Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
File: ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft (raw, json)
Hash identifier: kOw9EeX9tGLjYFOEFmU/ddeQU5fSMLjn43UK1eqS1HE=
Subject key identifier: 0E:03:47:A2:C6:59:A4:94:16:11:D4:89:1B:FF:B9:DB:CE:69:E2:AE
Authority key identifier: B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26
Certificate issuer: /CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426
Certificate serial: 019FAC76F0EA4B7B90909513D7BA2AAD8FCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
Manifest number: 08AA
Signing time: Wed 29 Jul 2026 06:01:43 +0000
Manifest this update: Wed 29 Jul 2026 06:01:43 +0000
Manifest next update: Thu 30 Jul 2026 06:01:43 +0000
Files and hashes: 1: Ypj1u0D-dKP25bpDr5b37lFIWLY.roa (hash: sZTi+uNahtkDx1CWD+fSQJ3e4s6S3VqVHfRHxysjxvE=)
2: b9kuA0hkVfgLPA4Lc4cA836L2-E.roa (hash: povqVvttDiHt8q334Li7LCjGzju+n8q9oUqyQtA71DQ=)
3: ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl (hash: B0c3uXZtVExvKTIhb/m9NUbeDV2DulCuxCQGK61keTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:f0:ea:4b:7b:90:90:95:13:d7:ba:2a:ad:8f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426
Validity
Not Before: Jul 29 06:01:43 2026 GMT
Not After : Jul 30 06:01:43 2026 GMT
Subject: CN=0e0347a2c659a4941611d4891bffb9dbce69e2ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:38:b2:53:50:74:c2:9f:09:81:bd:82:11:cf:
09:22:9c:c7:0f:60:4e:92:73:12:16:be:6e:9e:11:
51:e7:98:2b:a3:98:49:c7:02:8e:20:56:db:75:67:
d7:dc:9b:50:67:b6:a9:15:3c:a9:fd:d4:2e:88:dc:
7d:f1:03:47:44:01:7a:f7:47:b1:c0:4c:b7:31:5d:
a7:90:c1:a7:09:96:0d:61:f3:c3:b0:ef:b7:05:fa:
d0:b8:48:07:9d:e4:e5:e5:3e:ba:42:65:68:f0:98:
f7:e4:d9:2f:58:65:d1:ce:a7:3b:c8:ac:6a:ab:3e:
f4:d8:f0:60:26:49:0a:6b:9d:41:87:f5:c0:56:a5:
12:97:44:ca:c3:fc:2d:4b:a8:3f:97:09:19:22:cb:
cc:7e:39:d0:96:9a:8b:f8:df:5f:ea:b1:4b:48:df:
92:82:6e:5b:07:91:16:5e:c7:a0:1d:87:09:77:d3:
90:29:38:c1:b4:c7:c9:81:e9:71:9c:03:1a:62:03:
22:73:ad:41:0e:93:f2:b3:3a:1a:59:b8:ae:34:58:
33:28:13:29:ea:7f:fc:65:f8:64:ad:36:31:3b:c5:
07:72:95:39:1a:bd:89:e3:51:31:0b:14:32:4e:2e:
7c:18:2c:9e:6f:26:1b:e5:c6:f7:e4:c2:71:a5:b3:
3d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:03:47:A2:C6:59:A4:94:16:11:D4:89:1B:FF:B9:DB:CE:69:E2:AE
X509v3 Authority Key Identifier:
keyid:B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b1:86:6e:be:7d:d3:99:d2:ba:a8:63:cf:03:ba:d9:91:41:
e9:79:d2:0d:08:fc:f8:ad:ff:ec:df:3d:36:ac:fb:67:0d:a0:
25:26:b8:d7:a2:21:59:15:63:72:38:d1:77:90:54:53:fd:0a:
6e:65:bf:d0:6e:4d:42:5a:80:7e:5b:c0:cb:db:0d:18:b7:91:
75:44:5d:f9:0b:a0:37:33:fe:01:13:63:6a:0d:0c:e2:ae:de:
8e:87:77:a8:ba:1b:20:53:bf:0d:d5:cd:ba:65:63:36:89:1b:
d6:91:d8:be:30:47:92:29:ee:94:b7:4b:ff:7d:84:11:55:e8:
63:b6:c9:62:f1:02:f2:d1:e0:d6:4e:d0:f0:54:a4:b8:ae:2a:
57:6d:f8:44:e7:33:f1:00:ac:e1:64:af:d0:3e:5c:7e:1d:77:
9b:59:f1:05:45:89:6a:63:ba:2a:92:88:71:06:dc:61:35:8a:
f2:41:23:e5:e8:ab:5d:da:0f:23:f8:20:7e:ac:af:5e:15:1b:
7e:f4:47:48:7f:0d:01:52:18:09:7b:ca:08:a0:94:f3:30:1e:
16:4d:ca:2b:31:2d:1b:67:94:5a:e8:6e:b4:0e:dd:34:e5:7b:
e5:db:8b:ba:90:56:d6:81:5e:65:4c:00:b8:be:68:87:a2:2b:
13:ea:a2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:22:19 2026 by rpki-client