Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
File: ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft (raw, json)
Hash identifier: 6ISXxDfDRth8rrWk8q9aajkisg0Zt2fwvOk2BU29hjE=
Subject key identifier: 54:28:6C:79:FC:E6:77:8D:28:E0:76:8D:44:13:19:B5:16:12:8D:DE
Authority key identifier: B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26
Certificate issuer: /CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426
Certificate serial: 01A0D7CC3463DAEDAF76041F71D95A967F63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
Manifest number: 0945
Signing time: Fri 25 Sep 2026 09:01:19 +0000
Manifest this update: Fri 25 Sep 2026 09:01:19 +0000
Manifest next update: Sat 26 Sep 2026 09:01:19 +0000
Files and hashes: 1: Ypj1u0D-dKP25bpDr5b37lFIWLY.roa (hash: sZTi+uNahtkDx1CWD+fSQJ3e4s6S3VqVHfRHxysjxvE=)
2: b9kuA0hkVfgLPA4Lc4cA836L2-E.roa (hash: povqVvttDiHt8q334Li7LCjGzju+n8q9oUqyQtA71DQ=)
3: ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl (hash: AiM4agdIEmEWAioGI5K9tpTt/Jp49dN2BEPnLIHamPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cc:34:63:da:ed:af:76:04:1f:71:d9:5a:96:7f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426
Validity
Not Before: Sep 25 09:01:19 2026 GMT
Not After : Sep 26 09:01:19 2026 GMT
Subject: CN=54286c79fce6778d28e0768d441319b516128dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ed:22:e6:28:ba:cc:3c:7b:0c:09:e2:68:9d:
80:e7:fc:3f:ad:20:81:21:32:7d:31:a1:c9:6c:45:
a5:7a:56:6f:44:ca:ef:40:6d:87:c4:1e:a2:b7:88:
af:39:37:83:d2:3c:92:c1:c6:5d:a5:70:b8:7c:8d:
c2:bc:0c:a0:07:e3:3f:d2:e4:71:99:36:2a:d9:53:
5a:1a:6c:7b:bb:26:5d:40:0f:79:d9:1e:64:87:d8:
50:06:b7:6f:90:ee:bd:ec:3d:02:58:2a:72:4f:37:
f7:88:54:10:b7:61:8a:b3:57:f6:bd:e7:05:e1:f5:
8e:cc:4c:02:2b:6e:54:2a:9d:b7:ba:79:e1:04:46:
53:a5:b5:67:05:9a:e1:18:c1:cb:e8:2d:c9:b4:3c:
ca:24:1b:2c:ec:af:87:07:9e:58:a2:7a:94:20:5f:
0e:62:99:40:f2:f9:01:80:be:2c:43:36:09:32:54:
5a:e8:68:c6:f5:5d:71:ca:3e:78:33:80:19:35:df:
28:69:fc:0a:17:a2:dc:0c:ed:19:23:05:bb:fe:0e:
a5:96:fb:28:0b:41:19:22:fd:73:12:a6:99:9a:57:
b5:bc:50:b0:45:f9:49:c1:21:b1:78:6b:2e:57:7b:
f5:95:1a:2d:f1:5a:9b:f3:76:d1:e2:51:cc:40:a8:
07:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:28:6C:79:FC:E6:77:8D:28:E0:76:8D:44:13:19:B5:16:12:8D:DE
X509v3 Authority Key Identifier:
keyid:B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:41:cc:f7:7c:06:21:2b:d8:8d:fd:ca:2d:d0:05:d0:d0:6d:
d3:0b:d7:f4:83:4e:6c:28:9f:b7:b0:f4:8b:b2:77:8f:be:82:
e2:6b:41:b7:da:c3:0f:6c:1a:be:0c:4f:c6:b9:18:5d:f7:4e:
ae:93:5d:a7:2b:53:10:9d:8a:0b:81:c0:67:af:bf:ed:e4:d0:
6f:79:b5:70:19:85:96:fb:27:3a:a2:c4:67:4b:b9:8c:76:f0:
88:0b:ca:9d:23:1f:69:b7:6e:07:35:3b:14:a2:57:b6:4c:a4:
91:66:61:5c:45:1f:1f:45:43:15:da:9c:3c:af:17:09:87:24:
91:35:f7:56:05:6d:ae:b8:36:bf:d8:b2:c4:fd:8e:b3:72:13:
4c:e8:d1:c7:3a:d2:4a:2a:d6:fa:91:e8:3c:17:21:bf:60:f5:
57:b7:8b:9d:6d:43:2b:a4:ad:85:e1:5d:b3:b3:46:ba:51:91:
0d:08:01:29:24:06:15:76:68:bc:64:ee:d7:60:b4:de:cb:34:
89:1a:0d:93:54:4d:c9:51:19:0e:38:fd:45:21:26:50:f9:b3:
ce:e2:4b:c9:68:b5:1e:de:d7:e6:30:db:a9:f8:59:1f:1f:70:
c9:66:db:18:56:20:ee:25:86:85:3c:33:28:63:1a:5f:e4:63:
03:3a:47:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:08:10 2026 by rpki-client