Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
File: TRMSiBUQNXRBfKenBBLaOrO4RRE.mft (raw, json)
Hash identifier: DT1IP81/wzCrQ8f879mGjIU3tl/KaO9U01fyy+N4lcU=
Subject key identifier: 18:1C:D3:47:8E:19:C7:53:BF:97:9B:D0:15:5A:BC:A2:FB:EF:6C:16
Authority key identifier: 4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11
Certificate issuer: /CN=4d13128815103574417ca7a70412da3ab3b84511
Certificate serial: 01A0CA0FE179D02F7F21FF9244DF97323C4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
Manifest number: 1A6F
Signing time: Tue 22 Sep 2026 17:00:33 +0000
Manifest this update: Tue 22 Sep 2026 17:00:33 +0000
Manifest next update: Wed 23 Sep 2026 17:00:33 +0000
Files and hashes: 1: 6eIRyeCu3DuhOHztVXWukRMlVQA.roa (hash: DP3c7R08RGBcAiJwXHjmhLQIdE9Va1ZG6ASQ9GdKigk=)
2: TRMSiBUQNXRBfKenBBLaOrO4RRE.crl (hash: XZZ25SXJr+TnkKVvb3IhNKt8nOD46yQZTaeD66yvy0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 17:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:0f:e1:79:d0:2f:7f:21:ff:92:44:df:97:32:3c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d13128815103574417ca7a70412da3ab3b84511
Validity
Not Before: Sep 22 17:00:33 2026 GMT
Not After : Sep 23 17:00:33 2026 GMT
Subject: CN=181cd3478e19c753bf979bd0155abca2fbef6c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0d:86:6d:a9:38:30:d9:68:c6:2c:97:bf:08:
3e:1b:5e:7b:5d:3e:39:df:a4:e7:57:6d:01:f0:00:
0b:3a:8a:19:68:23:c9:d0:f9:41:14:d4:bd:3e:38:
2d:e5:22:df:44:ac:7e:f7:f4:c3:09:45:7e:5d:46:
ef:d0:ea:2a:de:38:1c:2a:5c:58:4d:63:48:b2:57:
d7:b1:44:99:fb:0c:4e:22:2a:6f:6f:aa:eb:61:14:
90:58:69:9b:ff:a1:90:2a:d9:72:3f:80:e9:01:ae:
66:45:c3:0c:ee:d5:d1:55:cf:6d:c2:ca:de:6a:3a:
6d:b4:a8:58:96:e5:63:cf:ac:52:45:61:53:e1:5f:
36:71:fd:17:15:90:e2:08:2c:c1:97:bd:05:f8:65:
6c:ae:83:4b:1b:e6:bf:4d:fa:b9:9c:a2:d7:03:26:
3d:da:32:4c:ed:6b:eb:28:fb:da:96:4d:17:c5:d6:
2f:ff:50:d8:09:85:51:ec:d2:ce:95:93:ee:1f:b6:
78:e4:fe:7c:ea:60:33:67:bc:c8:3a:1d:16:e2:5b:
5b:ac:17:63:82:a1:b9:25:e5:c1:59:e5:64:67:4a:
db:7c:4f:1c:9f:8c:e7:76:30:18:58:17:a7:52:71:
01:b3:a8:06:eb:20:84:aa:db:1b:4e:c9:35:b8:5c:
28:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1C:D3:47:8E:19:C7:53:BF:97:9B:D0:15:5A:BC:A2:FB:EF:6C:16
X509v3 Authority Key Identifier:
keyid:4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:50:f0:27:c8:f5:0c:23:fd:d6:d1:6a:0f:2b:e8:77:0d:43:
