Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
File: zUBlln3sCStfyQFS5KlTObodIok.mft (raw, json)
Hash identifier: GKdzABqfsetOVP1/3ZLfQOs3e2ne7dMWgk6d9ndusOk=
Subject key identifier: E7:8A:06:33:84:C3:57:ED:0F:2E:E2:72:FF:65:66:C5:05:3B:94:3C
Authority key identifier: CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
Certificate issuer: /CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Certificate serial: 01A0D2A5F0C15B6C8079328614B587DE1725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
Manifest number: 10C4
Signing time: Thu 24 Sep 2026 09:01:25 +0000
Manifest this update: Thu 24 Sep 2026 09:01:25 +0000
Manifest next update: Fri 25 Sep 2026 09:01:25 +0000
Files and hashes: 1: wRE9U-STcq388gs--_aR0rhDAmE.roa (hash: PeDJ2qi9G/BGwM64tes30qEst81Dt7OlqBewf1kK90o=)
2: zUBlln3sCStfyQFS5KlTObodIok.crl (hash: fuS6tRc0RTNYjEsmvlXQoKZC0rDVjewEi3B/C+4Y/r8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 09:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a5:f0:c1:5b:6c:80:79:32:86:14:b5:87:de:17:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Validity
Not Before: Sep 24 09:01:25 2026 GMT
Not After : Sep 25 09:01:25 2026 GMT
Subject: CN=e78a063384c357ed0f2ee272ff6566c5053b943c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3f:4d:28:6a:0f:db:ef:40:11:aa:fd:7e:71:
ac:58:8b:28:3f:39:41:2c:1b:5a:15:f6:52:d4:ac:
27:8a:fc:a8:c9:1e:3b:34:a8:85:ed:e3:a2:2f:7c:
bd:14:8d:2c:b3:b2:d6:36:6a:e2:2c:a0:46:43:eb:
86:c8:fa:52:88:ac:48:04:0b:32:d3:b8:6b:60:9d:
c8:b3:98:bb:c0:7e:24:0b:be:7a:3b:8a:44:2e:44:
bb:cc:eb:33:65:4f:b1:1b:0b:1d:85:69:87:72:76:
15:30:f4:77:3c:57:8a:f1:46:38:76:91:a3:7f:e0:
a9:53:2e:0f:bb:98:e3:ff:db:d0:b9:e9:02:93:86:
7d:64:76:25:1f:1c:ac:d2:c6:dd:2f:ab:df:95:24:
d5:2b:e2:e5:b2:43:46:d2:d3:3a:0e:f8:c1:e1:80:
c7:fe:ba:52:90:f9:88:b1:57:c5:83:9d:50:23:b2:
24:3c:83:0d:3f:0c:b3:82:c5:1b:22:39:6a:05:cd:
6e:37:45:a1:6d:5d:5d:c3:83:1a:54:7e:33:07:d8:
35:7e:33:2d:d7:1c:7b:df:77:95:1e:a6:9d:83:15:
6f:36:96:f2:0b:9c:6f:5e:b7:ba:a5:b2:4b:bd:7f:
76:24:b8:b2:bd:40:37:67:b4:14:b4:e6:83:da:c2:
70:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8A:06:33:84:C3:57:ED:0F:2E:E2:72:FF:65:66:C5:05:3B:94:3C
X509v3 Authority Key Identifier:
keyid:CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:9e:f0:c8:01:f4:dd:c0:3c:c8:e7:b8:b5:88:4a:c5:ea:22:
1b:1e:c5:1c:71:d7:fb:ac:a5:a0:31:9e:0f:a3:9f:16:3d:f4:
18:d6:c5:24:6b:fb:b8:8e:8a:8a:32:25:ef:68:e8:8f:8d:7b:
32:53:c3:da:62:00:27:8d:10:b0:ae:05:36:4c:83:50:ac:ad:
a9:a1:e2:fa:fc:a6:23:5f:0f:30:77:44:12:eb:11:e9:8f:28:
9e:9e:d2:d0:ca:cc:20:c7:01:48:db:f1:bc:12:4c:31:08:9f:
88:db:d4:14:7d:d5:6e:55:26:ca:3b:ef:2f:51:c8:77:1b:84:
d7:b7:af:d1:b5:c8:75:f1:17:ae:b4:59:c7:ec:a1:96:87:11:
ca:12:68:de:dd:5f:ac:8b:ce:13:46:63:49:dd:6d:d8:27:25:
5b:81:d1:74:44:82:f9:72:a2:8d:2b:60:92:2d:dc:0c:4d:0d:
0c:f3:ba:a3:82:fa:52:02:ef:d5:63:e5:c4:eb:08:b2:c8:6f:
f0:b6:13:71:2d:bf:7d:1c:ca:d4:1c:3c:03:43:86:b3:62:45:
64:db:97:4a:6e:87:6f:99:1c:bf:79:7c:20:88:99:46:d1:fb:
77:53:69:8f:fe:d9:2a:8e:b1:3f:bf:66:95:86:ba:73:22:98:
d3:9c:86:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:30:25 2026 by rpki-client