Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
File: zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft (raw, json)
Hash identifier: 9UE5yndw/hLKYjBpyTx/7DX4tIlhIHbNwzDB0x/jrk0=
Subject key identifier: 32:87:05:0B:BC:F1:75:A7:B7:1E:F7:C4:05:E7:16:B0:B9:34:34:B9
Authority key identifier: CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
Certificate issuer: /CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Certificate serial: 019D270476D71A7DCA5CB5C1255554DF4AFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
Manifest number: 0F6E
Signing time: Wed 25 Mar 2026 22:01:37 +0000
Manifest this update: Wed 25 Mar 2026 22:01:37 +0000
Manifest next update: Thu 26 Mar 2026 22:01:37 +0000
Files and hashes: 1: KAcxy9c3kuEaoLAu20siPp3ZrbE.roa (hash: ncQUshO4D4+UWIA/eL4LLcWTdV5i8md5oxXrgxBi3HM=)
2: Y5V8BmZBOFe2ZKISRO6sSTQ8CCw.roa (hash: 76JvlwhSTewzOSSgXR9rjTADjFwpt7Eh69G6wYZk9Ws=)
3: zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl (hash: OC1AjhRizQc6aMaTG7tOdojwCp+cvCvV3x88AHMscjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:76:d7:1a:7d:ca:5c:b5:c1:25:55:54:df:4a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Validity
Not Before: Mar 25 22:01:37 2026 GMT
Not After : Mar 26 22:01:37 2026 GMT
Subject: CN=3287050bbcf175a7b71ef7c405e716b0b93434b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d7:7e:58:77:5e:86:96:ef:ce:f8:cb:3b:b4:
15:ac:8b:b1:31:02:4e:30:cb:e0:11:27:86:8d:f5:
b9:69:60:2a:e4:a6:eb:c7:ce:17:a0:b1:6c:bd:7c:
0a:c9:62:ca:45:dd:17:d0:b8:f6:db:be:a5:46:b4:
2b:b4:39:57:a8:da:c0:e0:cc:41:bd:65:94:a8:af:
2c:60:db:e1:4f:24:d4:3c:95:7b:5b:2a:81:60:e7:
7e:51:ea:f7:3e:e8:43:db:4a:e9:dd:85:be:6f:89:
e2:08:c2:60:d4:26:fa:3b:d8:87:77:ff:4d:d4:3d:
92:81:b1:d0:1b:30:44:83:98:40:61:61:a5:e4:17:
6b:d1:bc:e0:f3:26:c1:f0:94:9e:63:1c:85:72:ef:
92:cd:ac:27:18:f1:d4:0e:54:5b:11:21:c5:d9:af:
a1:e5:eb:7d:93:55:a0:66:67:6c:18:98:1e:e4:e6:
c6:3d:9c:93:62:53:04:6a:2a:6d:2a:cd:da:7c:6a:
03:ea:37:61:57:56:df:cb:5a:f2:e7:c7:f4:27:1a:
23:12:60:48:48:1e:6d:d2:1b:6a:40:6f:60:8b:d2:
a8:ee:5a:dd:7b:15:b0:39:32:3f:0e:69:35:b5:fb:
42:18:f6:56:95:ed:4d:19:f0:7a:a0:c9:31:6b:b0:
92:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:87:05:0B:BC:F1:75:A7:B7:1E:F7:C4:05:E7:16:B0:B9:34:34:B9
X509v3 Authority Key Identifier:
keyid:CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:29:25:88:70:13:29:81:e7:29:00:f7:c9:ae:27:30:ab:a8:
72:cf:60:6f:95:e3:f7:85:0d:e5:c0:a2:bb:00:83:2e:9c:e3:
d5:6a:88:31:b5:d2:24:a4:af:70:84:f2:e9:92:99:b3:1f:9e:
0f:c1:16:38:f6:d0:b4:a7:48:d7:68:8b:46:d7:0c:23:ed:cd:
8a:e6:2b:f3:47:16:11:f6:a2:b0:b4:ac:ed:a9:e6:1c:af:9d:
a1:12:ea:dc:90:cc:b5:db:ce:0f:9a:80:99:25:8d:63:9c:96:
66:7d:69:47:53:2d:10:76:59:86:69:5a:75:e9:a4:09:7b:7e:
a0:5c:5f:40:88:8f:06:8e:1e:c1:49:9c:45:9a:91:bb:69:36:
32:69:15:fb:97:a4:e2:98:13:3f:1d:8a:98:60:a6:c9:1f:f5:
80:f6:aa:05:61:0d:45:60:d1:99:d4:7d:9d:8e:bf:1a:40:80:
4b:14:1f:85:28:fe:82:b1:a9:51:c9:d8:8b:bf:49:fd:98:c4:
cc:98:91:8a:14:2a:2f:d8:e9:14:7b:e2:72:68:ff:66:0f:10:
9a:2d:20:01:14:22:aa:28:81:03:24:d5:02:fc:b0:80:44:92:
26:c8:3f:cb:ff:bb:6f:1a:72:10:0f:7b:e2:83:12:40:b0:9e:
43:1b:d1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:51 2026 by rpki-client