Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
File: trJJosVixe29t1BY4mvXcBI-la4.mft (raw, json)
Hash identifier: 4CU9blqaXulA34ptMarp35bOJWolpsnn25cVtrEhm7o=
Subject key identifier: EA:1B:6D:EF:DE:40:6D:57:9C:30:38:4E:C0:3A:5E:68:29:20:46:26
Authority key identifier: B6:B2:49:A2:C5:62:C5:ED:BD:B7:50:58:E2:6B:D7:70:12:3E:95:AE
Certificate issuer: /CN=b6b249a2c562c5edbdb75058e26bd770123e95ae
Certificate serial: 019FAABE5B9FDC7616CBC460051E6D0FA9C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
Manifest number: 1666
Signing time: Tue 28 Jul 2026 22:00:29 +0000
Manifest this update: Tue 28 Jul 2026 22:00:29 +0000
Manifest next update: Wed 29 Jul 2026 22:00:29 +0000
Files and hashes: 1: 6RygQ5X9m4wR38_i9WAiO4if2HM.roa (hash: kUWQpysYJq9PoXLRmw04AY/W59nDN80L6l7bNKqqxYU=)
2: trJJosVixe29t1BY4mvXcBI-la4.crl (hash: cSgTyO0EFSLVRF0ytAwHocWzUEfpHxU0oiv8zW/reDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:5b:9f:dc:76:16:cb:c4:60:05:1e:6d:0f:a9:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6b249a2c562c5edbdb75058e26bd770123e95ae
Validity
Not Before: Jul 28 22:00:29 2026 GMT
Not After : Jul 29 22:00:29 2026 GMT
Subject: CN=ea1b6defde406d579c30384ec03a5e6829204626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2e:22:c9:9e:ac:e4:88:ec:5f:a0:c4:e1:1f:
41:d0:55:f0:85:e7:24:66:e9:79:00:63:3c:8f:f7:
00:f0:85:69:ca:7f:b8:b7:47:55:b2:44:fd:96:be:
ab:4f:cd:2a:b4:73:8c:2c:4d:ce:b3:0d:05:c5:05:
b8:95:3b:01:7f:a3:2c:aa:d1:11:4d:1f:b3:0d:72:
05:a9:59:3e:00:9d:58:54:47:77:4e:ff:20:57:52:
86:d7:97:74:2e:6c:f8:da:15:9b:15:c9:45:05:ec:
4d:97:9e:41:dd:3b:7f:f3:e0:d9:17:a1:90:8c:5b:
33:c8:f6:c1:44:6e:31:82:f4:dc:43:1c:7d:97:b3:
64:cf:3a:5c:7d:5e:1a:7b:2e:d9:75:dc:a5:7b:21:
59:99:0c:a0:d6:dc:61:57:36:44:0b:23:96:6f:74:
3d:f2:fb:a4:25:93:f4:15:7c:5f:63:2d:0d:01:20:
59:59:95:ee:c2:e9:a5:4e:86:bd:24:5f:9d:6e:00:
d1:05:fb:9a:c9:bb:87:82:c3:06:29:c3:59:b9:d5:
17:a6:5e:94:ec:f6:d6:3c:4a:b8:85:80:6b:2d:dc:
69:67:a8:73:e1:28:ac:e7:ca:f8:7c:68:3b:60:0e:
8e:55:ab:dd:34:cc:2e:d0:67:c1:1b:b2:56:05:77:
34:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1B:6D:EF:DE:40:6D:57:9C:30:38:4E:C0:3A:5E:68:29:20:46:26
X509v3 Authority Key Identifier:
keyid:B6:B2:49:A2:C5:62:C5:ED:BD:B7:50:58:E2:6B:D7:70:12:3E:95:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:7b:e1:5b:83:e8:71:1d:ce:52:70:f9:96:b7:98:ad:31:09:
80:cb:ad:13:fa:18:ae:fd:56:9d:9f:f7:87:47:af:c7:30:4f:
ad:ff:d4:18:c8:25:6b:1b:ae:de:12:58:cb:44:a8:27:3b:74:
73:a4:18:0a:81:2a:a7:45:c7:2d:00:14:0f:00:8b:6c:5f:c5:
85:1c:56:70:cf:31:20:2f:96:c9:14:aa:18:13:e0:a9:e7:18:
5a:63:80:ac:20:f7:9d:36:0b:42:9c:3d:b1:fb:06:11:93:01:
24:c9:4a:30:46:74:79:3a:b7:a0:9a:65:47:68:1b:61:16:bb:
47:d0:e9:5b:cf:1f:34:31:25:d7:cf:2d:34:02:46:54:21:a6:
41:e3:93:97:be:c3:91:4d:69:74:f6:0b:e8:90:fa:b2:89:8e:
07:51:6e:8c:18:2b:18:f4:39:44:73:04:17:8d:f5:e3:36:b4:
d7:41:95:b6:6f:ee:db:ac:98:fe:74:d9:20:a4:77:e1:f5:0b:
86:41:23:fb:88:30:07:6b:f8:2d:2e:c7:26:2e:5b:1a:64:94:
30:e0:5b:36:f3:c8:7e:f3:62:bb:25:a0:47:17:c8:35:78:f5:
3b:22:5c:28:b2:54:c2:c1:2f:d3:6b:9c:d8:48:36:c7:a8:35:
d5:61:e8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:36:38 2026 by rpki-client