Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.mft
File: TTxfCqFBARzi2_GMzOqsjSOoAlM.mft (raw, json)
Hash identifier: N/Npoyz9EZrbFHBAPARgTEmVSQ1R+/wPCAmK6Mlo76I=
Subject key identifier: BF:BB:A2:76:F2:63:A1:46:D6:BB:C0:21:E3:13:E9:18:34:BB:F2:E3
Authority key identifier: 4D:3C:5F:0A:A1:41:01:1C:E2:DB:F1:8C:CC:EA:AC:8D:23:A8:02:53
Certificate issuer: /CN=4d3c5f0aa141011ce2dbf18ccceaac8d23a80253
Certificate serial: 019CE411231E128D0130C0BC062B470FB26C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTxfCqFBARzi2_GMzOqsjSOoAlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.mft
Manifest number: 0590
Signing time: Thu 12 Mar 2026 22:00:54 +0000
Manifest this update: Thu 12 Mar 2026 22:00:54 +0000
Manifest next update: Fri 13 Mar 2026 22:00:54 +0000
Files and hashes: 1: 25Z4VEtMdr8mirSyT68RGYIDnRA.roa (hash: lvnbo3XhmGJZhSdH7jyEy3U5ULLTyPw51UAj+VCuEeY=)
2: TTxfCqFBARzi2_GMzOqsjSOoAlM.crl (hash: tQqhI7E/lWcnIt+8ui50O0qAQLVbKjKZlsBaAwLQnMc=)
3: dqMlRayS2Zk8T9yw4HnObXcfkFs.roa (hash: ZflJfUfYgkfuQwoF8VaNgzB/zsaQQoupZA9LCKNCHvw=)
4: n8CSKoRLuT4x4jI0qfGa0BhbHd8.roa (hash: n2uonuz5ZghRs61kAlvv99Bmctae2IN7sgoaLTAtaIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTxfCqFBARzi2_GMzOqsjSOoAlM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:11:23:1e:12:8d:01:30:c0:bc:06:2b:47:0f:b2:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3c5f0aa141011ce2dbf18ccceaac8d23a80253
Validity
Not Before: Mar 12 22:00:54 2026 GMT
Not After : Mar 13 22:00:54 2026 GMT
Subject: CN=bfbba276f263a146d6bbc021e313e91834bbf2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:73:00:91:cf:d3:4e:be:f1:cb:97:15:17:e2:
11:62:e9:b4:ea:f3:99:37:4e:c3:40:89:18:b1:71:
c5:e1:79:4c:53:64:63:ff:51:3c:91:c1:f9:f5:c5:
af:f7:b1:6d:18:7c:0f:c9:73:91:49:3f:09:f7:02:
c2:44:81:1f:f7:81:7c:b3:da:d8:ef:69:e4:2b:58:
84:6b:69:60:7d:c4:52:13:a1:7e:7a:e4:65:9e:8c:
90:cf:9e:1a:e2:cc:e9:0b:c7:9f:a5:2e:71:23:59:
22:00:0c:63:e7:41:12:5e:e0:39:f4:72:81:27:a3:
55:7e:f8:1e:fa:00:a6:89:19:f3:54:c7:7f:93:d0:
c1:a2:2b:6a:a6:7a:3d:40:c5:85:52:f6:1f:54:d5:
97:5d:87:96:b7:fd:6b:10:63:60:9e:06:63:52:85:
83:01:25:a0:cd:1e:ea:18:ba:cc:39:c8:5a:5a:89:
ab:1f:58:e0:46:88:ff:5a:b0:fa:76:48:5e:f6:7d:
26:3f:27:c1:84:25:9d:16:a4:87:62:b0:51:4a:85:
b2:f7:f9:c4:f0:d3:f6:a9:c9:cb:d0:11:5c:a8:b4:
6e:19:69:e2:99:7d:d9:92:67:96:a7:43:37:9a:8b:
c0:50:de:13:a9:fb:5d:f7:29:65:96:ca:46:fb:23:
d1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BB:A2:76:F2:63:A1:46:D6:BB:C0:21:E3:13:E9:18:34:BB:F2:E3
X509v3 Authority Key Identifier:
keyid:4D:3C:5F:0A:A1:41:01:1C:E2:DB:F1:8C:CC:EA:AC:8D:23:A8:02:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTxfCqFBARzi2_GMzOqsjSOoAlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:6c:f9:f5:78:5e:21:83:e3:78:24:6a:ff:80:e7:11:be:dc:
0a:d3:06:f4:3e:94:c3:d4:eb:78:40:98:58:45:57:9f:bb:bd:
07:bb:91:5f:4b:cc:b7:6f:51:57:54:76:a0:d2:d5:7e:04:c5:
ce:25:c2:9b:d1:14:77:23:c7:5f:d6:9b:1c:7a:1d:60:05:78:
2a:61:64:dd:37:2f:b8:7a:e3:1b:6f:6e:b7:71:c6:5d:b5:37:
2a:d1:8d:c8:56:f6:ff:6c:25:c9:0f:da:c5:40:ee:15:ce:6f:
d9:64:b6:fa:33:85:8b:d7:f4:b8:a9:12:6a:93:78:c4:98:54:
27:55:4c:68:a8:4c:30:e8:72:e6:f1:aa:05:3f:bf:6b:40:e8:
a1:6f:52:c5:b0:36:9e:0f:24:b5:e1:09:bf:be:8f:82:c9:37:
e9:25:71:0c:9e:ed:d6:25:cb:4d:95:a7:34:58:4e:09:80:bd:
9c:ff:3e:c5:0d:34:41:23:39:ea:7b:61:2f:62:30:72:60:ea:
b6:06:5d:a4:bd:ac:c9:a3:d8:e7:22:c3:99:5e:2e:d9:ee:ef:
35:4c:7b:07:34:68:9e:b2:13:b3:28:f6:5b:29:2d:f9:91:ef:
45:41:1e:89:7a:7b:c0:ab:e7:53:67:24:75:a5:10:e1:11:23:
bf:f6:c9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:24:32 2026 by rpki-client