Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.mft
File: trIzPwZlc_UxbgdaAc4kkLWMauE.mft (raw, json)
Hash identifier: 1zJP1/TbvQwmq/4UoF68tMjiZbFdlEDTlJX5VsgSB/w=
Subject key identifier: 44:90:10:2D:55:57:58:C8:E8:C6:4D:CB:8B:D3:5B:BB:24:05:EB:BB
Authority key identifier: B6:B2:33:3F:06:65:73:F5:31:6E:07:5A:01:CE:24:90:B5:8C:6A:E1
Certificate issuer: /CN=b6b2333f066573f5316e075a01ce2490b58c6ae1
Certificate serial: 019CAFB669DB7D9F6DFEA1B3D5291AA126F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/trIzPwZlc_UxbgdaAc4kkLWMauE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.mft
Manifest number: AE
Signing time: Mon 02 Mar 2026 18:01:33 +0000
Manifest this update: Mon 02 Mar 2026 18:01:33 +0000
Manifest next update: Tue 03 Mar 2026 18:01:33 +0000
Files and hashes: 1: dyP9HmlPNYApUiXMVkJy7vMe5z4.roa (hash: ZvC63f+lYCaC59XADOOzP040O3Hve9ZkEMDWI+F9kcM=)
2: trIzPwZlc_UxbgdaAc4kkLWMauE.crl (hash: l0zFMW5w+qpluo+bdDzbMHfbIQMefcfH2wu9hkGOC6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.mft
rsync://rpki.ripe.net/repository/DEFAULT/trIzPwZlc_UxbgdaAc4kkLWMauE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 18:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:b6:69:db:7d:9f:6d:fe:a1:b3:d5:29:1a:a1:26:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6b2333f066573f5316e075a01ce2490b58c6ae1
Validity
Not Before: Mar 2 18:01:33 2026 GMT
Not After : Mar 3 18:01:33 2026 GMT
Subject: CN=4490102d555758c8e8c64dcb8bd35bbb2405ebbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:76:4c:c7:30:20:46:98:5e:00:5d:b5:a1:70:
f0:a9:ea:43:01:09:28:6c:3b:14:7f:10:f0:3a:c2:
50:2b:ea:fb:26:0a:db:8e:ec:0c:54:d1:1a:37:a3:
51:5e:2e:68:c4:7c:c4:39:6e:e6:cb:28:60:de:d7:
ef:d4:82:42:a9:43:b7:24:9b:a1:c7:29:3b:61:53:
ce:5c:d5:6a:04:f7:0d:56:1a:9f:3b:3f:bd:2c:f8:
84:f1:b7:b0:cb:59:73:b4:4f:79:f2:6b:d9:9f:08:
24:30:14:62:0c:3b:53:0a:dd:4c:81:4c:6a:01:86:
50:7b:ef:2d:62:63:42:b9:ae:48:48:20:c8:20:f3:
47:44:0d:e6:af:97:8b:dc:9e:9e:72:c1:07:a9:5d:
e3:58:49:50:33:09:ea:04:e9:71:4f:0e:2e:d5:94:
32:17:10:8d:fe:a8:fd:d4:32:cb:35:d5:56:5e:bb:
93:22:6a:9e:34:c6:94:2f:1c:92:5c:13:4b:25:70:
ae:9e:66:c4:4a:6e:0d:1f:c6:4c:49:15:1e:ea:f3:
ec:1f:2a:8f:15:bd:7d:96:17:6d:54:41:6e:a9:86:
e8:a9:a0:0a:eb:6a:51:59:a0:0a:3f:d0:46:71:39:
d4:65:22:d8:f5:20:4a:04:b8:73:f0:66:36:ff:e4:
6b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:90:10:2D:55:57:58:C8:E8:C6:4D:CB:8B:D3:5B:BB:24:05:EB:BB
X509v3 Authority Key Identifier:
keyid:B6:B2:33:3F:06:65:73:F5:31:6E:07:5A:01:CE:24:90:B5:8C:6A:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trIzPwZlc_UxbgdaAc4kkLWMauE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:4c:ea:da:f4:c2:1b:fc:40:2d:c9:5e:36:b1:94:b0:4d:ff:
cc:50:28:78:ee:59:ed:50:82:b9:61:f3:79:91:b5:5a:15:87:
44:1f:eb:51:12:e3:2a:3f:7c:20:a4:c8:9e:a3:e9:42:04:f1:
ba:66:9b:e7:51:c1:a7:92:f3:1f:35:7d:46:3d:00:e0:86:33:
10:64:f7:03:57:e2:0e:d3:2f:b1:9c:bd:eb:4a:0b:3f:95:90:
e9:8d:dc:32:2d:f1:25:2e:a3:b3:08:fa:ee:97:da:28:aa:8f:
81:a5:c7:7d:10:f0:e9:6c:cb:55:2c:ff:e3:b0:a8:26:bc:a6:
3b:9a:8a:c6:46:74:1b:f5:4a:9a:1d:83:d4:8f:85:ca:29:77:
08:23:4e:3c:76:63:d6:8d:f1:b7:c8:cc:c5:7d:d7:38:ba:8f:
b5:df:33:99:d8:b4:6a:c8:37:fe:75:a3:d3:64:c0:2f:7d:a0:
2a:d9:ba:2f:e4:9d:8e:ba:35:5d:c6:10:a0:9b:fe:a4:36:41:
7e:4f:8f:f6:e3:1f:c5:af:55:a8:b8:45:91:e3:9f:b3:dd:ce:
a7:ed:70:63:ef:cf:f0:f9:67:1d:07:81:2a:d4:96:4d:40:f8:
9c:70:3d:99:08:19:d5:39:8c:d1:64:b8:50:30:30:a7:05:f8:
8e:0e:13:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:08:28 2026 by rpki-client