Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
File: ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft (raw, json)
Hash identifier: 6kbahpsJWTD/jfSKeRQrQYauP8h8LzDjRni/1bG4OSU=
Subject key identifier: F9:B4:EC:5F:B7:FD:B1:A4:5F:C1:3B:C1:3C:C2:E7:93:B1:06:38:3B
Authority key identifier: B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26
Certificate issuer: /CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426
Certificate serial: 019D38D2DAA8CDC87060C30092F729DEB509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
Manifest number: 0765
Signing time: Sun 29 Mar 2026 09:00:35 +0000
Manifest this update: Sun 29 Mar 2026 09:00:35 +0000
Manifest next update: Mon 30 Mar 2026 09:00:35 +0000
Files and hashes: 1: Ypj1u0D-dKP25bpDr5b37lFIWLY.roa (hash: sZTi+uNahtkDx1CWD+fSQJ3e4s6S3VqVHfRHxysjxvE=)
2: b9kuA0hkVfgLPA4Lc4cA836L2-E.roa (hash: povqVvttDiHt8q334Li7LCjGzju+n8q9oUqyQtA71DQ=)
3: ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl (hash: MatDrPUslnnGDgAtCH0P4Y6mVt6BpBq4gwngkSTaIaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:da:a8:cd:c8:70:60:c3:00:92:f7:29:de:b5:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426
Validity
Not Before: Mar 29 09:00:35 2026 GMT
Not After : Mar 30 09:00:35 2026 GMT
Subject: CN=f9b4ec5fb7fdb1a45fc13bc13cc2e793b106383b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:04:88:2d:a2:09:14:c5:4f:f5:e3:70:73:44:
96:3b:8d:62:1f:10:c9:1c:5a:57:6e:41:70:80:c9:
38:19:60:ad:40:66:75:80:1d:c7:19:a9:64:0c:5b:
05:57:a7:e7:03:6f:e8:4e:02:f4:5b:8e:b5:0e:d1:
eb:6a:ee:6b:48:fe:02:87:b2:e3:07:f1:67:23:c5:
7b:28:df:91:43:58:2f:f7:54:4d:52:37:3e:7f:de:
dc:2e:2b:8e:39:c3:0c:68:c5:31:82:f9:82:9a:fd:
2d:61:84:85:8a:b4:02:d9:99:81:77:0e:5b:3e:97:
e7:bd:02:a6:2b:14:39:54:ba:78:7b:1c:91:7f:dc:
c6:66:cf:29:0a:31:93:86:13:84:0f:a5:4b:8f:cb:
db:1f:66:66:a1:08:a4:ce:61:da:aa:7c:78:75:15:
c0:ec:39:6e:67:5a:ea:00:95:27:b9:b5:d7:ba:44:
71:5e:07:8a:90:1e:79:3b:97:ed:f8:40:44:d6:95:
77:dd:7e:61:e8:9d:35:a0:e0:90:55:b9:44:76:a8:
2c:09:4c:35:cf:1a:0a:4f:7b:fe:10:c7:41:99:4c:
57:b8:83:d1:63:22:00:d2:33:51:0f:8b:28:9c:16:
c1:91:31:41:39:ac:29:11:fd:f4:8d:8d:df:bd:08:
97:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B4:EC:5F:B7:FD:B1:A4:5F:C1:3B:C1:3C:C2:E7:93:B1:06:38:3B
X509v3 Authority Key Identifier:
keyid:B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:6b:6b:fa:d6:77:73:5d:8c:24:3f:c2:d7:c2:54:ca:46:c7:
f3:1c:5b:51:db:9e:d5:a4:c4:22:2e:6e:08:de:cc:06:e2:c4:
01:00:0e:c8:9f:65:32:8c:85:1e:6b:ff:99:1f:4b:50:97:cd:
c2:e1:43:e6:54:8d:2d:92:14:bb:63:9a:a7:92:59:a9:16:1f:
28:94:c6:4c:46:4f:e2:0b:19:c5:41:1e:4d:c8:29:a5:1b:83:
ff:f3:79:1a:1e:94:a7:6d:96:83:62:2a:18:25:b8:bc:19:a9:
d6:43:43:0e:77:8c:22:41:ce:36:b4:3e:c5:e0:a2:12:0f:1c:
eb:ef:be:0a:b1:f4:16:e8:ad:08:8d:47:ce:a2:6d:87:ae:8e:
9f:72:99:95:3a:aa:03:65:23:68:c0:02:6a:35:38:33:a4:fd:
08:d8:2b:95:ba:09:34:ce:55:87:b0:9a:d7:34:ae:2e:41:a0:
05:7d:40:31:d8:09:3c:72:15:ae:06:80:57:97:cb:c3:41:d4:
4e:f3:a2:23:ba:fb:58:ec:fe:fa:f5:a6:00:83:e3:4c:ee:05:
9d:be:95:a9:9d:1e:97:b2:a0:aa:8c:06:e8:65:62:c9:02:01:
a8:90:cf:1d:24:6a:4e:72:50:77:a1:3d:e0:2b:12:58:94:d0:
03:ed:00:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:29 2026 by rpki-client