Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
File: zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft (raw, json)
Hash identifier: 5nyw37IGcpmEF1vJrQ2X3VL3uF5+2+vz605SMV85v3A=
Subject key identifier: 76:A5:1E:08:0C:EF:7C:E2:EF:FB:2F:EA:79:32:A0:14:90:77:30:9C
Authority key identifier: CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
Certificate issuer: /CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Certificate serial: 019CAB6AC91E48BCD4225EC0B1D2FBA24422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
Manifest number: 0F2E
Signing time: Sun 01 Mar 2026 22:00:28 +0000
Manifest this update: Sun 01 Mar 2026 22:00:28 +0000
Manifest next update: Mon 02 Mar 2026 22:00:28 +0000
Files and hashes: 1: KAcxy9c3kuEaoLAu20siPp3ZrbE.roa (hash: ncQUshO4D4+UWIA/eL4LLcWTdV5i8md5oxXrgxBi3HM=)
2: Y5V8BmZBOFe2ZKISRO6sSTQ8CCw.roa (hash: 76JvlwhSTewzOSSgXR9rjTADjFwpt7Eh69G6wYZk9Ws=)
3: zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl (hash: TP10RBvgjfaODl89zP6q3qlX+6CABObJWBFkFYwCv0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:c9:1e:48:bc:d4:22:5e:c0:b1:d2:fb:a2:44:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Validity
Not Before: Mar 1 22:00:28 2026 GMT
Not After : Mar 2 22:00:28 2026 GMT
Subject: CN=76a51e080cef7ce2effb2fea7932a0149077309c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:83:d3:95:dc:81:a7:4c:4e:5c:d0:83:35:23:
09:71:1e:1a:fb:5d:96:8c:75:fa:48:05:cd:39:d2:
ee:67:c7:48:e6:ad:cd:47:9e:33:d9:87:33:bf:2f:
ab:e5:13:5a:f8:ac:79:db:c4:5a:76:2b:c5:90:b9:
67:4b:a8:78:a0:3c:6a:eb:b7:97:18:2e:58:bf:3b:
54:66:d3:98:d7:90:60:be:2f:49:ad:21:03:86:21:
d0:7f:87:76:9c:38:6c:a0:37:c6:5e:3a:f0:23:81:
7c:28:ed:79:f9:74:33:6f:d2:d8:97:9a:80:4f:9e:
d7:c3:e5:09:a4:77:a9:63:a1:97:3c:38:2b:e9:b0:
34:48:96:ee:61:bb:04:27:55:28:28:ab:d6:f1:53:
c3:8e:69:d7:78:d7:24:4c:48:91:ae:4d:fc:96:5b:
82:85:49:de:25:bf:30:44:2f:f4:b2:6a:ae:a4:64:
c7:0b:f7:68:78:5e:26:50:2f:03:92:57:d5:9b:da:
3f:be:02:f1:5e:64:fa:30:12:9a:bf:1f:45:25:c2:
fc:39:c2:15:92:89:a9:5d:79:c7:b0:01:1d:f0:c4:
2e:a5:77:9a:b5:92:a1:b3:db:30:79:a5:4a:ce:1c:
e3:f1:8a:93:68:3b:46:17:ea:d2:a4:6f:fd:56:c6:
45:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A5:1E:08:0C:EF:7C:E2:EF:FB:2F:EA:79:32:A0:14:90:77:30:9C
X509v3 Authority Key Identifier:
keyid:CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d4:47:78:84:c9:08:fb:01:0c:aa:2e:c8:fd:87:bf:54:d0:
0d:c2:2b:5c:c8:cb:89:a9:f6:0f:57:04:b9:f8:79:ab:c1:32:
61:c2:c1:f3:7f:6a:bf:c6:cb:63:1b:b3:a7:f3:72:08:47:f3:
5e:94:84:35:43:3d:87:d3:7a:d8:ef:7d:ec:87:02:06:ca:6d:
86:d3:45:09:fd:d7:06:d4:73:aa:7d:6d:53:18:36:77:67:b3:
2c:b9:97:78:89:99:b6:b9:95:41:21:ca:7b:42:f8:b9:e5:36:
76:35:52:f9:7f:2c:09:e8:bd:a5:26:da:f9:5a:d8:2c:64:81:
3d:bd:32:da:19:a3:6c:c1:e2:6f:ba:35:99:4a:94:56:98:d4:
90:e1:56:d2:e6:e5:91:a7:5f:f2:85:fc:0e:a3:8e:7b:2d:7c:
20:92:d4:70:02:08:a7:eb:5f:a0:fd:12:16:8d:58:b6:4b:c7:
b9:e7:ce:e4:3a:68:ec:91:b2:c9:50:3c:5c:4f:07:6d:e1:9f:
3b:83:b7:cf:17:9d:b1:36:fe:b4:b7:38:dc:43:8c:48:dd:95:
6f:8d:27:e4:b6:ee:52:a1:af:af:79:ce:93:ce:eb:be:68:37:
b8:fa:17:71:9b:c3:e6:b5:04:3a:ec:3a:b1:23:c8:12:45:5a:
07:b7:5c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:28:37 2026 by rpki-client