Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
File: zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft (raw, json)
Hash identifier: iSb9L1jFESuaEWhPIejZIyZYdA/kHS2jG4jeauJk/ic=
Subject key identifier: A4:8E:F2:88:2D:6F:24:3F:6F:AC:7A:BD:04:F7:E7:15:B1:CC:C1:EC
Authority key identifier: CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
Certificate issuer: /CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Certificate serial: 019F38292A2515B4C5E0EAA1F683EDECB355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
Manifest number: 1080
Signing time: Mon 06 Jul 2026 16:00:49 +0000
Manifest this update: Mon 06 Jul 2026 16:00:49 +0000
Manifest next update: Tue 07 Jul 2026 16:00:49 +0000
Files and hashes: 1: KAcxy9c3kuEaoLAu20siPp3ZrbE.roa (hash: ncQUshO4D4+UWIA/eL4LLcWTdV5i8md5oxXrgxBi3HM=)
2: Y5V8BmZBOFe2ZKISRO6sSTQ8CCw.roa (hash: 76JvlwhSTewzOSSgXR9rjTADjFwpt7Eh69G6wYZk9Ws=)
3: zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl (hash: BLQKAGIjdIppfuOccyDEMUM5st3bBLXRAde35VX83EA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:38:29:2a:25:15:b4:c5:e0:ea:a1:f6:83:ed:ec:b3:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Validity
Not Before: Jul 6 16:00:49 2026 GMT
Not After : Jul 7 16:00:49 2026 GMT
Subject: CN=a48ef2882d6f243f6fac7abd04f7e715b1ccc1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2d:d4:83:79:48:23:71:aa:fc:ad:5b:ef:a2:
92:1d:92:db:c8:0f:4c:fa:87:23:b8:3a:91:f1:a1:
18:1d:0a:56:56:b1:aa:c3:8b:ee:72:f3:d5:e1:bf:
c1:ab:20:48:43:64:a4:0d:b0:a5:4f:ab:29:15:18:
fc:2e:47:71:45:6c:32:5c:31:b6:0c:5f:c1:08:dd:
4f:93:10:ea:9d:b0:bd:d7:5c:4f:66:4d:76:cf:f2:
6b:89:2b:03:25:ba:73:f9:f6:f9:f9:d9:27:a9:6f:
ec:99:88:5e:34:8b:b8:55:db:1c:64:e5:a4:6f:ca:
9f:88:72:d1:ec:56:a5:27:ca:7b:20:97:69:9b:fb:
20:ac:40:e6:ef:ca:95:1e:1d:ed:7b:38:05:c7:d2:
1a:44:79:f9:9c:99:a2:01:38:76:f2:df:45:07:b7:
93:cd:a0:3a:99:0d:d8:60:00:14:a5:c3:1c:72:65:
de:c3:28:6f:3c:05:56:79:4e:f1:e5:08:c4:76:97:
3c:d8:1d:2d:9e:fb:14:41:67:e7:98:5b:14:f5:9a:
46:71:5b:22:9d:0b:7f:51:6c:ff:fe:d6:1c:76:95:
70:38:9c:91:86:44:d2:ac:4d:20:03:c2:4d:b2:77:
81:45:e8:c4:f5:03:9b:08:18:a5:a1:d2:61:88:5a:
bd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8E:F2:88:2D:6F:24:3F:6F:AC:7A:BD:04:F7:E7:15:B1:CC:C1:EC
X509v3 Authority Key Identifier:
keyid:CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:8e:91:c1:ef:a5:96:a7:36:92:11:f5:e4:e8:a3:dc:d9:63:
e1:fd:17:79:89:88:8a:09:b2:0e:e5:63:f6:4e:69:ff:b0:0c:
5d:9b:d1:65:35:ad:fa:a5:9d:fd:48:5e:d1:07:6e:aa:7e:da:
c8:11:55:93:0f:72:15:06:b8:74:a0:3a:cc:39:d7:bc:be:0a:
bd:1f:a6:a6:3f:cd:16:1f:23:28:9f:e4:eb:3b:c6:6a:d1:b8:
1d:b7:4e:cf:8e:3a:7f:5f:ad:f6:d1:80:f2:d3:d5:47:fa:21:
56:9c:76:24:dc:86:b3:51:ea:c9:aa:b0:53:91:c4:72:47:72:
33:9a:fe:06:9a:02:e8:3d:58:82:56:5a:9e:af:4f:20:c6:ff:
82:4b:a6:35:1e:1d:fc:7f:0d:85:bc:dc:ff:34:3b:96:b6:4c:
6d:5b:51:cd:5c:be:c4:d7:db:f8:a1:a6:b3:37:d6:34:c0:95:
1c:06:c5:dd:b6:f7:8b:53:04:16:82:44:85:e3:25:01:52:c5:
b4:d1:fd:98:60:ab:26:01:87:1e:65:7e:aa:03:4d:28:d9:0a:
a5:c8:33:76:d2:29:ab:23:36:60:59:7e:4b:33:e5:30:43:a3:
9a:6f:5d:dd:20:16:40:c9:e1:f5:28:7c:0c:67:4b:d3:d9:f7:
2a:49:4f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:07:45 2026 by rpki-client