Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
File: zUBlln3sCStfyQFS5KlTObodIok.mft (raw, json)
Hash identifier: MhbQg283CwJPUm8h1y5F+Hs/Kep63FKI9LaqKVtVGb4=
Subject key identifier: 6B:EB:4F:FB:1F:FE:EE:9D:97:20:28:D0:E3:86:AA:68:78:28:44:8B
Authority key identifier: CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
Certificate issuer: /CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Certificate serial: 019F829E1C5D6E7AF0BE0397CD861FABE391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
Manifest number: 1016
Signing time: Tue 21 Jul 2026 03:00:27 +0000
Manifest this update: Tue 21 Jul 2026 03:00:27 +0000
Manifest next update: Wed 22 Jul 2026 03:00:27 +0000
Files and hashes: 1: wRE9U-STcq388gs--_aR0rhDAmE.roa (hash: PeDJ2qi9G/BGwM64tes30qEst81Dt7OlqBewf1kK90o=)
2: zUBlln3sCStfyQFS5KlTObodIok.crl (hash: 1kcE9LvRQWTs1cjIOshSDQpcw3uk1xZGIJby7J64/Uc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:9e:1c:5d:6e:7a:f0:be:03:97:cd:86:1f:ab:e3:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Validity
Not Before: Jul 21 03:00:27 2026 GMT
Not After : Jul 22 03:00:27 2026 GMT
Subject: CN=6beb4ffb1ffeee9d972028d0e386aa687828448b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:85:fa:9a:a7:25:40:19:e4:e4:21:6c:7d:bf:
6c:b3:5f:9c:56:7b:4e:27:a8:6b:19:47:c4:d7:72:
e7:a0:e3:6e:a8:6c:fc:1c:f0:0b:87:57:3b:a3:6e:
82:66:90:d7:62:9c:3b:52:8f:87:5b:3a:ae:9d:13:
dc:dc:62:c9:a4:b3:a3:b5:a6:74:66:7d:7f:84:3c:
f3:de:7e:48:cd:0e:02:16:14:00:c5:8d:0d:7b:8e:
09:33:fa:83:37:ab:83:d7:1f:01:2b:0b:22:ba:c0:
02:19:9b:1f:8e:60:cc:6d:66:ed:64:73:cd:b2:db:
2b:b5:0b:2e:bd:4f:92:c4:f9:d0:fb:b1:92:3b:65:
80:7b:02:d8:0a:cb:c6:fc:6f:43:cb:3e:fa:00:7e:
f9:f0:ab:e7:d5:78:68:79:8a:25:99:ab:d1:04:2f:
29:3c:bd:ef:b8:ab:7b:a0:90:18:12:00:ed:d2:b7:
50:6c:08:61:39:57:af:82:6e:3c:91:ef:02:b2:cf:
8a:ed:69:e3:42:4d:07:90:26:78:ce:6e:ad:c9:2e:
58:ce:df:2e:c8:f6:56:de:af:20:15:0e:6b:21:2c:
f1:06:54:a4:9c:ac:fa:f8:19:5d:6e:6d:65:d9:d7:
05:da:06:4f:f5:d2:53:80:c0:6c:7c:ba:d8:09:cc:
ef:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:EB:4F:FB:1F:FE:EE:9D:97:20:28:D0:E3:86:AA:68:78:28:44:8B
X509v3 Authority Key Identifier:
keyid:CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ea:c3:3c:cc:51:43:11:66:18:69:5b:22:f1:83:33:3b:8b:
f6:44:39:29:f4:26:74:36:78:8e:22:3e:7d:30:63:4f:03:21:
df:bb:33:94:62:07:09:05:0c:24:12:5d:f5:b6:4b:10:26:e6:
01:e1:79:c1:16:30:d3:fe:8d:d8:5d:aa:7b:13:7e:11:6b:28:
3e:39:13:6b:87:fb:9e:07:9a:7f:cf:ea:2c:e6:98:b1:9a:0c:
ee:7d:1c:64:b4:36:ff:54:11:54:15:46:e5:35:a9:f3:e2:58:
51:34:3d:eb:fb:f0:4e:8c:5a:01:a7:71:7f:ad:aa:99:be:fe:
63:50:b5:30:ba:24:6f:30:7e:43:2c:0d:c5:00:2b:f1:13:8d:
f7:69:0e:d6:1b:09:0d:3a:3a:bc:8d:6a:a8:64:7f:af:33:a9:
3a:e2:86:b6:3a:6f:bd:58:c0:30:6f:b7:a4:55:54:6e:7a:2e:
97:6e:52:b2:13:bb:ca:86:80:cb:39:40:97:06:00:60:8d:bb:
0c:dc:41:93:97:5f:fb:29:14:30:b1:1a:2a:49:11:26:25:a8:
09:54:f2:ce:64:e7:7c:f0:79:4f:6d:0a:08:ed:f3:94:71:0b:
80:9f:a8:8b:8f:00:ce:46:2e:91:ca:03:ab:f2:4a:8f:c7:71:
17:d8:55:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:44:12 2026 by rpki-client