Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
File: zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft (raw, json)
Hash identifier: J/x/6qRvViQF5mNMjsZh9tgYbQ4KUwABpBl+kc+Xwek=
Subject key identifier: 6B:0A:F8:1E:7E:10:BE:81:78:79:F8:D4:12:1C:7E:5B:D3:97:71:3B
Authority key identifier: CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
Certificate issuer: /CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Certificate serial: 019E4E7C9053589B19F5FDC9139510C118A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
Manifest number: 1007
Signing time: Fri 22 May 2026 07:00:46 +0000
Manifest this update: Fri 22 May 2026 07:00:46 +0000
Manifest next update: Sat 23 May 2026 07:00:46 +0000
Files and hashes: 1: KAcxy9c3kuEaoLAu20siPp3ZrbE.roa (hash: ncQUshO4D4+UWIA/eL4LLcWTdV5i8md5oxXrgxBi3HM=)
2: Y5V8BmZBOFe2ZKISRO6sSTQ8CCw.roa (hash: 76JvlwhSTewzOSSgXR9rjTADjFwpt7Eh69G6wYZk9Ws=)
3: zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl (hash: fRWhkcJJmbKusyaQizjcy+h1Fk/Uvpj4ydzcVAAugqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4e:7c:90:53:58:9b:19:f5:fd:c9:13:95:10:c1:18:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Validity
Not Before: May 22 07:00:46 2026 GMT
Not After : May 23 07:00:46 2026 GMT
Subject: CN=6b0af81e7e10be817879f8d4121c7e5bd397713b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:34:41:43:75:d4:1a:f3:55:c5:90:57:f7:23:
f8:14:43:af:7e:5c:0b:d5:7b:25:0c:20:8c:23:db:
80:58:94:c7:c6:e8:10:ab:ab:8d:ca:0d:99:29:81:
de:c9:61:e8:98:9d:b9:c1:2e:3a:20:d9:3d:da:e5:
7b:11:94:48:ad:54:6e:5b:7d:35:84:5f:c3:09:07:
e6:31:4a:20:f8:67:a4:db:80:97:56:2a:d7:96:f2:
c4:41:ab:72:a9:2a:3e:f5:8f:ee:ff:46:6b:97:38:
18:60:81:61:d5:4c:ee:8f:b2:7e:51:19:3b:42:f7:
d7:31:47:48:ff:87:b3:d3:d8:b9:7d:8a:8e:48:ba:
9c:2a:71:3c:0f:f2:6d:e3:42:c0:98:81:fa:c6:c6:
05:67:23:ee:74:4a:11:96:49:a1:ba:4d:b1:82:19:
dd:4d:f6:7d:f6:4c:c0:ab:37:4e:13:6d:f8:3f:97:
e1:60:be:fc:ef:6a:bc:19:6e:2b:70:18:76:9c:44:
47:d6:9b:9d:96:73:ce:78:0c:0f:96:63:d2:c4:fc:
c8:7c:ec:6f:68:d9:52:d3:52:a1:8c:d3:10:49:59:
11:f1:c7:15:fd:ec:15:bf:9a:84:3f:3b:04:bd:d8:
f3:80:3b:30:8f:37:e7:6d:52:87:3e:4a:05:61:f9:
2a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0A:F8:1E:7E:10:BE:81:78:79:F8:D4:12:1C:7E:5B:D3:97:71:3B
X509v3 Authority Key Identifier:
keyid:CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:72:7e:43:92:4c:ed:0c:27:d1:73:64:4e:ba:57:05:d0:f5:
8d:7b:16:e2:b2:a3:3d:b9:b6:2e:0d:84:00:87:63:22:73:8e:
ea:40:f3:35:48:b9:a2:d4:b0:79:62:90:f5:31:ec:c5:03:03:
b0:af:71:f8:fa:da:ea:81:91:1c:74:2b:bf:da:96:37:d5:8e:
f7:35:ad:4f:3f:d4:db:b8:59:9f:de:eb:db:1d:2b:67:ff:cb:
b6:cf:9c:d5:a0:84:d0:64:38:48:90:a4:a8:24:87:7d:f4:2c:
de:da:6a:e5:80:c9:aa:19:b5:3e:c7:84:33:a3:16:13:11:a5:
44:55:1c:92:cf:c6:e4:b1:16:af:60:9f:ef:7a:b4:07:56:4a:
41:b4:95:fd:08:0e:a7:90:7d:15:c7:33:cf:50:14:e5:02:23:
fd:e1:23:63:6d:89:e9:e3:16:80:5b:8d:b8:ea:3f:b3:f4:24:
60:bb:10:8a:9a:b1:e8:1d:61:f3:c4:d2:16:d6:fb:f7:52:96:
f4:46:e8:79:40:d3:48:19:1b:80:fa:5e:da:1e:7d:91:e6:25:
2c:d7:aa:bd:c9:37:12:da:1a:83:e5:e5:8c:85:3f:6b:66:aa:
85:1a:40:b7:6c:7a:d8:c8:7d:e7:d0:18:55:13:95:94:1b:65:
94:8e:60:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:10:37 2026 by rpki-client