHZF82abXXwI=
Subject key identifier: 66:8C:78:CC:13:90:3B:D5:8B:77:53:64:D3:05:E9:64:94:FE:A2:1A
Authority key identifier: CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
Certificate issuer: /CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Certificate serial: 019F92113965328E0303D31EF3ECF7749A7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
Manifest number: 101E
Signing time: Fri 24 Jul 2026 03:00:30 +0000
Manifest this update: Fri 24 Jul 2026 03:00:30 +0000
Manifest next update: Sat 25 Jul 2026 03:00:30 +0000
Files and hashes: 1: wRE9U-STcq388gs--_aR0rhDAmE.roa (hash: PeDJ2qi9G/BGwM64tes30qEst81Dt7OlqBewf1kK90o=)
2: zUBlln3sCStfyQFS5KlTObodIok.crl (hash: quaSxn5jjTv+C+zupBzEJ1j4RmcY2XIxgY0X7pLllak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:39:65:32:8e:03:03:d3:1e:f3:ec:f7:74:9a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Validity
Not Before: Jul 24 03:00:30 2026 GMT
Not After : Jul 25 03:00:30 2026 GMT
Subject: CN=668c78cc13903bd58b775364d305e96494fea21a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0d:f5:22:ff:f4:e3:c6:6f:be:0c:f6:e6:6b:
fe:59:9c:e5:59:e5:f1:cf:15:6c:be:a2:5e:14:bc:
5b:17:f8:be:20:60:18:be:43:fa:ba:62:6b:27:df:
6c:93:e2:61:60:e0:ad:6b:8e:74:0a:a0:a0:75:23:
d9:9f:c9:32:51:ac:41:13:fe:59:f2:96:1f:b2:b6:
3e:35:66:2b:3f:3e:73:e0:73:e2:99:d2:3b:a5:26:
6e:e5:f5:d6:b8:e5:ee:dc:a4:40:c5:46:6a:ac:d2:
7c:26:73:99:67:03:33:0d:27:75:be:31:5f:66:2f:
92:a4:77:ed:97:71:b6:80:e5:0e:26:bc:f9:d8:20:
dd:f5:e4:ba:87:47:c4:e4:2d:c5:82:70:27:15:e7:
65:12:f3:bd:1b:db:98:04:8c:c5:8c:18:0b:14:08:
2e:10:0e:3b:f1:08:05:b0:57:76:4f:57:1f:a2:45:
ee:79:be:f4:7f:fd:36:1d:e3:15:35:8d:18:a4:d8:
23:ca:76:c1:1c:72:e2:e1:2a:c1:01:08:0e:66:ad:
7f:4b:5a:a8:b0:54:15:5b:69:33:c0:fe:20:64:d0:
0e:d9:04:09:70:08:de:14:85:17:45:6b:50:11:74:
8c:04:8c:2a:8d:e9:55:2c:09:2c:81:7c:94:02:0b:
60:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8C:78:CC:13:90:3B:D5:8B:77:53:64:D3:05:E9:64:94:FE:A2:1A
X509v3 Authority Key Identifier:
keyid:CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:b2:98:c9:f6:2c:94:7f:e1:f7:a2:f7:b7:d7:f7:9c:59:03:
4e:27:88:c4:13:14:87:0e:2b:89:fb:f1:f9:44:cb:30:e7:44:
9e:e1:87:2a:32:d4:b8:00:43:0e:5a:dc:53:95:76:13:81:7e:
dd:0b:ff:98:4a:54:d3:d7:83:49:74:57:f1:1e:62:e1:2c:f4:
af:77:58:c6:81:cb:e7:5e:5f:67:a6:cc:9f:91:08:60:46:f8:
5d:49:38:7b:0f:f6:ce:98:1f:e7:f0:f3:6b:d6:04:c4:3f:a4:
01:7c:98:7b:ee:c1:19:97:09:49:3e:25:93:43:29:ee:76:ba:
d9:cb:d4:14:f2:f6:77:e9:27:b8:4a:0e:d1:c3:fd:21:70:34:
35:4e:a0:c7:9c:8c:b0:d1:4b:20:bf:63:79:e3:cd:e1:d5:f4:
8a:bb:35:b6:8f:74:9f:30:e6:d8:08:da:a2:c2:8b:89:94:49:
74:bd:68:81:6c:3f:8b:1f:d1:19:13:40:47:ee:e2:98:d7:7e:
a1:34:3f:73:18:0f:ee:ca:f5:ae:50:19:6c:c5:fb:14:22:73:
bc:2d:0a:a0:47:4c:c9:85:e4:b8:94:fc:1c:a4:31:5c:3d:fe:
6c:7a:27:11:17:3c:b5:cf:0b:b4:1a:be:73:5a:3a:cb:fb:c6:
d4:2e:db:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:33:44 2026 by rpki-client