Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
File: _trmiRA5jJ2O51bhaCAd2eiYm1I.mft (raw, json)
Hash identifier: CeEfuDBiXrTJcUkmmyLscTMFU94G+1ra6q6rml4DrX4=
Subject key identifier: 5A:89:AF:C3:24:3D:C0:65:FE:8A:0D:A9:D5:45:69:41:0B:FC:AB:6A
Authority key identifier: FE:DA:E6:89:10:39:8C:9D:8E:E7:56:E1:68:20:1D:D9:E8:98:9B:52
Certificate issuer: /CN=fedae68910398c9d8ee756e168201dd9e8989b52
Certificate serial: 019CAA8F5ACC65FEC361A9ED92512BAA849D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
Manifest number: 04BC
Signing time: Sun 01 Mar 2026 18:00:47 +0000
Manifest this update: Sun 01 Mar 2026 18:00:47 +0000
Manifest next update: Mon 02 Mar 2026 18:00:47 +0000
Files and hashes: 1: 5sXzjnKS3JRs5_PkjVDa27eoC-M.roa (hash: 2V+6XQqLf/lpOVZXMep8bSqQydoN+IRrPy2YYET6j4Q=)
2: _trmiRA5jJ2O51bhaCAd2eiYm1I.crl (hash: cR+1lROuolzke3GXtTgMweHEzTVVocF3nicrj8v2mA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:5a:cc:65:fe:c3:61:a9:ed:92:51:2b:aa:84:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fedae68910398c9d8ee756e168201dd9e8989b52
Validity
Not Before: Mar 1 18:00:47 2026 GMT
Not After : Mar 2 18:00:47 2026 GMT
Subject: CN=5a89afc3243dc065fe8a0da9d54569410bfcab6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:aa:76:cf:f7:e0:71:bd:06:8c:9a:4a:4e:c0:
3d:ed:0d:9a:19:5f:11:b2:01:0a:83:b3:be:ed:c9:
77:f3:b5:4e:6c:ca:dd:33:a1:04:55:19:2a:92:42:
63:11:18:d1:10:e2:a8:21:09:d4:28:dd:32:69:68:
4d:82:98:68:f1:50:6f:ef:69:e8:60:f6:27:68:9d:
55:d4:b5:d7:99:d4:f1:f5:ab:5b:80:74:14:39:01:
6c:3e:50:d3:00:81:d9:94:6a:27:18:9f:cf:c1:de:
19:84:ee:08:18:4a:0b:1b:5b:aa:62:11:ba:3f:d4:
1d:e4:9e:e5:50:b7:ba:71:0d:cb:18:e0:25:ce:4b:
48:e9:36:89:83:1f:b4:a9:3e:75:52:37:61:e0:69:
03:09:5a:04:bd:ab:45:b6:6c:08:af:85:31:85:a3:
f8:b2:36:aa:a0:ab:3d:30:c1:5c:5b:4a:5c:eb:5e:
34:51:38:25:62:49:38:c4:f3:54:1d:69:6b:53:82:
9a:43:40:87:7e:56:62:21:d7:ea:85:b4:3b:f7:57:
2b:a4:87:a2:be:76:65:94:22:28:6b:d3:68:97:3a:
0c:37:79:2c:7c:22:24:42:5a:c6:58:42:fe:eb:d9:
99:e5:f1:a1:8f:c7:9d:53:be:fd:94:ab:a9:64:7c:
2e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:89:AF:C3:24:3D:C0:65:FE:8A:0D:A9:D5:45:69:41:0B:FC:AB:6A
X509v3 Authority Key Identifier:
keyid:FE:DA:E6:89:10:39:8C:9D:8E:E7:56:E1:68:20:1D:D9:E8:98:9B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:4f:5e:cc:bc:c9:63:da:ea:c3:cb:4f:de:8d:1b:bf:78:19:
82:a1:9b:88:7e:e8:c7:86:8d:25:0c:c2:aa:fd:17:9b:4b:64:
88:0e:8a:1a:ff:7d:23:14:f7:17:ee:f6:fb:f8:2b:1f:e3:21:
68:53:f1:b2:b5:d5:e2:d1:83:1f:e8:68:ec:fa:27:3e:e5:f6:
18:b8:4b:f7:55:12:27:5f:4c:93:cb:e6:38:fc:c9:8d:fb:00:
3b:25:5d:ac:c8:dd:c1:04:0d:3b:c3:c3:f5:74:12:d1:0e:b8:
48:d1:22:33:8d:cc:a5:ce:a9:35:9f:a4:06:dd:5e:f8:dd:ed:
91:d4:b8:07:41:c2:e0:9f:2a:09:9c:b6:c3:cf:b8:16:ab:15:
de:4e:15:74:6b:df:5d:60:6d:2d:c5:7f:33:0b:fa:d0:c8:a5:
1b:4f:37:e9:c5:39:16:2a:f7:9a:1b:f0:f0:7a:fc:60:be:c1:
c5:e3:e2:e5:0f:70:e2:61:b5:25:82:70:ab:2b:21:87:b8:d0:
91:be:32:8f:cd:af:f9:37:ac:a6:c6:0a:36:f4:2e:71:6e:8b:
9c:a1:9b:cb:ba:1d:2c:a4:b4:1d:54:7f:83:ae:7b:7c:11:43:
bf:4d:c1:46:4d:5c:39:60:89:82:4c:89:37:d3:f0:ac:a3:90:
eb:dd:30:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:03:35 2026 by rpki-client