Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
File: ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft (raw, json)
Hash identifier: ysm85o0zs1WRzsKYsl1Q6YH7oTTc+EBoNW6rtouwLi8=
Subject key identifier: B5:11:89:24:58:DB:CB:33:21:F3:28:47:3C:99:18:31:EC:1A:27:C4
Authority key identifier: B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26
Certificate issuer: /CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426
Certificate serial: 01A102490104B8587383668C919B863E02D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
Manifest number: 095B
Signing time: Sat 03 Oct 2026 15:01:40 +0000
Manifest this update: Sat 03 Oct 2026 15:01:40 +0000
Manifest next update: Sun 04 Oct 2026 15:01:40 +0000
Files and hashes: 1: Ypj1u0D-dKP25bpDr5b37lFIWLY.roa (hash: sZTi+uNahtkDx1CWD+fSQJ3e4s6S3VqVHfRHxysjxvE=)
2: b9kuA0hkVfgLPA4Lc4cA836L2-E.roa (hash: povqVvttDiHt8q334Li7LCjGzju+n8q9oUqyQtA71DQ=)
3: ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl (hash: QSfzH/z5DxGfd5Sa0fUtljdVKgaytqXwKBDGEgGScO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 15:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:49:01:04:b8:58:73:83:66:8c:91:9b:86:3e:02:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426
Validity
Not Before: Oct 3 15:01:40 2026 GMT
Not After : Oct 4 15:01:40 2026 GMT
Subject: CN=b511892458dbcb3321f328473c991831ec1a27c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:09:33:e7:69:9c:e4:dc:93:97:ee:51:93:fa:
ab:38:85:e2:56:a6:12:ae:2b:d2:52:e5:5c:a2:d9:
47:53:ab:53:04:7e:50:4f:fe:80:c2:db:e2:f5:4c:
a4:57:5e:94:fd:b4:fc:3a:8c:3d:98:71:6c:23:93:
1f:1b:70:ab:a1:d4:e4:29:f2:32:72:cf:ee:75:de:
4a:b3:1b:9b:8e:61:0f:8b:c4:23:19:37:af:96:e3:
9b:aa:98:05:66:3b:8e:dc:8c:06:8d:39:e1:f3:ce:
f0:2f:9a:b0:ad:0d:77:63:32:dc:45:a4:21:6a:d0:
c9:3e:4d:fc:43:1e:91:91:df:54:7f:89:97:75:54:
81:27:18:7e:64:5d:59:f7:9f:cb:c5:25:1d:ac:c4:
c4:dd:31:cb:df:a1:d9:d1:07:62:2b:8e:51:4e:d2:
c4:b0:db:2f:d8:10:16:36:69:29:29:4f:3b:50:7f:
7e:01:c4:46:05:af:c5:da:c6:d2:5c:27:c4:71:85:
69:c4:49:18:d7:02:3c:e1:0a:e1:b1:ca:c4:5e:a4:
08:02:cc:4e:93:eb:36:2b:c9:c7:3c:6a:6f:82:28:
ae:e1:b8:a6:26:d4:6c:8b:bb:5c:fc:7a:7f:08:2f:
fc:bf:01:f9:88:39:c6:2b:07:d1:c8:f2:4b:5f:07:
2a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:11:89:24:58:DB:CB:33:21:F3:28:47:3C:99:18:31:EC:1A:27:C4
X509v3 Authority Key Identifier:
keyid:B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:d4:72:ec:9a:32:12:e9:e9:2d:1a:0a:7f:f5:1a:68:d2:04:
83:22:85:d8:f6:83:12:c6:99:73:b7:ee:e7:f7:7c:41:6b:22:
0b:4c:ef:3b:a6:26:a1:2f:0b:0d:50:88:c3:1a:08:46:b5:8a:
88:c8:21:72:98:1a:2a:24:12:5f:1c:8f:ff:11:cd:d1:18:1f:
33:57:11:8c:92:0f:df:a0:b2:4c:da:4b:4c:03:96:78:59:72:
e8:52:cd:e3:7a:65:87:db:5c:bd:26:f7:7d:5a:1c:93:5a:5f:
2c:f0:c7:58:63:05:6f:a5:8b:3d:99:65:cc:2d:56:96:d4:25:
fd:dc:4c:df:3c:d8:80:67:71:ee:1f:aa:6b:48:b8:f9:90:94:
5a:98:45:05:75:d1:6c:f9:4f:46:12:15:8a:b4:d8:61:df:d6:
69:84:45:57:59:18:98:70:50:6f:50:40:bc:4b:10:b6:74:de:
a6:c6:12:6d:c2:ab:d3:6b:e6:30:ce:12:20:bb:bf:5d:4c:9f:
b5:5e:38:c7:1c:f2:dd:9e:ab:09:7f:35:32:2b:64:3f:0f:f9:
b3:c9:b2:a8:cc:d3:1f:05:17:e0:c5:04:4a:33:39:32:b4:f1:
8b:9f:d1:49:2e:40:1a:b7:1a:c8:91:1b:cc:b7:63:50:cc:64:
7f:ad:dc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 04:12:16 2026 by rpki-client