Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
File: TRMSiBUQNXRBfKenBBLaOrO4RRE.mft (raw, json)
Hash identifier: gRjDLt74fzxDba0n/eRmzoJbWnXqp3E7vrBfCroa6h4=
Subject key identifier: F4:8E:B5:42:08:3B:56:7D:60:91:FE:03:1D:83:4B:B9:96:11:7B:F3
Authority key identifier: 4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11
Certificate issuer: /CN=4d13128815103574417ca7a70412da3ab3b84511
Certificate serial: 01A0C6336D8901A761DDE79F58CB59AFAD30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
Manifest number: 1A6D
Signing time: Mon 21 Sep 2026 23:00:53 +0000
Manifest this update: Mon 21 Sep 2026 23:00:53 +0000
Manifest next update: Tue 22 Sep 2026 23:00:53 +0000
Files and hashes: 1: 6eIRyeCu3DuhOHztVXWukRMlVQA.roa (hash: DP3c7R08RGBcAiJwXHjmhLQIdE9Va1ZG6ASQ9GdKigk=)
2: TRMSiBUQNXRBfKenBBLaOrO4RRE.crl (hash: 8MzqZ1BeH9aMG2CeRsF5JissxRkEYxdoY1W24pMk1PM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:33:6d:89:01:a7:61:dd:e7:9f:58:cb:59:af:ad:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d13128815103574417ca7a70412da3ab3b84511
Validity
Not Before: Sep 21 23:00:53 2026 GMT
Not After : Sep 22 23:00:53 2026 GMT
Subject: CN=f48eb542083b567d6091fe031d834bb996117bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2b:2d:67:4b:69:ea:c1:5b:16:9a:40:f6:2a:
cf:36:15:56:84:c5:b8:0e:c2:e8:60:b4:ab:30:0d:
a8:7c:21:77:2e:46:0a:7e:94:50:50:b8:8c:c1:74:
c3:51:3b:26:5a:8d:3a:37:d9:5a:a1:c9:e9:f8:bd:
79:07:39:d7:1a:9f:b8:87:d0:39:71:5f:99:57:5d:
33:63:cd:1d:45:ca:eb:0f:7e:8a:98:b5:22:f8:3f:
78:14:61:42:2a:ac:05:52:ae:af:cd:f6:2a:c8:0a:
43:2d:c9:90:66:c6:46:89:9c:ea:5d:b4:87:19:25:
bb:aa:93:01:16:0e:7b:1d:e1:60:67:c4:88:f5:2b:
88:a4:8c:57:f7:09:39:d5:3f:b5:e2:eb:5d:09:c4:
6f:78:1a:f0:21:d8:3f:4f:62:6b:15:fd:9f:d5:b5:
d1:e5:ff:ae:d2:08:d7:3a:e4:60:b6:d1:54:3f:cf:
21:eb:9c:f3:c2:83:2a:67:c3:b4:c5:1c:35:ea:81:
7a:c8:a0:83:35:ec:4f:ce:02:e7:8d:7d:88:94:f3:
fe:57:d3:b8:6c:c2:d6:9d:5b:e7:08:3e:03:8a:56:
e6:b6:99:5b:68:7f:f9:91:08:95:4f:2d:70:e7:a5:
cf:a8:57:cd:c4:13:1d:78:8c:d9:e2:7b:32:79:56:
b5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8E:B5:42:08:3B:56:7D:60:91:FE:03:1D:83:4B:B9:96:11:7B:F3
X509v3 Authority Key Identifier:
keyid:4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:cb:c8:99:45:e8:e8:ea:b0:eb:35:34:a2:51:74:da:0c:18:
52:b8:55:f9:a4:7e:4e:e2:a2:79:b7:d2:d7:e5:ee:74:23:fa:
ce:cb:ae:22:35:f3:5f:86:36:71:6d:c2:39:c7:ca:78:82:98:
0b:fd:38:0a:85:6b:01:06:9f:18:9e:ec:30:0a:67:5f:1f:e6:
77:ef:3b:58:23:c8:56:07:37:d5:ba:5d:e3:02:7d:45:98:67:
66:3d:4b:e0:6c:f8:27:e3:b3:74:0a:f0:9f:6c:79:e3:19:9d:
cb:cc:cd:21:c6:a5:26:77:b8:eb:9d:61:3b:68:33:c5:80:16:
ba:db:4a:6c:a6:2c:c2:f3:c0:9c:8e:60:90:e6:23:4a:c1:0a:
0f:ff:6d:f8:7d:19:43:bb:67:12:9e:66:d2:06:83:db:ab:e2:
5e:7d:38:e3:95:de:39:57:64:f7:06:a1:62:e1:57:77:c5:51:
b4:37:18:c3:6a:07:a8:be:89:58:56:33:53:ae:6c:f1:cd:47:
c4:94:dd:b4:23:61:d3:81:43:13:27:4d:b0:81:f4:1a:b5:f8:
33:56:b4:e5:96:b8:74:36:c9:92:ae:bb:f7:a9:a6:90:e0:e0:
23:d0:89:78:06:ac:7b:43:75:c1:3e:e4:21:4a:7d:38:f5:a6:
42:88:52:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:24:56 2026 by rpki-client