Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/25651d-ee73-48ed-af68-29f420752d5e/1/travTd-DFvvxAck2ROZZQUZXB2I.mft
File: travTd-DFvvxAck2ROZZQUZXB2I.mft (raw, json)
Hash identifier: Jm5riq9Vn7rnBexLzmV+nn4UFeyer421+s4oHFBua6I=
Subject key identifier: 3D:B5:FA:65:7D:E7:C5:4A:4E:74:9B:84:27:89:A7:A5:27:C0:BE:BB
Authority key identifier: B6:B6:AF:4D:DF:83:16:FB:F1:01:C9:36:44:E6:59:41:46:57:07:62
Certificate issuer: /CN=b6b6af4ddf8316fbf101c93644e6594146570762
Certificate serial: 019D3940C8B661AA320341621B875C28B40F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/travTd-DFvvxAck2ROZZQUZXB2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/25651d-ee73-48ed-af68-29f420752d5e/1/travTd-DFvvxAck2ROZZQUZXB2I.mft
Manifest number: 0646
Signing time: Sun 29 Mar 2026 11:00:40 +0000
Manifest this update: Sun 29 Mar 2026 11:00:40 +0000
Manifest next update: Mon 30 Mar 2026 11:00:40 +0000
Files and hashes: 1: c-FJOZlIKFN6CN9lwMQEj8i5-4A.roa (hash: n9+iXHiynD+L9250sU27FEMenQGRsR/F4AyGQjkCYkk=)
2: travTd-DFvvxAck2ROZZQUZXB2I.crl (hash: MWWwCwnCTIxRx052beIAFQlHYBldvsMToW4CzxWYMzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/25651d-ee73-48ed-af68-29f420752d5e/1/travTd-DFvvxAck2ROZZQUZXB2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/25651d-ee73-48ed-af68-29f420752d5e/1/travTd-DFvvxAck2ROZZQUZXB2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/travTd-DFvvxAck2ROZZQUZXB2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:c8:b6:61:aa:32:03:41:62:1b:87:5c:28:b4:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6b6af4ddf8316fbf101c93644e6594146570762
Validity
Not Before: Mar 29 11:00:40 2026 GMT
Not After : Mar 30 11:00:40 2026 GMT
Subject: CN=3db5fa657de7c54a4e749b842789a7a527c0bebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6d:1d:9e:60:a6:4d:5b:5f:be:66:97:09:39:
7a:1e:44:fe:60:a7:8b:cd:b6:0e:b2:24:bf:6d:5b:
6d:18:8c:3d:da:da:09:34:56:eb:78:13:06:3c:d7:
d6:68:2d:85:6d:20:93:4e:f8:72:07:a7:50:e5:39:
23:eb:80:19:47:18:43:25:ef:a3:14:66:5c:6a:c2:
8b:7e:cb:e7:d1:82:85:a4:b5:ba:65:03:32:75:e3:
da:b3:52:92:27:9d:e5:6c:8d:e1:cb:77:ef:96:59:
91:ab:b1:e6:44:ae:78:1c:a8:df:a0:58:9a:ed:fb:
d5:49:e7:02:23:42:c1:3c:ca:0a:b1:87:02:f8:f0:
db:bf:cc:43:ae:8e:23:1b:84:4b:cf:c3:2d:f0:14:
0c:0b:2f:c2:dc:5b:56:32:5f:01:d3:19:8c:d2:63:
d6:80:03:76:0f:8a:6b:46:90:e6:d9:68:fb:b9:50:
dd:e5:84:77:37:1a:85:04:4b:77:e0:f2:42:8c:ab:
7d:1c:43:e2:84:be:35:0c:e4:58:c2:35:ca:23:eb:
8e:b1:a7:81:b9:64:66:a8:57:3b:91:74:1f:31:0c:
58:c4:0d:31:c6:d6:4c:bd:08:a4:9f:69:d5:d6:80:
ff:0d:ac:73:45:2c:c7:d1:88:8e:83:38:2c:42:7a:
f3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B5:FA:65:7D:E7:C5:4A:4E:74:9B:84:27:89:A7:A5:27:C0:BE:BB
X509v3 Authority Key Identifier:
keyid:B6:B6:AF:4D:DF:83:16:FB:F1:01:C9:36:44:E6:59:41:46:57:07:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/travTd-DFvvxAck2ROZZQUZXB2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/25651d-ee73-48ed-af68-29f420752d5e/1/travTd-DFvvxAck2ROZZQUZXB2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/25651d-ee73-48ed-af68-29f420752d5e/1/travTd-DFvvxAck2ROZZQUZXB2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:ce:2b:a2:7a:85:e0:8f:b0:fc:2b:b5:4d:e4:60:2c:3b:a3:
1c:50:3f:7c:2e:c4:b0:06:99:46:44:d8:a3:74:c6:34:03:20:
87:a7:02:e6:ca:9b:04:de:2a:65:9e:06:57:e2:4f:05:b3:ee:
d3:f6:f4:bb:f1:d6:9f:51:be:07:95:b8:e7:9b:83:8d:46:49:
e8:67:d7:a9:cd:6c:23:6d:a7:95:eb:73:fb:f1:b1:65:82:55:
bd:16:c3:66:e2:13:0b:1f:91:74:ec:6b:63:f5:44:c9:8d:10:
a6:6e:28:c6:fc:20:66:7f:47:1a:88:12:cf:3e:61:3e:69:54:
48:b4:e9:9e:36:7e:e1:26:6a:b9:32:4b:fc:cb:db:29:2a:09:
82:83:5d:dd:73:2a:78:5b:23:64:3d:17:b2:40:16:a3:7b:6b:
ef:4e:19:06:4a:17:ba:21:aa:51:e3:7f:08:2a:f9:e9:98:86:
aa:ef:d4:bf:25:42:a8:74:cd:72:be:51:e5:9f:25:61:d4:1b:
0d:a6:7f:07:71:ed:26:02:14:1e:20:7a:4f:be:be:49:f7:2d:
8e:3d:ef:69:20:45:b3:a6:d9:25:53:41:16:55:6c:bf:db:6c:
fc:e6:63:81:b6:02:ca:8a:75:44:b9:93:e7:56:0a:cb:31:f9:
9c:65:05:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:24 2026 by rpki-client