Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
File: TTAqLdUXpho7lSdG8u6fvkNtY0k.mft (raw, json)
Hash identifier: y5L3Bw0vOaAooz3tPiuzCoeuPvGu5qs9KinvlAPo7TI=
Subject key identifier: FE:21:2C:8C:87:25:89:57:A8:F3:D7:38:C5:2B:0C:ED:AF:ED:5D:7E
Authority key identifier: 4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
Certificate issuer: /CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Certificate serial: 01A05969009333562100CA7BA66554583D8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
Manifest number: 1A35
Signing time: Mon 31 Aug 2026 20:00:48 +0000
Manifest this update: Mon 31 Aug 2026 20:00:48 +0000
Manifest next update: Tue 01 Sep 2026 20:00:48 +0000
Files and hashes: 1: 3XQl2aZGjx0G4B6lNhjKCU52GfY.roa (hash: FT3KtfFmeYDjTpv2vREaKYo1FYKB1NfeU+bTJfNupFI=)
2: BtjheHtMrVrls5cRXqprBV_cY_E.roa (hash: 0/bLQWtIHEPcsIkY5+SuruKHSF6pye9PcBvY10R3rFA=)
3: MKcSKQuThlhl7-lUDky950t59Bo.roa (hash: fmVr/24w+km0YFsLjQinoWMje0xwl7aW8GTMFVmYXv4=)
4: TTAqLdUXpho7lSdG8u6fvkNtY0k.crl (hash: C3oq2NXV1T2UDg+LZ+aZ5FAnrJT4qSkco7PT+ykNYZ0=)
5: XIFzkJPJ71521E26Mrj2xnc0JrU.asa (hash: VlbNe+O5EvKvAXRSzSuJJZA5UZMsBVV8HUf17LLjU3c=)
6: btNWOWDT0MwxaxnuKalIShgF76M.roa (hash: +XzTFhG5C/Y9XMQYyxlHrlhbiNm3k0WsQB2hF0bjvaI=)
7: chjNAC8nAY_1idgxZ4cutOeVbAY.roa (hash: jS+FDp72Ee84TtCvWXMWI7/kBBph6ZyKnK6dpccqwmo=)
8: ev8fsS2pQVCaQ4feU5zWLckpMSc.roa (hash: N1tvT2Z1uLP/2N8fWYJQhCEwoN2M5Na1KjKaQbkdT3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:59:69:00:93:33:56:21:00:ca:7b:a6:65:54:58:3d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Validity
Not Before: Aug 31 20:00:48 2026 GMT
Not After : Sep 1 20:00:48 2026 GMT
Subject: CN=fe212c8c87258957a8f3d738c52b0cedafed5d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:83:fe:84:bd:a0:33:56:e4:3f:f0:58:63:6d:
b8:40:18:1c:e9:c2:5d:aa:d6:1b:00:ec:0d:9a:c9:
d3:a7:78:ea:93:92:ee:87:57:70:be:8c:e1:28:86:
03:ba:55:0f:8b:80:1d:42:54:ee:49:f5:e3:d8:f0:
88:1f:77:dc:72:99:ed:a3:f8:73:45:00:52:4a:fd:
e7:17:01:de:3a:79:a3:d4:c8:3d:aa:8f:d1:78:85:
5b:86:0d:ac:af:ed:75:9c:fb:1b:7e:2b:aa:02:08:
06:98:a6:0b:1e:18:a2:6d:25:ee:92:31:27:10:77:
23:56:66:48:98:03:c4:8b:a7:20:b1:04:9a:a7:f9:
08:4f:5f:5d:ee:a2:c9:5c:4d:74:2d:c1:c5:0f:b8:
39:51:49:7b:9d:8c:4d:25:c1:69:32:37:11:4a:fa:
08:48:3a:07:65:59:4d:47:4c:f4:6b:21:ba:61:c5:
13:a3:3f:43:93:63:39:6a:33:ee:11:11:54:18:d1:
2c:ba:84:34:f5:83:6a:e7:30:8e:4e:ea:45:f4:78:
b3:c2:d8:f3:fd:cd:d6:63:f3:5d:32:eb:3c:28:23:
70:40:b4:a9:f8:c9:23:f0:73:25:46:4b:f7:54:bd:
27:c9:92:2f:93:7c:86:51:0f:a9:a4:78:66:ed:0f:
ac:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:21:2C:8C:87:25:89:57:A8:F3:D7:38:C5:2B:0C:ED:AF:ED:5D:7E
X509v3 Authority Key Identifier:
keyid:4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:9d:c7:fe:02:a5:06:2e:94:45:ef:f9:49:0e:0d:2c:d6:eb:
bf:de:e5:de:af:fb:d9:8f:1b:84:44:54:6a:aa:34:7c:ed:5c:
23:6a:20:2d:cc:aa:d4:dd:57:4f:36:83:f6:f2:4d:10:29:fe:
f7:ea:59:f3:bc:3c:0a:58:8c:e6:91:4d:ef:66:c8:d6:6a:25:
8f:9d:48:87:b5:26:59:62:2e:2e:8b:a7:ea:94:1e:f5:2f:ba:
17:a0:60:2d:4b:38:10:09:c8:34:bc:c7:06:a1:bc:d1:4f:3a:
01:4b:5b:5c:bc:6a:85:07:55:d3:b1:2d:13:25:f7:c8:b5:af:
0b:b7:e5:69:7c:fc:7a:a8:ed:ee:66:7f:8a:e7:b3:d0:67:3a:
31:b0:57:e2:20:1c:6f:78:1f:32:ea:e2:0d:e7:89:d9:84:2f:
99:fa:70:23:24:89:67:b3:82:ed:fe:02:44:01:50:a3:c6:f2:
55:15:48:44:82:17:c5:aa:11:35:08:77:0b:c9:07:82:49:87:
63:2b:bf:08:31:07:a4:a3:b0:81:c3:f3:e2:db:0d:09:c6:b5:
a8:72:c5:21:5c:06:89:9b:13:b6:2d:16:39:6d:ed:9f:49:87:
1b:e1:34:27:28:cb:74:e3:9d:ae:04:de:13:cf:95:f7:ce:61:
ad:a4:eb:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:28:19 2026 by rpki-client