64:2a:c1:f1:e6:b1:97:5f:2c:42:41:ef:6d:43:bc:f8:eb:cd:
34:12:0d:9b:5d:87:50:cc:9e:91:bd:ba:6b:d6:ff:a0:53:d2:
28:da:fc:62:bb:0b:4d:09:81:71:8f:93:11:3c:9a:ac:ef:56:
80:a3:94:25:75:82:e4:07:2c:49:67:20:99:6e:66:bc:92:84:
47:f0:44:d9:79:98:7f:25:65:54:40:52:3f:7f:84:ac:64:49:
7d:95:2b:f0:8f:44:01:41:bc:01:37:44:79:f1:37:c0:4b:01:
41:a3:c4:84:02:ee:5a:3b:c6:ab:c1:82:66:27:12:26:26:7c:
18:49:72:09:02:92:85:82:96:6a:38:08:e4:a4:a6:bd:46:10:
a1:61:c3:aa:79:65:a7:16:35:65:40:68:a2:bd:55:09:a0:c1:
91:ae:36:8f:e2:99:87:b3:50:79:46:1e:f8:e0:3b:bc:63:9d:
df:68:88:ce:ad:9b:06:8c:d2:c6:90:6b:58:21:1f:9d:08:ff:
44:1f:0f:0a:fc:5d:30:fd:61:48:01:7a:1e:78:b6:4e:11:ad:
2d:96:f0:f3:9d:bb:de:c8:4b:90:da:7f:6f:54:bc:7b:27:1e:
23:2b:01:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKD+F50C9/If+SRN+XMjxMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMTMxMjg4MTUxMDM1NzQ0MTdjYTdhNzA0MTJkYTNhYjNi
ODQ1MTEwHhcNMjYwOTIyMTcwMDMzWhcNMjYwOTIzMTcwMDMzWjAzMTEwLwYDVQQD
EygxODFjZDM0NzhlMTljNzUzYmY5NzliZDAxNTVhYmNhMmZiZWY2YzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAog2Gbak4MNloxiyXvwg+G157XT45
36TnV20B8AALOooZaCPJ0PlBFNS9Pjgt5SLfRKx+9/TDCUV+XUbv0Ooq3jgcKlxY
TWNIslfXsUSZ+wxOIipvb6rrYRSQWGmb/6GQKtlyP4DpAa5mRcMM7tXRVc9twsre
ajpttKhYluVjz6xSRWFT4V82cf0XFZDiCCzBl70F+GVsroNLG+a/Tfq5nKLXAyY9
2jJM7WvrKPvalk0XxdYv/1DYCYVR7NLOlZPuH7Z45P586mAzZ7zIOh0W4ltbrBdj
gqG5JeXBWeVkZ0rbfE8cn4zndjAYWBenUnEBs6gG6yCEqtsbTsk1uFwoAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgc00eOGcdTv5eb0BVavKL772wWMB8GA1UdIwQY
MBaAFE0TEogVEDV0QXynpwQS2jqzuEURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFJNU2lCVVFOWFJCZktlbkJCTGFPck80UlJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9mYWZmYzItOTUxNy00ZDE4LTg5OTMt
ZjU1ZWE0OGNlNzVhLzEvVFJNU2lCVVFOWFJCZktlbkJCTGFPck80UlJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9mYWZmYzItOTUxNy00ZDE4LTg5OTMtZjU1ZWE0OGNlNzVh
LzEvVFJNU2lCVVFOWFJCZktlbkJCTGFPck80UlJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI1DwJ8j1
DCP91tFqDyvodw1DZCrB8eaxl18sQkHvbUO8+OvNNBINm12HUMyekb26a9b/oFPS
KNr8YrsLTQmBcY+TETyarO9WgKOUJXWC5AcsSWcgmW5mvJKER/BE2XmYfyVlVEBS
P3+ErGRJfZUr8I9EAUG8ATdEefE3wEsBQaPEhALuWjvGq8GCZicSJiZ8GElyCQKS
hYKWajgI5KSmvUYQoWHDqnllpxY1ZUBoor1VCaDBka42j+KZh7NQeUYe+OA7vGOd
32iIzq2bBozSxpBrWCEfnQj/RB8PCvxdMP1hSAF6Hni2ThGtLZbw85273shLkNp/
b1S8eyceIysBUg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 02:49:46 2026 by rpki-client