Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
File: _trmiRA5jJ2O51bhaCAd2eiYm1I.mft (raw, json)
Hash identifier: VdOMDKRlL0kERAb6tP7mXrtr+TyWW1cP8Y3r5N61Bws=
Subject key identifier: BB:88:E2:A6:FB:29:71:12:32:06:FA:08:D2:9F:FD:96:4F:A8:26:46
Authority key identifier: FE:DA:E6:89:10:39:8C:9D:8E:E7:56:E1:68:20:1D:D9:E8:98:9B:52
Certificate issuer: /CN=fedae68910398c9d8ee756e168201dd9e8989b52
Certificate serial: 019D9A06D1D725245484AD08F37BBA5B9677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
Manifest number: 0538
Signing time: Fri 17 Apr 2026 06:00:31 +0000
Manifest this update: Fri 17 Apr 2026 06:00:31 +0000
Manifest next update: Sat 18 Apr 2026 06:00:31 +0000
Files and hashes: 1: 5sXzjnKS3JRs5_PkjVDa27eoC-M.roa (hash: 2V+6XQqLf/lpOVZXMep8bSqQydoN+IRrPy2YYET6j4Q=)
2: _trmiRA5jJ2O51bhaCAd2eiYm1I.crl (hash: lOGy1oMlG0EUwItU0BVg7Jvj/LsSlcUhkOBPt8aZX0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:d1:d7:25:24:54:84:ad:08:f3:7b:ba:5b:96:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fedae68910398c9d8ee756e168201dd9e8989b52
Validity
Not Before: Apr 17 06:00:31 2026 GMT
Not After : Apr 18 06:00:31 2026 GMT
Subject: CN=bb88e2a6fb2971123206fa08d29ffd964fa82646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:17:48:89:b5:81:67:1d:66:dd:35:6d:43:78:
87:c0:74:04:89:b8:5b:05:ed:38:56:79:25:05:01:
ac:00:11:2f:72:cf:6d:6b:dc:39:7b:45:bd:d8:da:
c9:58:bb:d2:73:38:2e:b5:81:89:54:52:61:3a:2d:
93:1e:21:85:d2:7f:4f:c1:08:26:9f:82:4d:ef:43:
c6:5e:3d:07:e4:88:60:84:5d:ab:7b:f5:d4:23:cd:
03:c6:a5:13:75:8c:eb:5e:2a:4d:18:dd:eb:e5:fb:
ec:1b:a3:bc:b9:11:92:d3:1d:da:2d:f6:b6:2b:6d:
4a:b1:c5:33:6e:a6:e9:40:34:36:10:42:92:4e:16:
d3:69:22:56:64:9a:c5:51:35:85:cf:62:00:4e:c4:
ea:5c:fe:3c:d4:76:77:3b:34:74:bc:a6:c8:23:8a:
c2:19:72:5c:4f:ee:d6:85:05:8e:86:71:17:6c:0a:
b9:94:70:58:ad:3f:4a:d8:3d:9b:53:3c:e2:5a:56:
3a:57:42:45:4e:fc:a1:31:05:c2:a8:93:f1:8e:33:
9c:f8:aa:4f:63:be:7f:72:05:ac:c8:80:f3:d3:b7:
9b:0a:10:08:0c:ac:77:00:43:4b:84:dd:27:72:71:
d3:ff:4b:0c:17:e2:d8:4d:15:ec:7c:25:d9:a6:91:
86:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:88:E2:A6:FB:29:71:12:32:06:FA:08:D2:9F:FD:96:4F:A8:26:46
X509v3 Authority Key Identifier:
keyid:FE:DA:E6:89:10:39:8C:9D:8E:E7:56:E1:68:20:1D:D9:E8:98:9B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:8c:9e:ec:c4:9f:45:f4:de:21:4b:04:82:e3:4a:40:6c:c7:
69:fc:b6:95:f0:ff:5a:47:10:fc:74:8c:9a:67:45:d4:bc:be:
d5:5a:91:41:8a:a6:b2:e3:f4:4a:83:08:1a:0b:16:70:01:43:
00:c1:cd:26:17:c7:e7:d6:63:cb:ad:b3:2b:cb:09:dc:23:07:
5e:a5:82:44:be:ea:0a:2e:27:dc:df:1f:94:8c:ef:b0:8e:20:
2b:1b:f4:ca:30:48:e9:06:75:04:4a:e5:a3:03:6e:d8:c1:b7:
c6:79:ec:07:95:27:e5:f2:e4:45:e0:2e:fd:7a:d1:06:0a:c5:
44:64:30:c4:93:a9:8c:b9:c1:0f:c7:df:0f:a3:38:2e:79:fd:
3d:9f:86:65:aa:60:cc:fa:77:6b:4d:5a:16:cd:bf:05:7b:5d:
e7:6f:34:e1:32:89:6f:4b:cd:87:f6:74:5c:70:8f:4c:a2:2c:
f6:f8:cf:73:ae:97:16:51:07:4a:51:5e:6e:dd:05:5f:d6:3d:
03:b2:a8:a9:21:9d:20:cc:45:c3:da:12:85:67:18:87:47:30:
a2:d5:af:06:6d:20:8e:ea:25:d4:a0:2d:1c:92:c2:38:37:3d:
00:d1:50:ba:a6:20:ac:fc:61:bc:17:23:b5:0e:fe:30:42:cb:
c9:4e:08:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:49:36 2026 by rpki-client