Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft
File: TRDp1PSvuKTRuRnshZP0a6O7p_c.mft (raw, json)
Hash identifier: FmwgdFMivEw1olRzIzC1EsDeYUWPKwml1jmse8I52IA=
Subject key identifier: C8:17:82:40:FC:6D:2D:53:04:E9:A4:74:49:D1:7E:0E:A2:67:98:77
Authority key identifier: 4D:10:E9:D4:F4:AF:B8:A4:D1:B9:19:EC:85:93:F4:6B:A3:BB:A7:F7
Certificate issuer: /CN=4d10e9d4f4afb8a4d1b919ec8593f46ba3bba7f7
Certificate serial: 019DA30AE422DAC99F16890FD6204BE995BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRDp1PSvuKTRuRnshZP0a6O7p_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft
Manifest number: 15C8
Signing time: Sun 19 Apr 2026 00:01:33 +0000
Manifest this update: Sun 19 Apr 2026 00:01:33 +0000
Manifest next update: Mon 20 Apr 2026 00:01:33 +0000
Files and hashes: 1: TRDp1PSvuKTRuRnshZP0a6O7p_c.crl (hash: CIHIWrnxjb6t9o1SrMzf82E3MYc/R8w3KrXBqXmvbuk=)
2: ybTYbYLv17xwtnnG3u2atkmKaN4.roa (hash: OWVfyWd0t1HHKEHJtQqKXnwiKooL0KUiuA6wb+i5rHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRDp1PSvuKTRuRnshZP0a6O7p_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:e4:22:da:c9:9f:16:89:0f:d6:20:4b:e9:95:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d10e9d4f4afb8a4d1b919ec8593f46ba3bba7f7
Validity
Not Before: Apr 19 00:01:33 2026 GMT
Not After : Apr 20 00:01:33 2026 GMT
Subject: CN=c8178240fc6d2d5304e9a47449d17e0ea2679877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ca:34:43:0c:b1:9b:5e:ae:6e:ef:80:b6:98:
89:9b:7c:a3:5f:c6:c6:77:16:0c:50:a5:38:e4:9e:
b2:82:d3:b3:66:62:f8:d2:af:00:ef:d8:95:65:6a:
5e:9c:fe:e8:cd:52:dd:53:8e:e2:72:d7:61:90:19:
8a:ac:35:64:22:93:86:36:ef:a6:b3:58:9a:e2:88:
76:8d:e6:6e:94:db:2d:3b:35:4a:a0:9e:e1:af:02:
9c:67:40:08:10:1f:70:34:9b:96:f7:b3:70:ad:66:
72:17:ff:02:05:08:b2:05:de:9d:11:4f:78:aa:e3:
6b:fd:20:08:20:ed:37:35:ab:cc:32:ce:fa:23:09:
22:83:34:7f:96:14:2b:bd:aa:6c:3c:75:0a:11:d9:
0e:42:d9:75:60:a7:58:66:38:b6:ef:10:e8:26:0d:
8e:f8:00:4f:fa:fc:25:fd:12:c9:99:b2:d9:78:83:
5a:20:42:b2:df:d6:31:45:2c:1d:77:85:6a:35:ff:
c3:3e:10:e1:db:3d:59:75:09:ae:bf:cc:04:5b:54:
8a:bd:02:37:dc:4f:f0:c1:53:bb:be:7b:95:97:db:
be:11:8c:a2:a5:4c:4f:d0:a4:f4:20:a1:f4:df:3d:
ac:d5:d5:21:86:b7:25:3d:37:03:ef:7c:69:e1:42:
eb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:17:82:40:FC:6D:2D:53:04:E9:A4:74:49:D1:7E:0E:A2:67:98:77
X509v3 Authority Key Identifier:
keyid:4D:10:E9:D4:F4:AF:B8:A4:D1:B9:19:EC:85:93:F4:6B:A3:BB:A7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRDp1PSvuKTRuRnshZP0a6O7p_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:3a:95:9a:55:d1:b1:5f:8e:e9:3d:76:25:1b:35:ad:12:e4:
25:6f:52:7c:b3:5d:9f:68:e6:fd:8b:51:90:34:37:4a:8b:9b:
ad:4c:09:01:90:e5:6f:4d:36:9c:c2:89:e0:6c:f1:a8:36:0b:
69:53:dd:55:c0:f8:96:5d:d2:22:74:84:d1:ac:8a:c4:26:df:
4d:d8:70:0d:a1:1d:70:69:c9:98:f9:5f:cb:78:b5:61:d6:ce:
53:84:d1:43:0e:7d:2f:0b:98:ec:b0:cf:11:c4:7a:8e:14:77:
ab:37:11:42:fc:33:81:6a:45:54:76:e1:2e:f0:12:2a:66:3d:
54:5e:d9:d8:7d:a9:a6:41:6d:14:f0:a5:ba:91:4f:50:1c:7b:
10:fd:d8:c2:7b:28:11:db:73:22:4e:ef:d7:ca:f6:bf:e0:ea:
c6:c7:90:44:0c:7a:58:df:ea:5f:92:ae:ca:5e:93:1d:41:bc:
78:33:ba:31:c4:ca:a9:44:2a:ea:3b:53:42:47:dc:f7:38:92:
d7:e1:bb:03:35:ea:d8:d3:2d:51:c5:5b:98:65:20:35:fe:40:
69:37:45:5c:ca:8a:55:ef:c9:f5:65:f7:04:d7:0f:f9:d9:32:
d5:bd:d9:d8:55:bd:bd:68:59:75:b4:35:3d:b2:c4:c8:6d:e3:
0e:2b:27:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:10:34 2026 by rpki-client