Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
File: zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft (raw, json)
Hash identifier: 1kMeaMVPGpfNZTH8IrLDyPPmit7DNokijv/Yb0mTES0=
Subject key identifier: EE:C0:68:89:04:75:9C:FE:11:80:73:EE:6E:D1:F9:67:36:A3:8F:F9
Authority key identifier: CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
Certificate issuer: /CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Certificate serial: 019FAA1A967A8AAED1D2687EEEF9498250C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
Manifest number: 10BB
Signing time: Tue 28 Jul 2026 19:01:36 +0000
Manifest this update: Tue 28 Jul 2026 19:01:36 +0000
Manifest next update: Wed 29 Jul 2026 19:01:36 +0000
Files and hashes: 1: KAcxy9c3kuEaoLAu20siPp3ZrbE.roa (hash: ncQUshO4D4+UWIA/eL4LLcWTdV5i8md5oxXrgxBi3HM=)
2: Y5V8BmZBOFe2ZKISRO6sSTQ8CCw.roa (hash: 76JvlwhSTewzOSSgXR9rjTADjFwpt7Eh69G6wYZk9Ws=)
3: zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl (hash: iTy5i3tQy77WosomTsto0FxOJXQFAASRM4S7B+2L5xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:96:7a:8a:ae:d1:d2:68:7e:ee:f9:49:82:50:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Validity
Not Before: Jul 28 19:01:36 2026 GMT
Not After : Jul 29 19:01:36 2026 GMT
Subject: CN=eec0688904759cfe118073ee6ed1f96736a38ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b9:da:c7:19:fb:c2:5b:8d:69:d1:44:14:25:
a0:a5:38:7f:03:cf:10:7f:c5:95:4d:0a:b5:1a:21:
94:58:e4:30:12:1e:4b:26:cf:66:f1:9a:57:d3:92:
ae:96:9f:3b:e1:a7:83:53:3f:4d:86:07:6a:e0:19:
db:98:84:b9:35:06:ab:c3:bb:82:a4:65:05:bf:ca:
8e:b7:24:ae:42:44:84:c9:49:17:20:a9:b1:78:d2:
ae:39:31:63:ab:ff:61:7e:bc:10:f2:03:be:d3:35:
cb:64:73:63:96:02:72:44:28:b0:ee:78:a6:24:7d:
2b:6e:a1:8f:fd:0f:5e:65:63:80:6b:3b:d1:55:06:
6d:8d:82:12:1f:5f:3d:db:0d:56:c5:56:40:34:21:
e4:9f:44:f9:be:48:67:fb:e1:f6:a4:0c:73:59:0a:
d3:84:8f:de:f1:01:8e:b7:ae:55:63:de:0c:66:2b:
e8:66:a9:fd:79:16:f0:d0:f9:8e:88:f6:10:43:85:
02:5a:76:85:61:7c:04:a6:4b:c9:c4:1e:8a:b1:76:
1d:41:5f:ef:8a:fd:59:02:62:14:ef:30:4c:e9:8f:
c1:df:b2:c9:bd:48:6e:79:4b:7e:a0:6b:52:3d:4c:
3a:af:cb:89:6c:e2:a6:5f:d5:80:46:15:a2:7a:7e:
ac:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C0:68:89:04:75:9C:FE:11:80:73:EE:6E:D1:F9:67:36:A3:8F:F9
X509v3 Authority Key Identifier:
keyid:CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c2:2e:c4:1e:4d:0c:7d:8c:1e:c9:2e:e0:6a:08:a8:63:d8:
71:b7:fd:f8:b5:a0:76:97:fa:b4:3d:3e:db:4a:af:7f:a8:5d:
c2:fd:3e:19:4c:fd:66:cf:cd:93:5a:74:bd:57:0f:5a:96:dd:
a0:30:d5:a2:95:79:04:25:54:23:7d:99:78:6e:8c:d2:ce:1e:
34:a3:1b:fe:cd:4e:0e:b0:ad:33:b1:45:33:d0:0a:27:af:90:
76:5a:9c:26:72:1e:a5:f1:98:eb:17:cd:19:4b:08:a4:40:16:
50:b0:ea:fa:20:91:d5:f2:bb:33:22:9a:b7:94:10:b6:50:ba:
d7:3f:16:15:af:92:c8:b5:e8:f6:14:3b:48:0b:2a:8d:99:06:
68:de:23:fa:f2:52:f8:f4:01:ff:1c:f5:f4:c0:38:a9:1b:ca:
2b:c1:3c:fc:f9:de:fe:e9:67:9d:a6:41:72:c5:81:59:4b:55:
55:30:04:41:ab:0c:ef:78:fe:da:fe:7d:00:46:cd:56:3d:6f:
20:23:e5:e0:c8:fa:e4:b9:4b:4f:61:b5:e2:b8:95:f5:00:53:
18:8b:2b:04:dd:e5:3a:6f:08:17:07:20:ed:a1:cd:6f:c6:f3:
97:d9:89:b4:ff:92:51:f5:c6:7a:54:4f:e0:a3:c3:a8:f7:39:
b2:6c:fa:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:52:03 2026 by rpki-client