Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
File: ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft (raw, json)
Hash identifier: 8/6S44MjDJJgp8vPbkfrOC941TPwUEXg/s6w5GG99wA=
Subject key identifier: DF:0E:4A:05:A7:21:BE:FD:E3:47:35:1E:77:5B:DB:B9:B3:39:C3:F4
Authority key identifier: B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26
Certificate issuer: /CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426
Certificate serial: 019E1EA35237A556C9BA826E47439C85F926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
Manifest number: 07DC
Signing time: Wed 13 May 2026 00:01:20 +0000
Manifest this update: Wed 13 May 2026 00:01:20 +0000
Manifest next update: Thu 14 May 2026 00:01:20 +0000
Files and hashes: 1: Ypj1u0D-dKP25bpDr5b37lFIWLY.roa (hash: sZTi+uNahtkDx1CWD+fSQJ3e4s6S3VqVHfRHxysjxvE=)
2: b9kuA0hkVfgLPA4Lc4cA836L2-E.roa (hash: povqVvttDiHt8q334Li7LCjGzju+n8q9oUqyQtA71DQ=)
3: ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl (hash: 2Y8hIQGEuK9B3MTbXRk3ti8F+RoMMkgr48dM4QvQbj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:52:37:a5:56:c9:ba:82:6e:47:43:9c:85:f9:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426
Validity
Not Before: May 13 00:01:20 2026 GMT
Not After : May 14 00:01:20 2026 GMT
Subject: CN=df0e4a05a721befde347351e775bdbb9b339c3f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:09:0f:7b:28:4c:22:53:14:f5:16:6c:28:b4:
6b:0a:9d:91:5b:db:0c:70:1a:cb:43:de:5e:a3:4a:
85:d6:fa:66:43:a9:42:e9:5d:7f:8d:c8:ff:5b:b9:
8d:73:50:75:be:c3:16:66:4b:ec:26:1a:97:58:f7:
72:39:7a:2a:03:b4:1d:c7:1d:f7:a1:a3:97:11:a6:
35:e1:ce:36:ef:89:2b:a6:37:c6:ec:8b:14:3f:11:
60:42:62:d5:14:54:51:a1:b6:76:2a:8c:f7:b9:2e:
2c:11:de:f1:f9:8e:7b:84:c2:97:1a:15:5d:8c:30:
68:ce:d2:bb:c8:f3:d1:05:b4:bb:78:c2:44:a9:d0:
50:14:7d:7f:ab:62:ad:fd:33:04:13:d1:38:1b:1b:
cf:64:19:7a:32:f8:2c:5f:aa:21:45:0d:45:99:49:
d5:a0:03:13:90:0a:e3:c6:47:0c:60:62:52:2d:f9:
e4:e4:f9:dc:b6:2e:0a:86:da:85:50:7b:77:17:8d:
18:36:22:0c:e5:2b:23:f9:a4:be:82:0a:80:8e:a0:
ed:86:5b:d3:ee:5e:c6:46:84:12:15:22:f6:a2:c8:
fe:3c:10:81:b3:92:6e:47:4e:fa:9c:f5:ff:eb:77:
8a:05:bd:db:00:24:92:b5:63:db:61:2f:62:5f:40:
4a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0E:4A:05:A7:21:BE:FD:E3:47:35:1E:77:5B:DB:B9:B3:39:C3:F4
X509v3 Authority Key Identifier:
keyid:B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:5b:a7:0c:1e:5c:06:cb:97:d2:64:ea:b9:94:45:de:90:fd:
ec:e6:73:21:ca:2f:26:7a:ca:84:07:40:2c:5e:c2:ae:15:76:
ba:27:a5:92:1a:e8:55:4e:2d:8f:df:79:26:ec:1a:5e:7a:fd:
52:64:41:9b:ab:e1:db:e0:46:c6:02:c2:74:05:d8:0f:a0:e5:
17:49:c1:3f:fb:ba:9a:cb:fd:dc:b4:cb:d0:0d:60:28:30:0a:
3f:db:7a:0a:b3:63:81:e4:fd:88:42:45:61:42:d1:ac:99:7d:
b2:61:86:6c:58:a1:9b:1b:31:36:2c:ef:43:a4:ec:e1:63:86:
72:b1:97:8b:04:b2:5c:f4:dc:0c:ff:5f:3b:ef:ba:b5:81:c6:
a7:00:1e:39:8b:09:6e:3d:ad:c0:4e:df:46:58:ce:02:93:22:
99:06:4e:e0:0f:a0:88:5d:38:29:e3:85:91:60:3d:b8:85:0c:
2d:9c:65:3a:6f:8e:5d:33:75:28:1e:ab:33:9c:d1:5b:54:a2:
97:6e:cf:be:52:eb:47:25:65:87:39:34:d8:f3:2b:ff:86:58:
7c:af:22:91:f2:80:bb:18:0a:3d:8b:2b:b0:1b:2b:e4:83:10:
15:aa:2c:cf:6e:44:e7:64:52:16:06:64:b8:2f:48:5c:4c:38:
68:4c:33:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:32:36 2026 by rpki-client