Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
File: zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft (raw, json)
Hash identifier: Tu50aIoH35D/Pk7Oqm8iPOHamNbuBpOHLDOLVSzZ034=
Subject key identifier: 1F:70:5D:70:07:FB:89:9D:CA:51:A2:F4:FC:B8:AD:84:D7:8D:DA:2D
Authority key identifier: CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
Certificate issuer: /CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Certificate serial: 019EC06DB3041BD47401DD89DBC012FD76BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
Manifest number: 1042
Signing time: Sat 13 Jun 2026 10:01:15 +0000
Manifest this update: Sat 13 Jun 2026 10:01:15 +0000
Manifest next update: Sun 14 Jun 2026 10:01:15 +0000
Files and hashes: 1: KAcxy9c3kuEaoLAu20siPp3ZrbE.roa (hash: ncQUshO4D4+UWIA/eL4LLcWTdV5i8md5oxXrgxBi3HM=)
2: Y5V8BmZBOFe2ZKISRO6sSTQ8CCw.roa (hash: 76JvlwhSTewzOSSgXR9rjTADjFwpt7Eh69G6wYZk9Ws=)
3: zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl (hash: hU4iZcs1aTVpw+fn6eoq9z8NijU7+i2Vke79rNvF9Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:b3:04:1b:d4:74:01:dd:89:db:c0:12:fd:76:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Validity
Not Before: Jun 13 10:01:15 2026 GMT
Not After : Jun 14 10:01:15 2026 GMT
Subject: CN=1f705d7007fb899dca51a2f4fcb8ad84d78dda2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a8:82:36:3c:29:31:fb:94:c9:ee:cc:ac:2a:
1d:02:19:62:ea:12:ac:a6:bc:07:07:a8:fb:2a:45:
53:26:85:a2:a3:2d:63:a8:e4:b1:95:16:a4:9f:52:
03:2a:fb:7b:b6:46:11:4e:69:96:37:b5:50:7c:de:
54:59:84:c4:d5:b2:a7:05:84:4e:52:ec:f6:e5:38:
bd:41:0c:d1:d3:a6:54:db:ed:2c:7a:a9:75:5f:62:
16:54:b3:2e:09:d4:99:09:ac:e8:4c:d9:34:7a:c0:
7e:66:b7:f5:30:1c:54:74:ef:ea:0f:f2:72:f1:1a:
dd:fa:17:14:61:e9:47:17:38:e2:9c:83:cb:b7:63:
b5:72:99:44:a3:da:ee:46:f4:84:e9:6c:51:63:3d:
e9:1b:f6:79:a6:09:2b:d1:5c:a2:c7:b7:c9:13:43:
a8:70:c9:ad:af:6a:e8:88:18:87:19:10:dc:09:97:
33:90:5a:95:c0:e2:91:7c:0a:36:72:df:34:d2:26:
0c:e4:56:d7:42:33:18:0a:41:c4:d0:b4:8b:61:ec:
42:22:a1:91:29:42:5e:38:7a:b2:58:09:b1:d9:b9:
af:2d:a3:d5:03:6d:c6:dc:03:34:68:fe:29:8f:23:
13:b3:d3:0d:c9:4d:1c:84:cd:0a:fc:b5:10:d6:37:
f7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:70:5D:70:07:FB:89:9D:CA:51:A2:F4:FC:B8:AD:84:D7:8D:DA:2D
X509v3 Authority Key Identifier:
keyid:CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:05:2e:4b:d0:29:b0:ab:27:bb:7c:7e:d8:8f:9c:ab:fb:91:
