Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
File: zUBlln3sCStfyQFS5KlTObodIok.mft (raw, json)
Hash identifier: mY+SF4NE3w9IiO/D9HawBPUsZMXe7vAM/0VitK42EvI=
Subject key identifier: 03:F2:D1:70:C6:96:4E:9A:0D:8F:44:3E:CA:67:0D:18:7F:F7:E1:67
Authority key identifier: CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
Certificate issuer: /CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Certificate serial: 01A15BC2B71252AD3A94B677EE437262FCDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
Manifest number: 110B
Signing time: Wed 21 Oct 2026 00:00:49 +0000
Manifest this update: Wed 21 Oct 2026 00:00:49 +0000
Manifest next update: Thu 22 Oct 2026 00:00:49 +0000
Files and hashes: 1: wRE9U-STcq388gs--_aR0rhDAmE.roa (hash: PeDJ2qi9G/BGwM64tes30qEst81Dt7OlqBewf1kK90o=)
2: zUBlln3sCStfyQFS5KlTObodIok.crl (hash: +7LDK7Gno0evBZUFfhV4T4zeFYt8pZxKKF1fYqSslLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:c2:b7:12:52:ad:3a:94:b6:77:ee:43:72:62:fc:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Validity
Not Before: Oct 21 00:00:49 2026 GMT
Not After : Oct 22 00:00:49 2026 GMT
Subject: CN=03f2d170c6964e9a0d8f443eca670d187ff7e167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:87:50:57:cc:79:c5:68:03:04:f2:7e:d2:e5:
a6:c1:ee:b7:ac:9d:6f:7f:3d:64:c8:75:68:a8:39:
83:18:29:6d:5e:75:d6:33:8d:4d:a9:2a:2a:46:52:
53:d6:0e:ff:2e:6f:fa:7c:ea:5e:ba:b3:9c:58:a3:
8c:5f:42:e6:d7:6e:c9:e1:9a:67:54:d5:9e:b1:15:
2e:6f:7f:04:c8:67:64:20:e7:16:fc:8c:97:89:9a:
90:53:cb:e6:a1:5b:84:df:f8:42:39:3f:42:e5:8e:
c0:4a:b1:bc:1e:4e:e5:f5:49:24:cb:cb:8e:d3:ca:
25:e1:99:2f:fc:30:01:0c:18:c8:dd:ce:a1:af:9a:
8d:e2:76:03:ac:dd:01:26:f5:98:69:46:73:23:d5:
5c:2a:c0:b9:63:25:a2:d4:6c:54:f1:d6:9a:51:a7:
7a:68:1a:dd:ec:b2:5e:08:fc:7c:7d:48:bd:49:d8:
d4:72:32:5c:aa:17:6c:90:98:d3:74:14:cf:d4:96:
d6:11:56:ba:a7:47:ca:d9:43:72:38:12:c2:32:d7:
59:d3:26:2b:d4:c1:f4:85:01:36:76:15:e0:0e:12:
8d:90:37:0a:01:6a:55:b0:df:d6:d5:64:a2:d0:9c:
f6:61:ac:ef:fc:1e:ec:5f:53:b9:87:90:19:44:83:
ba:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F2:D1:70:C6:96:4E:9A:0D:8F:44:3E:CA:67:0D:18:7F:F7:E1:67
X509v3 Authority Key Identifier:
keyid:CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:89:56:b1:2e:aa:38:f2:f0:5b:79:f4:da:74:de:0e:04:cf:
22:44:7b:e7:f3:d2:ec:ea:86:eb:a0:1b:9f:c6:fa:45:8c:e9:
82:65:a0:38:c4:fb:d9:91:ac:ef:8e:09:38:94:f9:9b:4a:ac:
71:2f:c2:29:42:82:ea:67:e5:87:b6:0e:4b:db:79:e3:78:bf:
17:f8:ac:ba:c8:ee:28:7a:53:e6:21:e0:f9:c2:f5:4e:2f:18:
19:52:fc:66:62:a2:ee:55:99:7d:8a:6c:e8:78:89:04:02:5a:
da:0a:94:5c:1f:0a:94:71:88:cf:7f:6a:c4:a5:67:8e:3d:20:
4b:81:71:4a:26:be:69:b9:45:75:75:0e:75:7d:52:c1:41:81:
89:d4:7d:59:67:10:f0:ea:0e:d5:dc:9b:f1:8b:30:69:f4:10:
fd:ae:b0:4c:51:43:15:9c:c2:9d:3f:82:35:c0:cb:25:bf:5c:
09:60:0d:77:0a:9a:fc:f2:e8:39:60:fd:df:33:dd:ec:9e:1c:
6d:7b:11:29:09:93:26:d2:7b:a4:8e:03:e2:12:90:a1:ee:d2:
30:34:9c:6d:16:ec:fa:8f:e8:15:77:d5:9f:a4:be:1e:8c:12:
85:4a:13:81:48:e9:b6:3b:12:70:a4:5b:a5:e9:e3:22:96:3b:
c6:05:1d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 06:20:02 2026 by rpki-client