Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
File: zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft (raw, json)
Hash identifier: XsjufQhl7EFZFPaz4AfFazf6b9eFwpTsGcICkQtiQnE=
Subject key identifier: 44:D0:4D:A3:BC:B8:37:1D:65:56:2D:84:73:30:80:93:0A:27:60:D0
Authority key identifier: CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
Certificate issuer: /CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Certificate serial: 019F90FF779E0314DEACEED3FED9DEB1901B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
Manifest number: 10AE
Signing time: Thu 23 Jul 2026 22:01:29 +0000
Manifest this update: Thu 23 Jul 2026 22:01:29 +0000
Manifest next update: Fri 24 Jul 2026 22:01:29 +0000
Files and hashes: 1: KAcxy9c3kuEaoLAu20siPp3ZrbE.roa (hash: ncQUshO4D4+UWIA/eL4LLcWTdV5i8md5oxXrgxBi3HM=)
2: Y5V8BmZBOFe2ZKISRO6sSTQ8CCw.roa (hash: 76JvlwhSTewzOSSgXR9rjTADjFwpt7Eh69G6wYZk9Ws=)
3: zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl (hash: c2eWd98YrcvTFQgN6Oisfrks7G7y9HyFRvzmt9RSOW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:77:9e:03:14:de:ac:ee:d3:fe:d9:de:b1:90:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Validity
Not Before: Jul 23 22:01:29 2026 GMT
Not After : Jul 24 22:01:29 2026 GMT
Subject: CN=44d04da3bcb8371d65562d84733080930a2760d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:57:7b:52:66:5b:65:66:84:63:af:f4:53:62:
19:e7:2b:e1:06:e4:a3:7b:0e:2e:6c:2f:6b:17:5c:
0c:f5:16:c9:16:11:43:96:01:d0:27:bf:1e:7a:78:
09:87:50:ff:6e:97:d9:66:27:ec:c3:70:be:1b:7b:
d6:6f:ee:49:50:6f:10:7f:77:ef:9d:b1:e4:0c:5c:
fc:39:a0:62:fd:5f:d4:74:39:8d:ba:f9:74:e9:f8:
ed:11:39:47:3b:4d:7a:ad:12:42:a6:58:54:c8:be:
10:e1:70:cf:ba:18:ce:b3:13:69:c8:07:62:c9:cf:
e9:4e:bf:28:5e:79:8b:a7:0b:3a:ad:12:14:81:e8:
6c:a1:5e:73:9a:c3:39:ae:e1:5f:bb:b2:be:6c:6d:
4a:4b:1d:40:f5:92:5a:31:69:82:d3:03:57:7a:93:
75:c7:84:8d:f2:01:72:d8:12:33:3f:73:19:a9:08:
50:61:05:78:ea:dd:9d:57:b7:52:4e:2e:41:3c:ff:
19:00:6c:19:8f:6d:ec:c4:72:7d:35:45:37:0b:76:
6f:7c:cc:d8:a2:47:e3:b1:67:8c:19:03:1f:19:11:
98:ce:14:4a:74:36:73:fa:6b:75:1a:1d:7b:63:78:
58:71:57:11:52:f1:01:9a:a1:e4:ea:40:a1:b6:58:
51:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D0:4D:A3:BC:B8:37:1D:65:56:2D:84:73:30:80:93:0A:27:60:D0
X509v3 Authority Key Identifier:
keyid:CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:2f:84:3a:3d:e5:d3:e0:2c:1e:9b:06:db:3e:7f:13:07:9a:
6d:44:93:7a:58:d2:2b:dc:89:9a:bc:04:fb:db:da:46:64:4d:
10:74:a5:88:ab:18:e1:ef:e3:9d:44:8b:b5:08:64:98:59:40:
72:c1:4a:7b:56:77:cf:d7:50:d0:48:57:06:a5:67:c6:91:bd:
9c:d3:85:c8:5f:b0:60:b1:25:0f:ab:70:dd:1c:9f:f7:8f:8e:
ee:64:cb:87:02:18:1f:0a:2c:ad:c3:ac:70:67:21:ad:96:7a:
6c:b9:4b:04:53:36:a9:ce:1c:f0:3f:21:74:8f:25:03:e4:db:
67:66:c9:8e:ed:63:15:88:44:7f:f8:d3:db:54:8b:cc:2a:57:
9b:33:b1:48:ac:26:20:ef:ea:a5:6a:3f:0e:5b:f9:aa:16:a6:
62:31:98:7b:6c:15:8e:38:60:6e:29:04:87:bc:5c:72:ee:87:
6f:2f:34:8a:f9:1d:2f:b2:78:4a:ad:ed:f3:eb:cc:5e:9e:a9:
22:04:f2:2b:6a:0e:72:53:d0:74:c9:65:a2:c3:62:eb:d9:2f:
54:0a:a4:4f:f7:6d:e8:bb:89:0d:f2:ca:ff:36:0f:7b:c7:02:
c6:ee:97:3d:7b:a2:8d:49:e4:23:e4:b1:07:58:b6:54:63:62:
24:02:e2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:41:16 2026 by rpki-client