Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
File: TTAqLdUXpho7lSdG8u6fvkNtY0k.mft (raw, json)
Hash identifier: JBGE3BhJ+/hrWKXRWM85MvCBalHPnzNYqIMjusxSDXc=
Subject key identifier: 8F:43:78:4C:4E:E4:AE:76:C9:47:6C:9E:8E:D7:73:F3:73:99:F9:72
Authority key identifier: 4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
Certificate issuer: /CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Certificate serial: 019F111BBE8BE6D4B01E7BDF0B2CA5DE9A8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
Manifest number: 198B
Signing time: Mon 29 Jun 2026 02:00:58 +0000
Manifest this update: Mon 29 Jun 2026 02:00:58 +0000
Manifest next update: Tue 30 Jun 2026 02:00:58 +0000
Files and hashes: 1: 3XQl2aZGjx0G4B6lNhjKCU52GfY.roa (hash: FT3KtfFmeYDjTpv2vREaKYo1FYKB1NfeU+bTJfNupFI=)
2: BtjheHtMrVrls5cRXqprBV_cY_E.roa (hash: 0/bLQWtIHEPcsIkY5+SuruKHSF6pye9PcBvY10R3rFA=)
3: MKcSKQuThlhl7-lUDky950t59Bo.roa (hash: fmVr/24w+km0YFsLjQinoWMje0xwl7aW8GTMFVmYXv4=)
4: TTAqLdUXpho7lSdG8u6fvkNtY0k.crl (hash: MrELbfmu1x5DFTQXx/NY3QeHioKBx7Amzl/tmZbkTqM=)
5: XIFzkJPJ71521E26Mrj2xnc0JrU.asa (hash: VlbNe+O5EvKvAXRSzSuJJZA5UZMsBVV8HUf17LLjU3c=)
6: btNWOWDT0MwxaxnuKalIShgF76M.roa (hash: +XzTFhG5C/Y9XMQYyxlHrlhbiNm3k0WsQB2hF0bjvaI=)
7: chjNAC8nAY_1idgxZ4cutOeVbAY.roa (hash: jS+FDp72Ee84TtCvWXMWI7/kBBph6ZyKnK6dpccqwmo=)
8: ev8fsS2pQVCaQ4feU5zWLckpMSc.roa (hash: N1tvT2Z1uLP/2N8fWYJQhCEwoN2M5Na1KjKaQbkdT3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:1b:be:8b:e6:d4:b0:1e:7b:df:0b:2c:a5:de:9a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Validity
Not Before: Jun 29 02:00:58 2026 GMT
Not After : Jun 30 02:00:58 2026 GMT
Subject: CN=8f43784c4ee4ae76c9476c9e8ed773f37399f972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4a:25:03:89:eb:72:99:2b:65:f9:0d:20:7e:
48:0c:47:ce:c5:2b:a5:a8:1e:c0:d1:05:9c:12:63:
ff:cb:58:2d:12:fe:53:6b:ef:55:91:57:c6:69:df:
54:3e:e5:07:ab:ff:38:55:1c:72:0b:03:80:ef:d4:
1c:25:5e:cd:cf:90:64:5c:1e:d6:f5:ce:44:51:c0:
28:1f:5e:63:77:55:36:c1:53:3e:8f:d4:1e:c7:f7:
6d:ef:d9:3b:de:cf:7c:88:7f:18:01:e4:85:ff:ce:
9a:fa:32:7c:5c:18:21:79:39:ca:e7:77:ef:1e:42:
44:52:87:36:06:e1:09:a3:a8:28:d3:8d:c7:ad:88:
37:7d:5b:22:ab:f0:d4:74:94:bf:c4:2b:18:cd:8b:
cf:c5:c5:65:95:37:3f:9c:ae:28:e5:55:2b:8d:ee:
dc:47:52:81:c5:38:48:5d:db:63:a1:b6:a6:61:a0:
2b:82:62:d9:08:f1:71:81:b8:48:86:af:75:e1:6a:
5d:a1:4c:b4:a1:e8:70:fd:26:0e:d4:98:dd:c5:64:
7d:3d:26:eb:7d:20:5a:87:c8:b0:fb:9f:3a:45:a9:
2a:f2:c0:f1:18:f1:05:ea:80:57:d8:0a:a4:97:62:
80:cb:86:32:90:cb:df:19:0a:e8:a0:89:23:84:47:
1d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:43:78:4C:4E:E4:AE:76:C9:47:6C:9E:8E:D7:73:F3:73:99:F9:72
X509v3 Authority Key Identifier:
keyid:4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:19:90:c5:05:a1:03:85:65:35:29:f8:87:3b:e1:be:f0:3a:
56:e4:a5:aa:0b:4d:5d:88:67:3f:ef:b4:53:ee:b7:49:a8:ed:
e5:19:0e:f4:7a:2e:4d:6b:6d:07:98:9e:f8:60:5e:aa:96:ec:
9f:d8:55:45:fc:4f:57:db:c2:79:17:3c:d3:9a:de:b7:fc:9b:
90:db:0f:c0:32:16:9a:24:26:f2:c2:d6:41:99:c2:0f:a3:70:
63:3c:2b:27:b2:e1:d1:0d:41:c3:0e:b5:de:36:02:99:7f:25:
34:b9:1d:d1:a2:26:c9:b1:7b:4a:3f:89:cc:cc:ff:f7:1b:44:
dd:b6:68:8b:9c:b8:a1:8e:cc:24:79:4e:e4:a2:4f:4b:ac:db:
10:60:bf:c0:63:ad:fb:d2:fd:88:d0:c9:39:65:02:63:53:9e:
80:0f:cb:2e:eb:78:1a:e1:75:f5:df:56:1b:12:b6:ab:a7:85:
2d:a9:ab:a6:1b:15:06:f8:c3:29:bd:04:e8:84:93:88:48:e1:
6b:8f:ba:f7:99:32:2f:75:b5:8c:cf:2c:7b:f6:64:ac:6c:c3:
f0:d9:12:c5:db:e7:ff:64:16:e1:40:9b:09:92:6f:47:a2:86:
62:e6:52:7d:eb:0f:d7:99:48:cc:49:c0:bd:50:1d:56:fe:cd:
0a:5c:5d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:34:30 2026 by rpki-client