Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
File: zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft (raw, json)
Hash identifier: tDHlZNt2Suoywwv3AZl87U/hPBv0haxBwteeIdEyW+8=
Subject key identifier: D5:C1:7D:F7:C1:B7:A5:33:67:A5:FE:5E:74:70:2B:4E:CC:47:60:44
Authority key identifier: CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
Certificate issuer: /CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Certificate serial: 01A01FE7A93EF1ADA7F0D38EFC40496A4753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
Manifest number: 10F8
Signing time: Thu 20 Aug 2026 16:01:10 +0000
Manifest this update: Thu 20 Aug 2026 16:01:10 +0000
Manifest next update: Fri 21 Aug 2026 16:01:10 +0000
Files and hashes: 1: KAcxy9c3kuEaoLAu20siPp3ZrbE.roa (hash: ncQUshO4D4+UWIA/eL4LLcWTdV5i8md5oxXrgxBi3HM=)
2: Y5V8BmZBOFe2ZKISRO6sSTQ8CCw.roa (hash: 76JvlwhSTewzOSSgXR9rjTADjFwpt7Eh69G6wYZk9Ws=)
3: zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl (hash: rSJiaX7h0v5O0eHV24eIlUlv8QMz4lOirlazv8IuVNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:e7:a9:3e:f1:ad:a7:f0:d3:8e:fc:40:49:6a:47:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Validity
Not Before: Aug 20 16:01:10 2026 GMT
Not After : Aug 21 16:01:10 2026 GMT
Subject: CN=d5c17df7c1b7a53367a5fe5e74702b4ecc476044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c6:78:05:7b:82:33:49:a4:bf:1b:6d:5d:49:
85:30:80:91:ea:8a:46:3c:10:6c:a0:88:fd:ff:08:
51:49:2e:eb:d8:cf:43:84:b0:c1:61:11:ad:17:bb:
c2:89:7b:29:04:75:ea:24:64:14:e0:7b:78:e8:09:
c8:ee:b3:15:de:fe:e2:39:80:f0:6f:0d:40:a2:98:
74:e9:f3:fa:92:e1:2f:bf:c4:9a:6f:c5:fa:b2:25:
22:ed:83:8b:ce:dd:57:cf:5e:ba:89:5d:af:17:30:
09:10:27:ea:fc:c4:e7:f6:db:dd:36:59:8e:c6:50:
7a:05:7e:5b:e2:1f:64:a4:bc:f1:38:52:27:e8:69:
93:22:92:fa:58:f2:83:35:0f:22:72:9d:0d:15:ee:
9c:b0:ad:69:62:b0:84:55:66:3d:40:8c:24:0b:99:
de:47:1c:4e:96:0f:90:4c:00:50:6c:c0:6d:41:88:
2c:9e:79:46:30:89:00:c2:d1:af:9c:0f:53:8f:25:
1d:cc:05:24:ed:62:69:0b:f2:05:19:1c:03:c4:59:
3b:c1:7b:f6:e4:90:59:4b:01:93:2e:1f:ba:34:03:
5d:57:00:b3:ac:58:d9:c6:68:a6:a9:db:04:bf:e7:
73:9e:60:8a:92:09:a9:aa:8e:a8:42:bd:27:85:f4:
db:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C1:7D:F7:C1:B7:A5:33:67:A5:FE:5E:74:70:2B:4E:CC:47:60:44
X509v3 Authority Key Identifier:
keyid:CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:dc:2c:d3:48:4d:63:ef:b6:7d:6f:ee:c9:c0:6c:60:51:a9:
46:b6:00:5d:32:59:28:8b:52:b9:35:b8:a4:50:de:81:c8:ee:
a0:5b:49:42:d5:c7:58:d3:b4:70:5b:71:1c:8c:52:c6:15:af:
55:58:e4:b6:19:25:c1:55:e4:3a:6e:59:58:42:8e:89:d5:c0:
8c:b8:74:ef:d5:88:d4:90:69:d2:38:a6:5d:20:3e:54:b7:31:
31:64:d2:98:a8:0b:32:78:de:77:c4:96:d2:09:c7:18:98:38:
c4:96:50:7b:9b:55:8f:87:a0:eb:40:70:92:5d:26:b1:99:ef:
d9:28:66:6e:44:3f:d4:b8:bd:61:1c:87:8e:08:3f:a9:a7:90:
f6:98:24:9c:5d:ca:f0:70:a9:88:58:dd:30:ee:38:c6:13:fa:
41:4b:ea:d6:3a:05:b0:67:40:c7:4f:b2:12:79:fa:de:18:38:
e1:8a:0f:e2:62:18:6d:81:3f:3b:92:55:23:a3:29:18:71:57:
c8:3a:4c:53:c8:42:b9:36:f3:1d:a9:9c:fb:6d:87:46:fb:b5:
8a:c4:71:d7:6b:87:17:80:d9:57:e6:5e:00:65:53:2f:24:ca:
3c:f8:08:e5:e7:d3:5c:63:f5:dc:79:ed:82:88:75:b4:67:66:
b9:d1:3a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:33:23 2026 by rpki-client