Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.mft
File: trcm8FkrUE5yMwX2e6tRR9TqaW0.mft (raw, json)
Hash identifier: CtqYRN+Xx1RiVb0Xy4qxBMlcnrnBB/+bXaVs6yMn7UU=
Subject key identifier: A9:85:3C:09:18:AC:2D:16:5E:47:99:00:8D:B4:6B:BF:0D:87:1E:12
Authority key identifier: B6:B7:26:F0:59:2B:50:4E:72:33:05:F6:7B:AB:51:47:D4:EA:69:6D
Certificate issuer: /CN=b6b726f0592b504e723305f67bab5147d4ea696d
Certificate serial: 019CAC7E2919DB0540FEE1A550C0A9926321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/trcm8FkrUE5yMwX2e6tRR9TqaW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.mft
Manifest number: 0B87
Signing time: Mon 02 Mar 2026 03:01:15 +0000
Manifest this update: Mon 02 Mar 2026 03:01:15 +0000
Manifest next update: Tue 03 Mar 2026 03:01:15 +0000
Files and hashes: 1: BgaIoZwQRt2oZC2BzablBd309Sk.roa (hash: 0smh/WGipg6DXsx63DMVAp+gWZ9HDNa2kEwq3ysrdfQ=)
2: trcm8FkrUE5yMwX2e6tRR9TqaW0.crl (hash: qTEo0ei2F+C6s7P5eWPvjBl7JmsuTRofksk6G0KYQhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/trcm8FkrUE5yMwX2e6tRR9TqaW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:29:19:db:05:40:fe:e1:a5:50:c0:a9:92:63:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6b726f0592b504e723305f67bab5147d4ea696d
Validity
Not Before: Mar 2 03:01:15 2026 GMT
Not After : Mar 3 03:01:15 2026 GMT
Subject: CN=a9853c0918ac2d165e4799008db46bbf0d871e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:03:fc:43:2b:33:c7:3c:0b:f6:be:7a:07:83:
90:93:44:ca:3c:46:92:93:69:98:61:62:1c:0d:0a:
bb:ff:98:e7:52:a3:fe:2f:e5:26:19:81:03:e9:cc:
2b:32:7a:f3:45:40:d4:35:73:ce:a3:5f:00:42:5f:
75:07:9e:d5:f6:c9:a4:ad:08:31:62:7c:d9:75:b8:
0b:c7:a6:3f:0d:78:d2:2e:4c:7f:c6:81:62:74:76:
89:15:0c:28:40:83:66:af:24:70:63:50:19:94:72:
3c:9f:a5:cf:58:f5:b8:b9:a4:5e:7e:e5:46:87:65:
06:ea:c1:b0:e8:93:57:05:ec:89:84:e3:f2:82:9f:
b8:40:26:ca:30:04:6e:42:f7:d8:4a:c3:57:6a:e0:
43:50:18:f3:fa:c5:0e:86:10:e2:85:ef:72:8d:a8:
41:41:19:6b:34:c4:54:d7:7d:7b:d4:22:4c:60:5e:
9c:bc:28:0e:25:03:46:17:82:2f:aa:4b:7f:3b:6c:
45:c4:80:18:05:4f:b4:82:32:0d:8a:cf:c8:ad:d9:
ae:53:29:9a:07:fa:67:7a:b0:b1:0c:f7:2e:82:8c:
32:ee:2d:58:18:a1:0c:18:e2:3d:08:eb:60:e3:07:
3d:d3:06:43:d1:5b:83:94:46:5d:a9:cb:6d:b4:ca:
68:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:85:3C:09:18:AC:2D:16:5E:47:99:00:8D:B4:6B:BF:0D:87:1E:12
X509v3 Authority Key Identifier:
keyid:B6:B7:26:F0:59:2B:50:4E:72:33:05:F6:7B:AB:51:47:D4:EA:69:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trcm8FkrUE5yMwX2e6tRR9TqaW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:aa:0c:60:4b:f8:be:29:30:35:26:b1:02:5a:f8:3d:c1:49:
9f:cc:e3:48:8f:23:9a:19:e1:5c:56:38:2d:b5:27:99:3f:f3:
9c:54:6a:f9:66:23:9c:7b:71:e5:61:b0:ed:5f:20:c5:0c:81:
89:35:65:f6:bf:3a:d7:6d:d0:44:6b:55:ef:47:b5:cf:94:b6:
ac:1e:45:ab:bb:32:c7:50:13:b9:6c:85:fa:b3:fa:1b:b1:00:
ee:42:c3:94:44:07:17:01:44:18:03:ca:94:f8:26:42:6c:02:
0e:3e:34:b0:81:e9:78:27:6d:08:6c:05:b1:86:2f:4a:f9:c0:
63:cc:3b:93:6e:47:e9:fd:c1:04:7d:f0:5a:12:39:25:ac:3c:
67:a3:c8:70:99:35:b9:fe:27:c1:ca:7d:4c:bf:2d:cd:9d:98:
ed:41:cc:45:2c:ff:ee:59:0b:c2:0e:72:fb:85:6f:f1:23:57:
00:c4:4a:14:79:05:c4:4b:56:c9:92:c7:b6:ac:00:85:73:86:
03:65:e2:c6:5d:cc:e4:4f:b0:c0:94:c3:62:da:05:f4:e4:79:
f1:91:fc:7a:3e:37:dd:77:96:02:b4:a5:2c:a3:83:15:5a:29:
cc:a0:0f:39:79:c3:6e:a6:4b:79:47:b3:fa:92:8d:0b:a4:c8:
8e:4f:6d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:43:04 2026 by rpki-client