Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
File: trJJosVixe29t1BY4mvXcBI-la4.mft (raw, json)
Hash identifier: cLQYpu7HOE26LAVj7WuM1DqrvuGPdz2BmR21FJT7bL8=
Subject key identifier: 26:D2:38:10:9D:4B:C2:0A:C5:5C:05:7F:D2:F8:E9:D5:9B:BA:EA:5F
Authority key identifier: B6:B2:49:A2:C5:62:C5:ED:BD:B7:50:58:E2:6B:D7:70:12:3E:95:AE
Certificate issuer: /CN=b6b249a2c562c5edbdb75058e26bd770123e95ae
Certificate serial: 019CAC104BA0D7DC7C3C889D86980AC6584C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
Manifest number: 14D9
Signing time: Mon 02 Mar 2026 01:01:14 +0000
Manifest this update: Mon 02 Mar 2026 01:01:14 +0000
Manifest next update: Tue 03 Mar 2026 01:01:14 +0000
Files and hashes: 1: 6RygQ5X9m4wR38_i9WAiO4if2HM.roa (hash: kUWQpysYJq9PoXLRmw04AY/W59nDN80L6l7bNKqqxYU=)
2: trJJosVixe29t1BY4mvXcBI-la4.crl (hash: hI78Qe+/x+k6bYxDr0OhRBq2M+6Kp2aEkZofWX7OPjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:4b:a0:d7:dc:7c:3c:88:9d:86:98:0a:c6:58:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6b249a2c562c5edbdb75058e26bd770123e95ae
Validity
Not Before: Mar 2 01:01:14 2026 GMT
Not After : Mar 3 01:01:14 2026 GMT
Subject: CN=26d238109d4bc20ac55c057fd2f8e9d59bbaea5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a8:e4:c0:5e:fb:f3:51:de:c9:0f:de:7f:8e:
45:bb:78:43:e1:36:b7:ad:cc:95:78:3c:0e:45:80:
d7:f8:ee:3f:87:ab:01:69:91:13:bc:85:3f:4a:e9:
fb:30:0b:2d:48:b9:0c:6f:93:ba:88:01:f3:24:ac:
8b:21:da:48:f2:09:19:eb:80:2e:d9:aa:ff:b3:2c:
05:d5:02:86:c3:8f:25:33:5b:f2:56:09:af:b9:46:
21:40:5b:f5:a4:16:f2:28:26:9f:17:46:80:db:21:
56:97:bc:a8:5e:39:5d:b4:84:9b:2f:8e:f5:9b:82:
e0:d0:c4:57:db:f5:4c:81:d9:49:17:e7:2f:ba:cf:
da:49:77:f9:07:dd:04:6f:db:f2:65:ff:0c:48:14:
df:dd:97:20:ef:ad:cd:2d:67:3c:db:a2:9a:2f:d7:
3f:eb:89:21:63:0a:14:6d:17:73:36:e2:55:05:4a:
8a:65:21:b8:5e:c3:46:4b:d9:5b:68:7b:f9:12:c4:
70:93:fa:fb:75:7b:64:94:4b:e8:b7:23:66:a0:ec:
96:73:86:77:63:f0:67:49:f2:af:85:61:1b:3f:6d:
20:4c:a9:5b:5a:6d:da:80:c5:df:42:48:80:1d:c0:
be:47:ba:a3:35:03:14:cc:6e:0b:e7:69:a1:7c:0e:
9d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D2:38:10:9D:4B:C2:0A:C5:5C:05:7F:D2:F8:E9:D5:9B:BA:EA:5F
X509v3 Authority Key Identifier:
keyid:B6:B2:49:A2:C5:62:C5:ED:BD:B7:50:58:E2:6B:D7:70:12:3E:95:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:fe:f0:de:0e:e4:c3:14:a1:87:8e:4e:92:ec:01:fc:9a:2d:
5a:6c:65:d1:1a:37:ea:cc:ab:34:5a:ac:b3:f3:2a:4b:d1:32:
79:e6:8f:9c:78:da:74:07:fb:4c:85:fc:81:c6:12:8e:30:f8:
50:6e:b2:b9:1a:a7:8a:71:9e:81:e7:63:ec:20:18:c5:62:1d:
b3:3f:62:f5:12:41:5c:e9:55:d4:0e:bf:ae:81:0a:35:b1:79:
f3:8a:fc:71:92:2a:47:da:88:b1:6b:21:ec:7d:00:d2:8b:06:
4e:56:8c:ce:14:eb:c7:9b:c2:da:87:8e:73:f1:fa:22:ec:8e:
01:63:42:c4:35:0e:80:f4:b0:d6:82:67:dd:ad:63:34:dc:de:
df:de:2b:cf:ce:02:60:02:f9:6e:d5:35:5e:62:91:c9:f1:45:
ce:30:4a:20:83:cc:60:d3:68:1d:e4:e1:5f:1c:c1:71:e3:37:
11:67:ab:cf:67:33:0b:74:a5:1d:eb:0b:13:2d:c3:76:b7:ff:
a6:2e:aa:44:43:34:1c:2f:2b:09:18:c6:24:40:32:94:df:10:
a5:44:8f:4d:24:ce:5e:06:c9:a3:3e:72:a3:b6:ac:20:49:36:
26:78:3c:b9:0d:ca:98:02:a6:6d:cf:4a:a6:27:2e:ba:15:9b:
3e:9f:74:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:02:18 2026 by rpki-client