Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
File: zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft (raw, json)
Hash identifier: XxqeuHqSuDGtPPS2UzNJGd9uxvT11ScTxM6bVlENC7k=
Subject key identifier: 1C:30:37:2E:B6:BA:43:84:00:B8:3D:B2:52:2E:FF:4B:A3:E2:4A:30
Authority key identifier: CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
Certificate issuer: /CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Certificate serial: 019F92EE39F27A98745013ED71F651034676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
Manifest number: 10AF
Signing time: Fri 24 Jul 2026 07:01:53 +0000
Manifest this update: Fri 24 Jul 2026 07:01:53 +0000
Manifest next update: Sat 25 Jul 2026 07:01:53 +0000
Files and hashes: 1: KAcxy9c3kuEaoLAu20siPp3ZrbE.roa (hash: ncQUshO4D4+UWIA/eL4LLcWTdV5i8md5oxXrgxBi3HM=)
2: Y5V8BmZBOFe2ZKISRO6sSTQ8CCw.roa (hash: 76JvlwhSTewzOSSgXR9rjTADjFwpt7Eh69G6wYZk9Ws=)
3: zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl (hash: fTMJ3lFjW24QsuCcs89m6uoijf4PFZKCvimZCw1iWcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ee:39:f2:7a:98:74:50:13:ed:71:f6:51:03:46:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Validity
Not Before: Jul 24 07:01:53 2026 GMT
Not After : Jul 25 07:01:53 2026 GMT
Subject: CN=1c30372eb6ba438400b83db2522eff4ba3e24a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b7:46:88:4e:2c:4f:fa:ea:15:2b:47:16:38:
88:ee:5e:ea:57:54:f0:79:eb:a9:59:55:15:62:20:
fc:98:23:08:3c:98:ea:17:f5:93:1e:fc:29:f8:cf:
45:ef:11:68:53:dc:1d:df:0b:a0:3f:4c:7a:33:53:
71:8d:35:20:e2:c7:ff:2f:f5:f2:29:a2:d9:10:e0:
03:3a:d4:2f:c7:de:53:6a:ae:9c:60:05:c1:5e:83:
5d:6d:57:d9:35:5f:61:6c:9d:1d:86:c0:bc:8b:9c:
ee:33:ba:69:12:15:d7:ab:2a:1a:2c:8e:86:e1:d7:
ea:23:9a:c6:aa:bd:f6:94:b0:96:b9:a4:ec:c1:15:
7b:c1:d6:79:8d:0a:a6:ee:40:53:23:a2:c0:4a:c1:
e2:29:0b:ac:a2:52:64:b5:dc:25:0c:a6:b1:75:85:
17:81:6c:62:b4:da:cd:76:10:bb:e6:0f:b8:9d:94:
ec:5a:c3:ee:84:8c:60:81:74:4b:50:84:31:61:de:
be:a7:24:40:f6:52:44:2d:45:bf:1b:9a:9d:5d:84:
21:c8:2d:05:5b:12:66:77:5c:89:ae:ae:df:cf:f3:
5b:55:e7:06:98:cd:1b:89:6e:cc:2b:39:2a:07:4d:
3f:b8:29:a4:83:6f:aa:0c:22:26:ae:48:ec:bc:3e:
71:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:30:37:2E:B6:BA:43:84:00:B8:3D:B2:52:2E:FF:4B:A3:E2:4A:30
X509v3 Authority Key Identifier:
keyid:CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:47:d4:17:d7:fc:63:b6:cc:5f:9e:2a:53:2a:01:da:db:45:
8d:e7:98:4a:0b:79:45:ff:58:e4:70:27:fd:35:d3:b7:3f:d1:
04:31:d0:68:73:db:13:41:a6:3d:6e:ae:7f:f5:d6:04:51:8d:
4d:d1:a9:f1:c1:f9:58:47:e4:f7:09:46:c8:80:5a:1f:1b:a4:
08:19:2b:dc:e4:dd:cb:85:5c:bd:ff:78:db:ef:be:ae:a7:67:
40:90:8a:81:39:05:81:bc:7c:7f:1b:a9:47:68:75:94:d1:05:
8c:31:3f:57:ec:d5:42:2f:54:9c:ad:04:53:fa:43:8f:31:af:
24:19:93:94:86:c7:d3:bc:6d:3f:f8:b8:dd:73:f6:b9:04:09:
22:fb:64:c8:fb:1e:ea:2d:22:ba:ba:33:92:9b:87:61:fb:bf:
20:9b:75:2c:9b:f9:28:a6:1e:0a:1a:d1:68:c5:50:c7:11:02:
f6:fa:79:5b:f1:87:27:aa:8d:67:35:6a:b6:2c:41:09:97:3d:
29:ba:17:2a:45:58:35:7d:5d:a8:91:88:df:82:0f:02:51:b5:
2d:e0:0c:59:26:31:7b:37:3a:39:02:11:63:1f:81:a8:aa:d9:
b5:b8:51:42:19:c0:fe:4f:43:07:1b:af:6f:07:24:e0:cf:a3:
8d:89:a2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:39:14 2026 by rpki-client