Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
File: TTAqLdUXpho7lSdG8u6fvkNtY0k.mft (raw, json)
Hash identifier: XeoOtN8b6FvWE0c4Tf8wVu9dbs9MK0IF2M8++UB7RPo=
Subject key identifier: 1F:4A:DC:8D:98:2F:FC:2F:A7:EB:20:0E:7A:1F:EC:6A:72:92:D6:C2
Authority key identifier: 4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
Certificate issuer: /CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Certificate serial: 019FA7BDAE7EBE76E0AE28B3351094822AB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
Manifest number: 19D9
Signing time: Tue 28 Jul 2026 08:00:53 +0000
Manifest this update: Tue 28 Jul 2026 08:00:53 +0000
Manifest next update: Wed 29 Jul 2026 08:00:53 +0000
Files and hashes: 1: 3XQl2aZGjx0G4B6lNhjKCU52GfY.roa (hash: FT3KtfFmeYDjTpv2vREaKYo1FYKB1NfeU+bTJfNupFI=)
2: BtjheHtMrVrls5cRXqprBV_cY_E.roa (hash: 0/bLQWtIHEPcsIkY5+SuruKHSF6pye9PcBvY10R3rFA=)
3: MKcSKQuThlhl7-lUDky950t59Bo.roa (hash: fmVr/24w+km0YFsLjQinoWMje0xwl7aW8GTMFVmYXv4=)
4: TTAqLdUXpho7lSdG8u6fvkNtY0k.crl (hash: 0Mp2u4+MbuQ7IaI1jcNEWKAKIUPHobkUZ/phbW+JPxA=)
5: XIFzkJPJ71521E26Mrj2xnc0JrU.asa (hash: VlbNe+O5EvKvAXRSzSuJJZA5UZMsBVV8HUf17LLjU3c=)
6: btNWOWDT0MwxaxnuKalIShgF76M.roa (hash: +XzTFhG5C/Y9XMQYyxlHrlhbiNm3k0WsQB2hF0bjvaI=)
7: chjNAC8nAY_1idgxZ4cutOeVbAY.roa (hash: jS+FDp72Ee84TtCvWXMWI7/kBBph6ZyKnK6dpccqwmo=)
8: ev8fsS2pQVCaQ4feU5zWLckpMSc.roa (hash: N1tvT2Z1uLP/2N8fWYJQhCEwoN2M5Na1KjKaQbkdT3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:ae:7e:be:76:e0:ae:28:b3:35:10:94:82:2a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Validity
Not Before: Jul 28 08:00:53 2026 GMT
Not After : Jul 29 08:00:53 2026 GMT
Subject: CN=1f4adc8d982ffc2fa7eb200e7a1fec6a7292d6c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:52:10:0f:3d:48:7e:a6:f8:02:eb:b8:a8:18:
2b:46:67:7a:9b:e6:58:a6:31:b5:9f:91:bb:74:3e:
bf:be:84:90:3b:f4:3c:43:5a:26:b1:30:35:78:d9:
a5:a5:80:4e:d1:b0:ef:74:50:e0:2b:85:ce:2c:50:
19:7c:ab:1f:4e:72:17:9d:a2:2b:92:f4:ce:da:fc:
0f:b6:b8:7a:f3:59:59:9f:bc:49:e8:67:76:0c:54:
53:aa:c0:50:c9:bb:d1:92:be:1a:5a:f9:cb:b9:73:
9c:91:59:89:c1:df:17:8e:5f:db:8c:a4:47:d6:9b:
6b:09:aa:e2:73:9e:a5:8f:74:e5:96:be:42:c6:f4:
16:be:89:85:ea:1f:97:17:68:88:69:d4:7b:a6:74:
6e:cf:e9:24:95:99:18:21:f6:f7:0f:41:9d:8f:b2:
12:02:cd:e9:9a:2e:7d:d7:0f:1b:b4:fa:31:31:12:
6c:5c:8f:1c:a8:54:9f:bd:02:26:b8:06:df:32:61:
e5:00:c1:9f:5a:27:33:13:e0:07:d9:3f:35:ce:13:
9b:94:c7:8f:f9:1b:d0:9d:16:56:0e:a6:46:71:f4:
dd:c9:2b:29:3f:eb:01:b2:5e:bd:d0:22:a4:57:64:
e6:4f:89:24:f6:87:e3:88:6a:77:f2:a0:0d:ae:80:
26:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4A:DC:8D:98:2F:FC:2F:A7:EB:20:0E:7A:1F:EC:6A:72:92:D6:C2
X509v3 Authority Key Identifier:
keyid:4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:90:4c:36:d3:30:6d:aa:07:e1:82:c3:25:63:4f:51:b3:5e:
00:cc:28:0f:b8:8c:d3:c0:ab:31:62:d0:ea:07:35:13:46:a5:
8e:a2:ef:7f:15:bf:bb:7d:10:8e:9c:b2:9e:40:46:12:9c:d9:
b0:32:ac:e2:be:75:4b:0d:47:f6:2d:7a:2d:4c:b5:66:db:f1:
89:3b:21:c7:3a:93:de:61:ab:92:a7:0f:de:35:80:ac:7b:3c:
aa:3c:17:8b:20:8b:c2:25:04:8d:1f:fc:dc:b1:ce:43:4d:3c:
cf:10:d3:23:c8:10:9e:38:5a:ba:38:d7:95:b3:5a:d8:79:21:
2f:ab:bf:71:6d:fd:ff:45:9b:f5:3c:aa:4f:d5:b9:d2:3a:10:
59:f3:15:3a:9a:7e:9c:88:0f:6a:ba:7e:10:36:5a:e9:6d:a3:
e6:77:13:76:f1:83:ff:1f:b7:15:0e:ff:72:88:17:c4:bd:b2:
99:de:66:fa:f4:af:09:88:a9:8f:a4:02:97:ac:da:a4:7f:6d:
9d:a3:f9:f5:64:21:37:0b:16:83:b4:5b:7a:9d:54:65:bd:68:
f5:92:be:97:52:d7:4f:1e:50:16:64:c8:e0:13:f7:78:d7:5b:
97:7b:91:6f:0d:b1:6f:f3:c6:4d:2b:92:52:c3:96:28:2a:3e:
08:2c:be:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:46:31 2026 by rpki-client