Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/tRFbXBJF3DDhIwQHnslKNe1SfGY.mft
File: tRFbXBJF3DDhIwQHnslKNe1SfGY.mft (raw, json)
Hash identifier: XIpVcJl7BSWC7FCkcL3Cy54s0aayeD77AXkSwh1KJ70=
Subject key identifier: DA:39:CA:B0:F4:DC:A2:AF:78:57:3F:7F:5B:12:DF:30:4A:C2:62:EC
Authority key identifier: B5:11:5B:5C:12:45:DC:30:E1:23:04:07:9E:C9:4A:35:ED:52:7C:66
Certificate issuer: /CN=b5115b5c1245dc30e12304079ec94a35ed527c66
Certificate serial: 019DA309DFBD5B32F26A041D0B6F6CE8067C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRFbXBJF3DDhIwQHnslKNe1SfGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/tRFbXBJF3DDhIwQHnslKNe1SfGY.mft
Manifest number: 0288
Signing time: Sun 19 Apr 2026 00:00:26 +0000
Manifest this update: Sun 19 Apr 2026 00:00:26 +0000
Manifest next update: Mon 20 Apr 2026 00:00:26 +0000
Files and hashes: 1: VwLAIV5D66a6FPS07LFDWIQS-_0.roa (hash: T9H++z3WO1CHzgCbp0BP6ZLUx+OwVcmGlNY7g9M8Uf4=)
2: tRFbXBJF3DDhIwQHnslKNe1SfGY.crl (hash: eLSBmbJes1CQE0onGob0asHOvAABKFBUjzR/UCIaKvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/tRFbXBJF3DDhIwQHnslKNe1SfGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/tRFbXBJF3DDhIwQHnslKNe1SfGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRFbXBJF3DDhIwQHnslKNe1SfGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:09:df:bd:5b:32:f2:6a:04:1d:0b:6f:6c:e8:06:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5115b5c1245dc30e12304079ec94a35ed527c66
Validity
Not Before: Apr 19 00:00:26 2026 GMT
Not After : Apr 20 00:00:26 2026 GMT
Subject: CN=da39cab0f4dca2af78573f7f5b12df304ac262ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9f:d1:85:a0:0b:6f:2b:d5:6b:20:d4:c4:74:
a0:d5:d8:26:27:93:62:a7:a8:db:6a:14:8f:04:ce:
0d:a1:c5:89:56:c3:32:35:25:af:26:bb:96:88:e5:
64:c6:68:60:8c:dd:f8:77:f5:d7:87:03:6d:45:e7:
01:71:73:92:70:b0:95:16:4f:c9:05:2a:ea:b2:49:
6f:8f:50:9a:f7:ae:45:ff:4a:71:7e:93:23:55:1b:
34:df:2f:f1:64:45:ae:96:4f:ce:05:5c:2f:bb:01:
d3:da:5a:7a:ca:8b:55:b0:30:57:8f:c9:da:cb:e7:
67:58:76:c1:cb:4c:9a:c3:16:f0:90:c8:e0:4d:60:
a4:66:12:20:00:78:19:0f:52:8f:d6:c4:2c:7f:3d:
61:a4:86:91:de:ca:39:f8:59:7b:2c:73:81:78:54:
33:7f:06:18:9a:39:9c:e1:58:07:13:98:ae:b8:08:
c7:2c:52:96:36:e5:95:5d:86:1a:9f:30:bd:34:ad:
cc:fc:a6:3d:ae:1d:56:50:b6:20:d7:bb:9d:72:a4:
ec:18:ee:66:8e:50:19:68:20:21:40:fa:97:09:b6:
ce:fb:3f:2c:8b:88:5b:90:5c:f6:2c:cf:aa:4c:3a:
75:9f:64:08:83:43:49:16:5c:a8:b7:87:28:18:91:
59:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:39:CA:B0:F4:DC:A2:AF:78:57:3F:7F:5B:12:DF:30:4A:C2:62:EC
X509v3 Authority Key Identifier:
keyid:B5:11:5B:5C:12:45:DC:30:E1:23:04:07:9E:C9:4A:35:ED:52:7C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRFbXBJF3DDhIwQHnslKNe1SfGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/tRFbXBJF3DDhIwQHnslKNe1SfGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/tRFbXBJF3DDhIwQHnslKNe1SfGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:3b:b6:9c:8a:98:14:b5:79:f6:3d:2e:85:db:ab:0b:ca:98:
1b:f7:9c:aa:87:b0:54:21:cc:4f:e9:c9:19:b2:de:9d:1f:6c:
e5:d7:98:62:15:a1:30:75:50:5a:fe:5f:a8:38:22:40:49:ef:
54:26:eb:14:1d:fc:02:b0:d6:42:33:88:09:2b:59:8e:a7:a7:
f7:05:0b:fc:59:1b:43:04:54:7a:ca:e3:f3:93:54:00:2c:d2:
fe:1c:96:78:59:54:5a:28:fc:ca:71:18:4f:7c:dc:8e:7a:ae:
a7:81:ee:8b:b5:e5:31:80:9a:c4:5e:da:ba:2d:5d:41:66:6b:
e4:39:46:0c:20:12:25:01:83:25:07:57:8a:77:aa:ba:f5:4a:
45:41:31:a3:bd:12:3b:05:b2:f6:83:95:cf:3a:9d:51:c1:db:
3e:1c:38:37:30:a7:7e:08:bc:6b:96:d6:ff:69:90:bd:75:41:
33:46:00:63:28:45:24:af:51:c1:78:40:08:49:9a:72:b8:d0:
97:3d:5b:4e:0b:be:f4:97:fc:34:9e:ae:31:1a:34:33:5f:85:
40:ab:56:7c:1d:21:29:14:03:71:9c:c0:6c:63:52:be:6a:66:
c0:41:de:46:b4:bc:66:0e:67:bc:03:b6:e0:51:cc:6a:b9:bd:
50:2a:7b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:27:36 2026 by rpki-client