Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.mft
File: tRYDJr5-XNw1tcA2RBFjzSWkl00.mft (raw, json)
Hash identifier: xfgiQ3wc2PaU2vcDXtrM0D/wMww7yKPZOtq9Kmg+09k=
Subject key identifier: 61:1F:99:68:B7:13:3A:22:28:E5:C2:22:51:D8:9B:DC:A7:9E:D1:42
Authority key identifier: B5:16:03:26:BE:7E:5C:DC:35:B5:C0:36:44:11:63:CD:25:A4:97:4D
Certificate issuer: /CN=b5160326be7e5cdc35b5c036441163cd25a4974d
Certificate serial: 019CA9EB9962F8EE18E30082A6CB9428B3AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRYDJr5-XNw1tcA2RBFjzSWkl00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 15:01:55 +0000
Manifest this update: Sun 01 Mar 2026 15:01:55 +0000
Manifest next update: Mon 02 Mar 2026 15:01:55 +0000
Files and hashes: 1: 5f-UuDoTp5gYMURYo2jt2lK0wo0.roa (hash: Xs27w1pjtbaPiwS7XxbIK5JOznQzGRl8strYBgv7AYc=)
2: tRYDJr5-XNw1tcA2RBFjzSWkl00.crl (hash: JxYHg5UreJK6C31tjJY7xb8XdN+EwQ3PcGpFH31HwQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRYDJr5-XNw1tcA2RBFjzSWkl00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:99:62:f8:ee:18:e3:00:82:a6:cb:94:28:b3:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5160326be7e5cdc35b5c036441163cd25a4974d
Validity
Not Before: Mar 1 15:01:55 2026 GMT
Not After : Mar 2 15:01:55 2026 GMT
Subject: CN=611f9968b7133a2228e5c22251d89bdca79ed142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9a:2f:c2:aa:b9:10:48:19:9b:e9:0d:06:ad:
e0:3d:f7:5a:03:31:48:60:32:b9:42:13:17:ea:fb:
09:fd:7e:11:8d:41:05:16:42:ee:8a:94:a6:d4:b2:
59:e9:89:69:0f:f7:c6:7c:87:f5:b3:0f:68:fe:3d:
fc:96:06:da:ac:94:cb:96:1d:bf:ed:ce:6c:7e:44:
77:0e:77:ab:12:c3:bc:f4:1b:ce:3f:5d:23:b5:48:
0c:92:af:73:2d:c8:a9:67:7a:58:d7:bc:46:ed:dc:
6e:15:94:ef:25:02:60:ec:05:a3:fe:dc:1e:77:ea:
f0:ec:a7:74:80:f4:3e:25:4c:eb:ba:3c:be:6f:d1:
45:10:6e:65:b9:af:99:2e:a3:63:90:85:9e:3a:43:
d0:89:32:76:70:d7:1f:c1:06:56:bd:7e:39:57:5b:
5e:3f:6c:75:be:49:bc:3a:20:49:a1:de:46:9e:a8:
50:a5:75:15:d2:ff:2d:18:80:f8:5e:4e:3d:f4:44:
61:e7:06:6a:39:46:d0:82:d0:18:86:9e:eb:a7:49:
1b:95:96:d2:89:b6:96:1b:f9:bb:24:91:00:ab:e7:
41:5f:77:49:c0:cc:4f:d2:97:ae:71:84:e4:95:f6:
f9:14:fd:e9:0d:b8:b5:14:19:71:88:20:4a:5b:a2:
6d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:1F:99:68:B7:13:3A:22:28:E5:C2:22:51:D8:9B:DC:A7:9E:D1:42
X509v3 Authority Key Identifier:
keyid:B5:16:03:26:BE:7E:5C:DC:35:B5:C0:36:44:11:63:CD:25:A4:97:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRYDJr5-XNw1tcA2RBFjzSWkl00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:52:80:fb:b1:ef:7a:0f:d6:28:bd:b1:65:54:70:c8:89:87:
91:8f:a1:ee:30:cd:35:bf:88:26:1e:f1:53:93:53:aa:26:1b:
89:2f:be:aa:8c:c4:70:3a:22:c8:d5:62:e9:41:47:be:34:4b:
84:22:c7:55:e0:f5:7b:e0:60:16:04:9e:fa:2b:49:92:4a:c0:
af:32:de:d6:ed:86:5b:17:7f:2c:20:16:6a:c4:9b:1a:0d:51:
22:2d:7e:14:a5:47:84:16:4e:16:32:ab:42:10:f3:28:19:56:
a1:80:be:e6:31:38:35:11:84:8c:0b:5b:6a:c0:0b:e9:e8:0f:
d0:43:bc:a4:63:42:07:71:12:9d:7e:4c:a8:83:e5:61:fb:5e:
25:65:f9:36:ca:5c:3c:18:7f:fe:27:32:ff:c9:7f:c2:d3:e7:
9a:cc:99:20:1f:79:dd:18:d2:3c:09:42:2f:50:1d:4d:a1:11:
4d:00:4b:f5:6a:8e:91:0c:8e:96:ad:f9:ed:b7:8b:b3:5e:83:
18:c6:c5:cc:e1:2b:e6:d8:91:ba:a6:38:a5:93:d6:73:cf:e9:
68:57:f9:ef:3f:08:96:91:68:d9:0f:5c:d7:02:37:3f:5c:ed:
23:c1:39:90:ed:4f:64:6f:eb:3e:8f:9d:7b:62:ef:74:e8:22:
ec:20:2c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:34 2026 by rpki-client