24:01:b5:43:4a:c8:d0:1c:6c:0e:1b:ca:82:18:fb:49:76:1f:
a3:2a:56:e6:ca:5c:26:40:35:b3:e0:f2:a3:b9:15:66:75:4e:
44:5c:dc:ee:08:19:be:1a:db:9d:94:67:8c:f4:73:d1:aa:77:
1b:dc:00:32:ba:03:88:e4:9d:f3:24:07:c7:9a:cf:e8:1e:71:
e1:7b:2f:35:46:81:ef:15:f0:21:f1:b4:df:ce:86:0e:75:1c:
45:01:f8:e6:76:81:d0:b4:27:32:a9:c4:d4:83:92:a4:9b:cc:
ba:1f:d8:07:16:d5:15:f6:df:b5:de:7d:3e:55:51:37:71:ce:
61:47:36:7f:3b:9c:64:55:a7:05:e7:c2:d1:f8:3e:6d:fe:6b:
fd:0b:29:11:ad:8b:de:c7:5c:76:bf:eb:7d:f7:64:f3:a4:7b:
69:f7:71:d4:9b:82:fa:3e:12:db:6c:b3:e9:ff:64:fb:2e:62:
eb:95:90:2c:3e:6e:74:4a:fa:01:86:6a:6e:77:a4:59:cc:a0:
a9:0d:0e:28:df:5c:f9:82:f6:28:dd:28:24:11:8b:e5:8a:b1:
2d:86:1a:59:6e:39:34:35:77:1a:fe:25:62:b1:8e:e5:51:8d:
d7:ff:0c:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7AbbMEG9R0Ad2J28AS/Xa+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjYjc1MzQxNTAwODA3YTk3NTBhOGNmNTViZjRlNDVmZjAz
ZjMxMmEwHhcNMjYwNjEzMTAwMTE1WhcNMjYwNjE0MTAwMTE1WjAzMTEwLwYDVQQD
EygxZjcwNWQ3MDA3ZmI4OTlkY2E1MWEyZjRmY2I4YWQ4NGQ3OGRkYTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaiCNjwpMfuUye7MrCodAhli6hKs
prwHB6j7KkVTJoWioy1jqOSxlRakn1IDKvt7tkYRTmmWN7VQfN5UWYTE1bKnBYRO
Uuz25Ti9QQzR06ZU2+0seql1X2IWVLMuCdSZCazoTNk0esB+Zrf1MBxUdO/qD/Jy
8Rrd+hcUYelHFzjinIPLt2O1cplEo9ruRvSE6WxRYz3pG/Z5pgkr0Vyix7fJE0Oo
cMmtr2roiBiHGRDcCZczkFqVwOKRfAo2ct800iYM5FbXQjMYCkHE0LSLYexCIqGR
KUJeOHqyWAmx2bmvLaPVA23G3AM0aP4pjyMTs9MNyU0chM0K/LUQ1jf3MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9wXXAH+4mdylGi9Py4rYTXjdotMB8GA1UdIwQY
MBaAFMy3U0FQCAepdQqM9Vv05F/wPzEqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekxkVFFWQUlCNmwxQ296MVdfVGtYX0FfTVNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lZmZiMmYtOWZiZi00ODhiLTkzMTUt
YTk5YTIxMDE1OTM3LzEvekxkVFFWQUlCNmwxQ296MVdfVGtYX0FfTVNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lZmZiMmYtOWZiZi00ODhiLTkzMTUtYTk5YTIxMDE1OTM3
LzEvekxkVFFWQUlCNmwxQ296MVdfVGtYX0FfTVNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjgUuS9Ap
sKsnu3x+2I+cq/uRJAG1Q0rI0BxsDhvKghj7SXYfoypW5spcJkA1s+Dyo7kVZnVO
RFzc7ggZvhrbnZRnjPRz0ap3G9wAMroDiOSd8yQHx5rP6B5x4XsvNUaB7xXwIfG0
386GDnUcRQH45naB0LQnMqnE1IOSpJvMuh/YBxbVFfbftd59PlVRN3HOYUc2fzuc
ZFWnBefC0fg+bf5r/QspEa2L3sdcdr/rffdk86R7afdx1JuC+j4S22yz6f9k+y5i
65WQLD5udEr6AYZqbnekWcygqQ0OKN9c+YL2KN0oJBGL5YqxLYYaWW45NDV3Gv4l
YrGO5VGN1/8MjQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:43:28 2026 by rpki-client