Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.mft
File: trIzPwZlc_UxbgdaAc4kkLWMauE.mft (raw, json)
Hash identifier: vhuKgXbQEcjsRbjQx+uRrUwLQTwA9GMkoYUISpJOecA=
Subject key identifier: C1:F0:8D:9F:B8:79:29:F6:AF:57:40:78:CD:5C:26:B6:CF:15:AF:38
Authority key identifier: B6:B2:33:3F:06:65:73:F5:31:6E:07:5A:01:CE:24:90:B5:8C:6A:E1
Certificate issuer: /CN=b6b2333f066573f5316e075a01ce2490b58c6ae1
Certificate serial: 01A0CD48428E4D371A5D1A0A8F2D08D4522D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/trIzPwZlc_UxbgdaAc4kkLWMauE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.mft
Manifest number: 02D0
Signing time: Wed 23 Sep 2026 08:00:59 +0000
Manifest this update: Wed 23 Sep 2026 08:00:59 +0000
Manifest next update: Thu 24 Sep 2026 08:00:59 +0000
Files and hashes: 1: R53abRTy3nsePVXZ6FXqbP844c0.roa (hash: roRhMTyLNIYOGvT9vt5IgOR5P+5/7DtKqsBJYyp8XnI=)
2: ccTIBXpnBKiCIFP6jtkeUYvcfyU.roa (hash: RYLFC72B9dzFoQN0FlnNd+oyUoSf2vNtWKltjAP5ay0=)
3: dyP9HmlPNYApUiXMVkJy7vMe5z4.roa (hash: ZvC63f+lYCaC59XADOOzP040O3Hve9ZkEMDWI+F9kcM=)
4: loPeDfGPyDMlaIz52TWhtcsHUe8.roa (hash: eVYCTyXWXF7uzmYgmDXlX+QmiWaxF3k2ICYH5NEVWDE=)
5: trIzPwZlc_UxbgdaAc4kkLWMauE.crl (hash: FrAx/EJ/mUePftkC9jzQOiCzTqd2II6GeYjOL/9qs9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.mft
rsync://rpki.ripe.net/repository/DEFAULT/trIzPwZlc_UxbgdaAc4kkLWMauE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:48:42:8e:4d:37:1a:5d:1a:0a:8f:2d:08:d4:52:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6b2333f066573f5316e075a01ce2490b58c6ae1
Validity
Not Before: Sep 23 08:00:59 2026 GMT
Not After : Sep 24 08:00:59 2026 GMT
Subject: CN=c1f08d9fb87929f6af574078cd5c26b6cf15af38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e3:b3:56:95:6c:70:f9:e3:45:53:e3:aa:00:
60:d9:24:c8:d6:d4:95:96:8a:22:ea:c2:88:af:07:
18:1c:c2:37:f9:1b:47:05:e1:b5:10:9d:8f:7f:2e:
4a:1a:c3:53:8c:19:ad:e2:29:85:be:cf:38:df:bc:
3a:68:a9:ee:1f:6b:12:f9:16:13:36:9e:47:2a:24:
99:bb:03:49:96:fc:e1:fa:3c:e2:a4:47:ca:96:c5:
58:ae:ad:3e:73:fe:72:c5:c5:d3:e7:be:ab:26:a0:
1a:a4:e0:64:6b:f0:7b:a6:61:35:ab:07:4e:66:21:
ec:a0:be:db:19:cc:02:33:de:35:ea:0a:cf:23:a3:
8b:05:fb:3c:c9:40:20:64:b2:f6:13:06:f3:ca:e4:
4f:f0:2a:2b:42:a7:57:50:03:ea:38:8e:27:6d:d5:
22:bb:a5:ed:5c:38:17:62:7e:98:82:8f:ce:d5:8f:
78:b5:09:a0:78:de:6c:aa:90:5f:d9:1f:2f:22:38:
63:d9:75:b5:3a:9b:98:22:47:9b:ee:6d:e2:1a:bd:
fc:84:71:56:c1:ae:a6:2e:7f:d6:7d:5c:26:d9:5f:
f9:57:d9:d6:d3:ce:f9:77:13:5d:fa:1b:63:1c:db:
f7:b8:62:a0:9e:62:db:42:48:fb:41:16:7f:f6:46:
44:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F0:8D:9F:B8:79:29:F6:AF:57:40:78:CD:5C:26:B6:CF:15:AF:38
X509v3 Authority Key Identifier:
keyid:B6:B2:33:3F:06:65:73:F5:31:6E:07:5A:01:CE:24:90:B5:8C:6A:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trIzPwZlc_UxbgdaAc4kkLWMauE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:63:1e:d1:61:f8:26:a2:2d:58:fd:a9:95:44:e6:61:f1:be:
48:83:7b:bd:92:40:d6:60:a1:f2:22:07:68:7b:a7:ac:f6:dc:
65:c3:72:59:0e:a3:94:3c:fd:7b:a4:27:1a:a0:ee:c6:3a:4a:
fa:76:37:dd:aa:ca:ac:5a:78:b6:8b:2a:c9:80:4e:99:f2:50:
70:ca:0b:c8:6f:ad:32:88:9a:19:2b:c1:7a:03:80:ba:f2:ee:
d2:7b:24:50:92:34:fc:2c:c7:a7:b9:f9:ff:81:d3:4d:9f:65:
84:92:98:ef:89:be:44:e8:f9:47:4e:4c:4d:f6:84:0d:05:fa:
97:c4:be:0d:b1:2d:c6:8b:bd:9c:5f:71:2f:9c:0e:c8:9d:7d:
db:ad:ba:d8:ab:ea:fe:fe:f4:92:e6:e1:31:dd:94:74:b6:18:
4b:33:68:1f:03:2e:62:19:39:cb:4e:ea:2b:95:52:98:3a:55:
62:de:15:7c:32:d6:83:30:69:4b:00:6c:c3:ce:8b:70:bf:6f:
f9:ab:8d:7e:61:38:4d:1d:7e:cc:39:76:7c:a2:2b:05:14:36:
f9:13:d1:fc:2b:73:f3:4c:b5:4a:37:76:4e:2f:51:67:fe:1d:
fb:1b:21:30:69:12:6d:b5:41:3f:9b:cf:9c:51:bd:3d:7d:1e:
17:ef:58:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:21:32 2026 by rpki-client