Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.mft
File: trcm8FkrUE5yMwX2e6tRR9TqaW0.mft (raw, json)
Hash identifier: KiMOz1Dh39zT0kfhh/wpN21cEPHp+As3jzcR8pJgi/E=
Subject key identifier: 11:47:16:BB:8E:AE:08:DD:2E:75:12:9C:47:D5:22:8C:58:7D:3F:83
Authority key identifier: B6:B7:26:F0:59:2B:50:4E:72:33:05:F6:7B:AB:51:47:D4:EA:69:6D
Certificate issuer: /CN=b6b726f0592b504e723305f67bab5147d4ea696d
Certificate serial: 019D981905D07235572F89A38C2AB4BD7AA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/trcm8FkrUE5yMwX2e6tRR9TqaW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.mft
Manifest number: 0C01
Signing time: Thu 16 Apr 2026 21:01:09 +0000
Manifest this update: Thu 16 Apr 2026 21:01:09 +0000
Manifest next update: Fri 17 Apr 2026 21:01:09 +0000
Files and hashes: 1: BgaIoZwQRt2oZC2BzablBd309Sk.roa (hash: 0smh/WGipg6DXsx63DMVAp+gWZ9HDNa2kEwq3ysrdfQ=)
2: trcm8FkrUE5yMwX2e6tRR9TqaW0.crl (hash: ReQtoUxu6cPHwTsD3sZb64jcYF36Ul+PVWaEJdlzGzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/trcm8FkrUE5yMwX2e6tRR9TqaW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:19:05:d0:72:35:57:2f:89:a3:8c:2a:b4:bd:7a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6b726f0592b504e723305f67bab5147d4ea696d
Validity
Not Before: Apr 16 21:01:09 2026 GMT
Not After : Apr 17 21:01:09 2026 GMT
Subject: CN=114716bb8eae08dd2e75129c47d5228c587d3f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d8:3a:49:d1:69:0a:23:9f:62:43:2e:aa:66:
a1:75:b6:c9:95:21:98:6f:85:a4:65:c7:50:18:e2:
48:6c:90:12:89:3c:0c:88:2a:03:b1:ab:c6:d9:b4:
73:10:52:71:65:cc:8c:99:6d:1e:07:01:d4:9d:bb:
02:73:59:ec:1f:c2:4e:25:3a:f0:67:02:56:3f:b2:
1e:e4:1b:0c:9e:22:ce:94:8e:88:60:82:8c:77:6b:
1c:43:53:30:ad:bb:9d:30:2b:86:b6:af:ea:30:b4:
08:86:af:9e:25:af:73:8a:77:ec:61:80:3a:02:ee:
72:97:15:a4:f4:4a:da:19:75:72:9a:7e:35:08:30:
1c:da:49:8c:5e:9f:11:31:bf:a5:82:42:54:71:0c:
ab:21:ed:74:13:a5:cd:6c:2c:3f:56:19:73:98:84:
87:ea:4e:57:07:c4:a4:48:61:89:ed:ee:8f:d7:b8:
c3:bf:69:51:5f:57:60:dd:c9:74:53:7b:35:96:ac:
2f:f7:2a:ac:ff:40:cf:a2:5b:9c:ad:a7:5e:f8:e8:
0c:22:a7:cd:9e:4c:ba:bb:1f:6c:97:e9:3e:08:a8:
5e:11:1b:45:bb:21:07:c8:24:f3:1a:d7:af:9d:be:
f0:7c:a3:e2:cc:6a:36:39:81:a0:98:4f:8b:b5:d1:
b2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:47:16:BB:8E:AE:08:DD:2E:75:12:9C:47:D5:22:8C:58:7D:3F:83
X509v3 Authority Key Identifier:
keyid:B6:B7:26:F0:59:2B:50:4E:72:33:05:F6:7B:AB:51:47:D4:EA:69:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trcm8FkrUE5yMwX2e6tRR9TqaW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:5f:d6:b4:e8:f3:25:27:e9:93:05:74:ba:39:8e:93:70:ba:
e0:e9:2c:37:ca:33:69:5c:4e:43:89:2e:9b:e6:68:d8:31:fd:
09:fa:15:b1:1c:a5:36:d1:64:a7:0f:a9:d5:87:35:7f:ee:97:
d6:4e:97:58:ed:35:99:ee:2f:0d:74:eb:2e:0f:f9:bc:f6:df:
7e:78:77:7b:f8:8d:cf:54:de:ec:16:c4:a3:6c:bf:20:ac:fb:
64:97:e3:3a:fd:5e:b8:23:2c:7c:a8:b3:20:d3:2e:79:09:d5:
8e:85:7b:91:bc:a9:89:3f:57:fe:3f:e4:0d:fb:2e:e3:51:7c:
05:7c:3a:74:a0:84:a6:9b:36:26:bd:77:a9:92:54:56:81:79:
68:17:0d:5e:06:19:e2:5b:94:d6:ad:2b:d7:93:1f:ea:91:2b:
5d:c7:01:06:b0:1e:c6:4e:b3:d9:2e:43:bc:40:fe:ae:cc:d6:
b0:cc:e3:fc:2d:38:83:1b:c7:56:f3:93:bd:ed:e1:df:d4:ac:
54:6d:2b:4e:77:23:11:a1:2d:28:07:4e:c0:ce:bf:28:65:7a:
84:c2:1f:d6:59:26:eb:e9:53:b9:1a:d0:20:bb:a1:71:81:78:
ca:07:c0:4c:fd:28:11:60:f1:a1:53:63:58:3f:09:dd:fe:9f:
01:67:b9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:52:27 2026 by rpki-client