Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
File: zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft (raw, json)
Hash identifier: ufeU7bqV4+Jk4ZtTAU1jjy1Uh+Bg+pzbuhecZh6t8wM=
Subject key identifier: 48:95:5A:D6:E6:35:95:F7:95:38:C8:A6:94:23:00:88:2D:37:0D:05
Authority key identifier: CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
Certificate issuer: /CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Certificate serial: 019D9AE33C6D0B24A7ABEA9F310E4008D040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
Manifest number: 0FAA
Signing time: Fri 17 Apr 2026 10:01:16 +0000
Manifest this update: Fri 17 Apr 2026 10:01:16 +0000
Manifest next update: Sat 18 Apr 2026 10:01:16 +0000
Files and hashes: 1: KAcxy9c3kuEaoLAu20siPp3ZrbE.roa (hash: ncQUshO4D4+UWIA/eL4LLcWTdV5i8md5oxXrgxBi3HM=)
2: Y5V8BmZBOFe2ZKISRO6sSTQ8CCw.roa (hash: 76JvlwhSTewzOSSgXR9rjTADjFwpt7Eh69G6wYZk9Ws=)
3: zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl (hash: xg8UwTQul9QlwbaRwwbapP3Gjlf3RyaUrOMXP+sx8jY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:3c:6d:0b:24:a7:ab:ea:9f:31:0e:40:08:d0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Validity
Not Before: Apr 17 10:01:16 2026 GMT
Not After : Apr 18 10:01:16 2026 GMT
Subject: CN=48955ad6e63595f79538c8a6942300882d370d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1c:3e:d8:20:7d:5f:ec:d6:a4:ee:f6:9c:18:
bf:e5:1f:a0:72:e5:b5:32:33:d0:60:0f:4d:36:82:
27:6b:59:92:fd:29:cd:f5:df:0a:48:62:16:43:96:
b8:08:c3:ee:99:f5:4b:72:53:b7:b4:5a:6b:ac:ae:
bd:1e:90:f2:f9:0c:4e:5d:1f:e7:3e:26:5c:06:c5:
93:80:f3:cc:1e:90:33:03:11:d5:43:fa:e2:89:ed:
82:6c:9d:d3:d1:37:af:40:b9:2e:bf:cf:f1:2c:af:
ac:bf:3c:33:c8:29:cf:fe:a7:d5:ba:e0:ec:b6:7f:
2a:1b:2c:3f:25:af:c4:f5:eb:2c:3f:46:28:19:43:
77:0a:71:98:9e:bb:c3:3d:cd:fe:43:9c:7f:28:f1:
6e:c4:eb:56:07:7f:83:02:94:89:bc:d5:91:aa:9f:
dd:81:21:49:dc:07:8b:2c:e4:19:c1:42:58:6b:6a:
b0:ae:50:2d:9d:c8:bb:59:f3:19:36:e3:67:d7:4a:
73:87:d6:29:f1:32:01:8a:c4:52:b9:8f:43:0e:40:
c0:49:99:49:a1:ae:8e:54:40:16:de:34:31:57:0c:
f8:8e:d0:64:0b:35:41:88:03:d3:db:56:87:fd:ac:
c3:f4:6e:83:94:d8:ac:34:43:bc:e5:08:cd:34:82:
f6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:95:5A:D6:E6:35:95:F7:95:38:C8:A6:94:23:00:88:2D:37:0D:05
X509v3 Authority Key Identifier:
keyid:CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:86:6c:93:75:13:97:d9:d3:0e:65:b9:16:1f:6e:a2:89:12:
b4:78:9e:f2:e6:f6:64:df:9f:36:ba:a5:90:ae:b1:58:c4:20:
43:75:f7:df:4c:97:d3:22:ae:66:d7:8b:d2:0c:b2:13:9d:06:
eb:0f:46:5b:19:9f:09:88:02:11:c1:bb:4e:2b:9c:de:2c:73:
57:63:3a:4c:b2:f5:c9:59:09:04:71:41:d8:aa:99:b9:94:69:
9e:2a:43:6c:d2:d2:60:2d:0b:c0:b1:69:a9:8d:81:2c:21:8d:
92:b2:8a:16:36:8a:63:44:48:26:7d:5d:b3:2c:0a:af:af:f4:
1d:10:9a:e7:e5:d4:d0:c9:5e:0c:f7:64:a6:1c:17:d0:85:af:
0e:74:60:ac:71:18:30:03:94:ca:db:eb:ee:3d:19:ab:17:87:
58:39:75:23:be:08:de:dd:c7:45:06:6f:76:1c:34:9f:6b:32:
30:8c:3e:b0:5b:40:2e:e7:e3:4b:e2:f5:4c:b1:bf:d0:53:f3:
ca:3f:2a:73:99:9c:56:4d:33:7f:d5:62:2f:b7:f0:6c:18:54:
49:4f:e9:a0:2f:49:8e:51:b6:3a:97:15:27:2e:dc:89:ee:23:
7e:04:68:1c:bc:e4:9d:14:d7:a0:86:c2:dd:ba:8d:57:80:f3:
fd:c1:99:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:19:55 2026 by rpki-client