Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
File: ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft (raw, json)
Hash identifier: eN41LOMF+zK856eG06GJW5WQy/Ki/ZWlcLUgdGmK9Lg=
Subject key identifier: FA:F1:7B:AD:FF:69:FE:94:A1:66:70:1A:34:48:A6:AE:F7:74:0C:FF
Authority key identifier: B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26
Certificate issuer: /CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426
Certificate serial: 019F916C837A2708905647261A1869804E22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
Manifest number: 089C
Signing time: Fri 24 Jul 2026 00:00:35 +0000
Manifest this update: Fri 24 Jul 2026 00:00:35 +0000
Manifest next update: Sat 25 Jul 2026 00:00:35 +0000
Files and hashes: 1: Ypj1u0D-dKP25bpDr5b37lFIWLY.roa (hash: sZTi+uNahtkDx1CWD+fSQJ3e4s6S3VqVHfRHxysjxvE=)
2: b9kuA0hkVfgLPA4Lc4cA836L2-E.roa (hash: povqVvttDiHt8q334Li7LCjGzju+n8q9oUqyQtA71DQ=)
3: ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl (hash: X8oqG/DEiGHH7jkz2QSV6sjVAeDbTSgjzbuWnOHOcmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:83:7a:27:08:90:56:47:26:1a:18:69:80:4e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426
Validity
Not Before: Jul 24 00:00:35 2026 GMT
Not After : Jul 25 00:00:35 2026 GMT
Subject: CN=faf17badff69fe94a166701a3448a6aef7740cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:1d:29:8f:ce:67:02:e1:66:2d:4f:dd:43:8d:
d6:b2:0a:54:e5:2b:df:66:b4:48:7b:d1:1f:64:34:
ff:8b:2a:12:68:27:11:25:6d:f6:31:46:9a:d0:a6:
7a:88:09:47:47:38:53:c2:11:aa:aa:73:3d:3b:ac:
c8:c4:aa:3d:ee:e4:c0:07:45:a5:42:85:5f:25:43:
5f:a3:23:e5:1e:20:5a:9f:be:55:71:c8:fb:e9:16:
b7:2c:31:4d:5c:05:60:00:e5:ad:67:d3:dc:d4:98:
dd:74:0c:ce:c7:33:20:c5:ee:6f:9b:02:3a:93:69:
67:dd:d2:77:45:80:01:b9:33:ca:ce:b3:ff:90:8e:
8c:40:b7:a5:e1:d3:5b:78:aa:36:c9:db:9b:ea:8b:
5d:a3:1f:4b:cc:77:12:14:c8:25:64:49:c4:aa:93:
fa:b0:0c:94:91:c3:14:d2:8e:6b:eb:36:20:ec:41:
32:f1:5b:42:17:8a:ad:0e:5c:39:23:2d:af:1f:0d:
92:98:ae:10:05:2e:42:64:e8:5e:22:a1:bb:b7:59:
16:56:71:15:a6:26:d5:5b:d8:20:b9:b9:65:30:7f:
67:97:b0:30:e0:a5:db:3b:e4:34:58:49:4c:1e:e6:
0a:d3:ef:f0:c6:83:a5:43:33:e1:38:0a:a9:0a:5f:
f9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F1:7B:AD:FF:69:FE:94:A1:66:70:1A:34:48:A6:AE:F7:74:0C:FF
X509v3 Authority Key Identifier:
keyid:B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:38:c7:34:fa:67:3e:62:ca:24:07:ba:c7:2f:92:1f:99:c0:
7f:bc:b5:18:be:fa:06:44:55:eb:b2:01:ef:39:86:22:40:ea:
c4:09:48:50:0a:63:14:03:13:70:53:20:0f:89:d3:c8:26:61:
a6:f4:a9:30:78:d0:62:f7:69:81:39:c6:7c:c8:81:8d:a6:bd:
d8:e5:ea:30:d1:93:72:72:ce:ce:a4:02:1c:a4:49:a3:c2:aa:
3a:22:55:64:b4:f7:5f:c1:93:d0:fb:2c:93:31:ad:24:53:7d:
14:39:bd:e2:38:f5:19:f0:2f:7b:a4:35:b4:64:82:5a:cf:ca:
71:ca:5d:ce:fd:51:3a:bf:78:92:0b:85:0f:b9:a6:2a:cd:1b:
76:0e:8b:31:79:b2:fd:56:5c:8f:b9:ad:4e:fc:8e:b7:c4:f1:
78:aa:d9:8c:95:ef:f2:e7:65:36:1b:da:e7:91:b6:31:51:c4:
61:73:11:f9:60:9d:47:fe:96:be:7f:1e:03:d7:31:2a:75:0b:
75:c1:b7:c9:13:f1:6c:a3:5c:02:74:27:02:78:34:ad:64:b0:
d0:20:b3:d7:bd:26:34:19:41:4a:bb:66:23:0b:99:a4:39:9b:
c0:5f:6c:dc:93:dc:52:b4:4f:c4:06:c0:06:1a:30:03:e9:37:
2f:4c:e5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:56:38 2026 by rpki-client