Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
File: zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft (raw, json)
Hash identifier: uMjAIpM2U3z7xYu31fByV1ak57KN+GHHCB2bvpEm50g=
Subject key identifier: B2:F2:EE:58:A8:9E:E0:8F:22:00:14:A6:C2:67:57:38:6E:C4:5B:D4
Authority key identifier: CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
Certificate issuer: /CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Certificate serial: 019D38668D1DFD4C882D72219BDFC8C47CF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
Manifest number: 0F77
Signing time: Sun 29 Mar 2026 07:02:18 +0000
Manifest this update: Sun 29 Mar 2026 07:02:18 +0000
Manifest next update: Mon 30 Mar 2026 07:02:18 +0000
Files and hashes: 1: KAcxy9c3kuEaoLAu20siPp3ZrbE.roa (hash: ncQUshO4D4+UWIA/eL4LLcWTdV5i8md5oxXrgxBi3HM=)
2: Y5V8BmZBOFe2ZKISRO6sSTQ8CCw.roa (hash: 76JvlwhSTewzOSSgXR9rjTADjFwpt7Eh69G6wYZk9Ws=)
3: zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl (hash: ZHlgSEuITFhPWceKVRExxutxZgygEA1E4E/SWBhrYJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:8d:1d:fd:4c:88:2d:72:21:9b:df:c8:c4:7c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Validity
Not Before: Mar 29 07:02:18 2026 GMT
Not After : Mar 30 07:02:18 2026 GMT
Subject: CN=b2f2ee58a89ee08f220014a6c26757386ec45bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8f:c7:82:0c:20:5d:d8:6e:9e:58:f0:4e:31:
f2:54:a3:f8:9d:8a:ae:8c:97:d2:ec:35:0a:35:bd:
40:62:34:4f:85:94:8e:96:ec:3e:30:2d:3f:78:ba:
30:e4:dd:ef:77:da:9a:73:97:28:21:bc:da:1a:eb:
13:bc:94:45:35:bd:04:59:f3:2b:6f:91:0b:67:5c:
38:e1:ea:a2:1f:80:60:f1:72:74:fb:da:d7:67:5e:
13:dc:f7:f9:88:86:3e:69:62:31:e1:78:57:ac:01:
38:8c:6d:4d:17:89:39:a7:d5:26:29:eb:de:75:bf:
85:88:48:b9:10:1d:4f:4e:71:23:3c:84:12:b3:cc:
70:8d:6d:7e:b3:50:48:f5:6d:d5:5a:2d:59:73:8d:
47:8a:1c:56:09:4e:35:5e:38:97:3a:db:60:d8:37:
b1:e2:23:21:9e:63:be:1e:2a:bf:e3:f1:58:e0:7a:
65:91:c0:ac:18:94:1b:59:5f:b1:fb:e1:9f:74:24:
24:96:ce:65:ea:54:20:dd:2d:63:84:e5:9c:2e:58:
68:75:72:da:71:b8:fe:64:ab:cb:d1:01:78:07:5f:
2f:be:69:49:d4:68:b8:7c:7d:bc:10:62:59:19:b6:
4a:14:49:37:fc:d0:e5:e8:70:55:ee:04:29:50:75:
db:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F2:EE:58:A8:9E:E0:8F:22:00:14:A6:C2:67:57:38:6E:C4:5B:D4
X509v3 Authority Key Identifier:
keyid:CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:6e:58:f9:e4:89:d2:31:e4:63:fa:08:b4:8b:38:3f:b1:76:
