Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.mft
File: TrwmqzTIMZdDMt05mo5W6aqbe4U.mft (raw, json)
Hash identifier: HCeCZlM6Yr9c5dQhQK2ueWZ4r9LuOGPq71r21Q+N/0w=
Subject key identifier: EA:56:7A:7A:FE:CD:AD:1F:2D:F6:82:F9:BC:D1:CA:D8:D0:EA:BA:8B
Authority key identifier: 4E:BC:26:AB:34:C8:31:97:43:32:DD:39:9A:8E:56:E9:AA:9B:7B:85
Certificate issuer: /CN=4ebc26ab34c831974332dd399a8e56e9aa9b7b85
Certificate serial: 019D9C63810B2D0621FE4F88CE7A0B7BAFEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TrwmqzTIMZdDMt05mo5W6aqbe4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.mft
Manifest number: 0200
Signing time: Fri 17 Apr 2026 17:00:59 +0000
Manifest this update: Fri 17 Apr 2026 17:00:59 +0000
Manifest next update: Sat 18 Apr 2026 17:00:59 +0000
Files and hashes: 1: TrwmqzTIMZdDMt05mo5W6aqbe4U.crl (hash: IxtYceQ+xcKUrhhcv3OqdQpYZtv5ojqg9geKvakcqVg=)
2: zYL449gEhOrSRUOWk45-5w_QwxY.asa (hash: 2I3JzyYDlWOa37LiRrfqotSTSjqIyf07yQPMZe4sNg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TrwmqzTIMZdDMt05mo5W6aqbe4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:81:0b:2d:06:21:fe:4f:88:ce:7a:0b:7b:af:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ebc26ab34c831974332dd399a8e56e9aa9b7b85
Validity
Not Before: Apr 17 17:00:59 2026 GMT
Not After : Apr 18 17:00:59 2026 GMT
Subject: CN=ea567a7afecdad1f2df682f9bcd1cad8d0eaba8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f8:5a:f6:e7:39:0e:af:3d:54:8e:c3:b8:a3:
9e:98:79:f7:0f:0d:95:b9:af:09:78:a0:af:77:2e:
85:f9:c8:95:1c:94:e3:7c:4b:89:3f:4d:21:ec:e5:
ba:ff:c6:59:9f:26:1c:a3:d3:c9:67:54:71:d5:e3:
4b:82:16:7c:3d:6b:24:90:27:66:7b:00:0e:af:ba:
93:ed:ef:73:fe:06:82:87:df:dd:a9:c6:b9:f8:24:
02:f7:2e:76:1b:cc:99:47:a7:dd:96:4c:95:bb:88:
69:f5:35:6a:88:b9:99:e1:d6:b4:0f:ff:c3:7b:d9:
64:27:1c:b3:74:16:4e:6f:c4:69:b5:c9:23:3c:d0:
20:3a:9d:53:e2:fb:f8:4f:35:e3:47:d6:81:04:69:
b5:73:a2:d2:de:e0:d5:f2:e4:47:e5:f0:45:68:88:
34:36:58:b8:30:0b:c8:3d:0d:71:e7:18:f3:96:05:
d3:a0:04:67:c2:d9:ce:c0:a9:47:59:a0:66:a1:f6:
3f:23:1e:8b:c5:8e:48:15:0b:73:56:4f:c3:74:29:
b7:66:8b:d9:39:72:e6:f0:82:aa:70:1f:32:fd:ad:
cf:72:74:31:14:54:c8:b0:d7:c9:63:a7:6e:94:51:
3d:06:46:aa:03:bb:09:f4:40:78:f0:3c:45:8b:d5:
28:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:56:7A:7A:FE:CD:AD:1F:2D:F6:82:F9:BC:D1:CA:D8:D0:EA:BA:8B
X509v3 Authority Key Identifier:
keyid:4E:BC:26:AB:34:C8:31:97:43:32:DD:39:9A:8E:56:E9:AA:9B:7B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TrwmqzTIMZdDMt05mo5W6aqbe4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:30:d2:8e:94:77:76:43:24:f1:a1:15:18:e1:93:54:76:6c:
14:0d:3b:9d:e8:3a:0c:b9:cd:c3:b5:02:0e:26:93:bc:00:c7:
cb:aa:61:97:27:8a:42:1c:8d:f0:85:01:9f:e7:f2:8c:87:35:
a7:d3:c1:69:b9:f0:48:26:80:4c:70:9d:c1:ea:93:1f:e6:32:
ee:29:58:1e:d9:8d:ea:11:c1:21:29:c6:e7:64:4e:f8:ba:98:
fb:45:15:a4:4e:6d:4c:c5:df:15:f2:84:d1:50:2d:f9:fa:f8:
a2:7a:e3:71:e8:56:8a:2a:b7:9a:9b:0e:d7:28:67:25:1f:f0:
9d:b7:f0:98:24:d6:88:05:fe:95:1f:04:63:68:67:7d:74:1d:
4c:80:f6:32:a1:3b:ce:52:6e:a3:c3:a5:e0:e3:8a:63:37:e0:
3a:74:de:e3:8e:56:ba:0d:e4:87:b1:c2:4f:28:41:7f:2e:ae:
2c:37:09:bf:01:ef:d6:c6:e2:7b:a0:28:97:28:f3:02:f3:db:
46:16:4d:0e:11:dc:4b:fd:42:69:66:2e:2a:49:6c:ac:dc:a5:
de:6c:55:4e:97:dc:95:68:fb:e6:78:d0:69:1a:59:13:35:9d:
8a:84:47:ab:35:9b:6e:28:4e:50:b8:4e:29:a8:89:97:50:32:
e8:05:21:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:43:01 2026 by rpki-client