Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
File: zUBlln3sCStfyQFS5KlTObodIok.mft (raw, json)
Hash identifier: Nt8Lv3adEXy54Bwv0qEgWPf/wep/vQln2TecFmcMeOo=
Subject key identifier: 72:FD:31:E4:3B:38:C3:73:61:2D:A4:30:19:70:B4:6A:F8:AC:9D:61
Authority key identifier: CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
Certificate issuer: /CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Certificate serial: 019D38D303AE3FC656CCE30170132E22E2A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
Manifest number: 0EE6
Signing time: Sun 29 Mar 2026 09:00:46 +0000
Manifest this update: Sun 29 Mar 2026 09:00:46 +0000
Manifest next update: Mon 30 Mar 2026 09:00:46 +0000
Files and hashes: 1: FkRKPYmdQ_5Uw6uf-qrKiu1z604.roa (hash: 7d3RQe8zUsFi/wr7V2puj4vtJZCBuk3sMl8g2gQ6BlI=)
2: zUBlln3sCStfyQFS5KlTObodIok.crl (hash: uhfF4GqmepJct0SKZudtPd6Ecv1t4/zwgVdRXWfraVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:03:ae:3f:c6:56:cc:e3:01:70:13:2e:22:e2:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Validity
Not Before: Mar 29 09:00:46 2026 GMT
Not After : Mar 30 09:00:46 2026 GMT
Subject: CN=72fd31e43b38c373612da4301970b46af8ac9d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:48:43:b6:33:5e:99:c0:e0:65:46:7a:5b:bd:
15:39:9b:84:2b:ca:1c:3d:18:8f:23:fe:9d:86:13:
23:3a:f4:00:0e:c1:fe:bd:25:08:50:99:f3:fb:ff:
3f:f4:9f:a6:d5:b4:2b:08:c4:99:c8:e6:ca:44:4e:
67:a5:80:e5:bb:0f:0f:9b:5b:4b:5a:b4:d9:3a:ce:
ab:8b:f4:c6:75:59:a9:28:22:9d:87:f8:a4:99:20:
9e:93:4a:d9:cc:4e:08:9d:3a:7b:15:a4:53:ed:03:
b0:a0:c0:1d:0e:d3:aa:b1:bf:75:d5:e7:7c:4f:e0:
d2:bf:c3:1e:17:b9:4c:69:5a:42:30:bc:a0:56:66:
7d:3c:ee:ab:cc:43:fa:70:02:b3:33:0b:2c:82:3a:
91:da:64:bf:e1:ef:68:9a:95:a1:7d:0b:ea:95:a7:
f9:37:21:e0:13:43:39:a3:f3:34:38:d5:ec:c0:f1:
74:71:c3:06:03:7b:28:b1:6a:8d:05:bc:f3:8d:ab:
c7:4f:80:73:a2:d8:e3:8b:e4:e7:7a:13:5e:4d:e5:
9e:13:0a:fa:27:84:6d:bc:7c:8b:cd:1c:dc:c2:d8:
2f:c3:40:6a:38:e2:b6:00:91:d7:48:5f:90:4f:8f:
6d:c7:a3:40:8d:42:c1:fb:b7:23:6e:fd:5c:08:2f:
24:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FD:31:E4:3B:38:C3:73:61:2D:A4:30:19:70:B4:6A:F8:AC:9D:61
X509v3 Authority Key Identifier:
keyid:CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:8e:57:ce:47:33:78:10:d8:39:6a:90:8c:39:c2:0f:ef:d8:
8e:d0:7a:80:e4:a2:60:ae:61:7b:9a:cb:12:1b:25:f7:78:51:
88:c4:7c:d8:ce:fa:de:35:d2:fb:03:8a:1c:52:d4:9f:9b:92:
7d:81:7c:a7:e4:c0:5f:95:ec:02:72:d7:16:d1:6f:a2:da:53:
64:b4:99:59:89:59:d4:65:1a:b1:1c:07:79:9f:54:b4:59:0c:
3a:de:a6:49:18:0b:a3:41:5b:c5:ea:23:e2:9a:72:cd:de:4e:
9c:b5:9a:81:38:6d:a9:2c:9a:21:ac:c5:42:e3:c6:52:64:14:
5a:78:88:97:56:69:c6:17:0f:0e:95:66:1f:2d:61:3c:e3:f4:
e0:d1:a2:45:61:50:bb:d3:ae:53:a6:2c:e2:3e:b1:f2:23:17:
f4:e5:36:10:ae:a2:38:a4:30:03:26:0e:f2:06:ab:d1:43:5a:
1c:70:e7:4a:45:37:89:73:9c:62:35:7c:ab:06:d2:c6:51:cd:
99:0e:6b:29:c9:ed:f1:56:8d:99:d6:c2:e7:23:03:32:44:b5:
43:16:c0:3a:e7:98:50:6b:5f:98:d0:08:9a:0b:ec:46:74:23:
e5:05:58:65:07:36:76:06:32:f5:28:a7:83:93:26:8a:16:ca:
4e:69:63:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:47 2026 by rpki-client