63:18:a8:e7:a5:75:49:2a:ed:66:65:c4:f1:a6:d1:c5:27:95:
86:1f:f2:57:5b:91:af:4f:fa:51:26:db:a2:39:20:a4:89:b5:
46:be:d1:21:95:c1:98:3d:da:8f:fc:7e:1f:a4:08:af:03:0e:
f3:f4:c0:00:58:d0:17:34:bf:ca:1c:3e:26:c5:dd:a4:1a:ee:
88:28:ec:eb:a8:17:5e:2b:ee:3e:6f:29:ba:ab:bd:66:18:61:
d1:5b:dc:55:5f:20:0c:5d:5a:24:62:fb:50:8e:51:d4:a8:1e:
44:8b:ca:8d:fe:17:c6:58:12:29:f4:38:5b:17:68:4c:0c:d7:
1f:8e:4d:43:20:47:5f:11:e3:3d:86:71:0f:b9:03:59:f0:f6:
fc:a3:de:a6:2e:e5:3d:9c:11:5e:18:c4:43:29:28:4c:dd:ae:
b8:50:4a:21:03:22:a9:09:a4:89:95:6d:97:9b:b1:c8:bd:5c:
ae:fc:4c:9f:9c:83:d8:46:05:19:f6:23:00:ae:ff:d1:c7:81:
5b:3c:43:29:97:d4:91:56:9d:be:a5:e2:75:81:93:bb:92:46:
5d:43:25:8b:5f:54:75:e2:a9:92:a8:4d:5c:7a:25:b6:d0:4b:
b5:ac:76:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zo0d/UyILXIhm9/IxHz4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjYjc1MzQxNTAwODA3YTk3NTBhOGNmNTViZjRlNDVmZjAz
ZjMxMmEwHhcNMjYwMzI5MDcwMjE4WhcNMjYwMzMwMDcwMjE4WjAzMTEwLwYDVQQD
EyhiMmYyZWU1OGE4OWVlMDhmMjIwMDE0YTZjMjY3NTczODZlYzQ1YmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY/HggwgXdhunljwTjHyVKP4nYqu
jJfS7DUKNb1AYjRPhZSOluw+MC0/eLow5N3vd9qac5coIbzaGusTvJRFNb0EWfMr
b5ELZ1w44eqiH4Bg8XJ0+9rXZ14T3Pf5iIY+aWIx4XhXrAE4jG1NF4k5p9UmKeve
db+FiEi5EB1PTnEjPIQSs8xwjW1+s1BI9W3VWi1Zc41HihxWCU41XjiXOttg2Dex
4iMhnmO+Hiq/4/FY4HplkcCsGJQbWV+x++GfdCQkls5l6lQg3S1jhOWcLlhodXLa
cbj+ZKvL0QF4B18vvmlJ1Gi4fH28EGJZGbZKFEk3/NDl6HBV7gQpUHXbqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLLy7lionuCPIgAUpsJnVzhuxFvUMB8GA1UdIwQY
MBaAFMy3U0FQCAepdQqM9Vv05F/wPzEqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekxkVFFWQUlCNmwxQ296MVdfVGtYX0FfTVNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lZmZiMmYtOWZiZi00ODhiLTkzMTUt
YTk5YTIxMDE1OTM3LzEvekxkVFFWQUlCNmwxQ296MVdfVGtYX0FfTVNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lZmZiMmYtOWZiZi00ODhiLTkzMTUtYTk5YTIxMDE1OTM3
LzEvekxkVFFWQUlCNmwxQ296MVdfVGtYX0FfTVNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHG5Y+eSJ
0jHkY/oItIs4P7F2Yxio56V1SSrtZmXE8abRxSeVhh/yV1uRr0/6USbbojkgpIm1
Rr7RIZXBmD3aj/x+H6QIrwMO8/TAAFjQFzS/yhw+JsXdpBruiCjs66gXXivuPm8p
uqu9Zhhh0VvcVV8gDF1aJGL7UI5R1KgeRIvKjf4XxlgSKfQ4WxdoTAzXH45NQyBH
XxHjPYZxD7kDWfD2/KPepi7lPZwRXhjEQykoTN2uuFBKIQMiqQmkiZVtl5uxyL1c
rvxMn5yD2EYFGfYjAK7/0ceBWzxDKZfUkVadvqXidYGTu5JGXUMli19UdeKpkqhN
XHolttBLtax2Xw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:17 2026 by rpki-client