Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.mft
File: tr3oeUsKDYj5KWf1CE5MOBmWE6A.mft (raw, json)
Hash identifier: d0ZnGTw80Iwlu1/1gV2No4jIe8M8ReKXnsJBVt9upUM=
Subject key identifier: 27:5C:57:28:0C:55:17:59:81:03:2D:5D:B1:8F:71:7D:D6:32:40:09
Authority key identifier: B6:BD:E8:79:4B:0A:0D:88:F9:29:67:F5:08:4E:4C:38:19:96:13:A0
Certificate issuer: /CN=b6bde8794b0a0d88f92967f5084e4c38199613a0
Certificate serial: 019D9D3F1FCCCEB42122E24908C2CCBAE60B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tr3oeUsKDYj5KWf1CE5MOBmWE6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.mft
Manifest number: 014C
Signing time: Fri 17 Apr 2026 21:00:52 +0000
Manifest this update: Fri 17 Apr 2026 21:00:52 +0000
Manifest next update: Sat 18 Apr 2026 21:00:52 +0000
Files and hashes: 1: tr3oeUsKDYj5KWf1CE5MOBmWE6A.crl (hash: xIneQGg7NpmelRTslwI0o7Cux2adoHlw670q/ITMkJU=)
2: ukIbrLUvPtIxZ5wtDHPd0BjbBfs.roa (hash: 4R245tMXj5hWTZh+CwuGNWMTCAhfqI5ky1f9sYscEcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tr3oeUsKDYj5KWf1CE5MOBmWE6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3f:1f:cc:ce:b4:21:22:e2:49:08:c2:cc:ba:e6:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6bde8794b0a0d88f92967f5084e4c38199613a0
Validity
Not Before: Apr 17 21:00:52 2026 GMT
Not After : Apr 18 21:00:52 2026 GMT
Subject: CN=275c57280c55175981032d5db18f717dd6324009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:03:29:2b:bf:1e:1d:aa:ee:ed:83:c0:3b:de:
ea:2f:c1:4b:d3:9b:0e:10:c2:29:50:76:97:fb:08:
3a:44:9d:2b:8a:1d:17:29:59:b7:5f:49:c3:ef:4d:
2e:5e:a2:3f:fd:1f:51:23:ba:d4:3d:ba:f6:0e:d3:
14:fa:be:3c:b2:46:71:b0:ce:3e:1b:d7:4e:14:3c:
a5:39:51:38:8a:cc:f7:e5:e0:5c:b1:41:a0:57:94:
06:c9:95:ad:da:c6:b1:7b:ff:3f:35:2d:c9:64:50:
8c:8f:94:f9:c1:72:18:b4:2b:55:e8:7f:af:4c:bc:
21:41:1b:5e:4c:84:a3:e3:b8:c9:64:71:2f:21:b9:
37:0e:08:21:42:92:cd:32:b9:f6:74:d7:51:03:9c:
5d:28:91:06:72:45:34:c0:fa:57:c6:95:fe:25:c8:
34:09:61:49:15:bb:49:00:74:b6:8d:9e:19:e5:4b:
2f:3f:79:dd:2f:a1:61:8d:ee:ad:70:df:f8:5c:bf:
52:a2:20:aa:26:17:3a:bc:61:1f:78:ac:b2:48:f1:
b0:87:64:e9:79:27:88:30:36:23:27:b8:5a:a6:fe:
d0:0d:a2:23:46:df:5c:5d:d4:19:3b:34:c9:49:0d:
60:90:78:ef:f3:73:60:75:5a:c0:1d:fb:2d:9d:fe:
39:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5C:57:28:0C:55:17:59:81:03:2D:5D:B1:8F:71:7D:D6:32:40:09
X509v3 Authority Key Identifier:
keyid:B6:BD:E8:79:4B:0A:0D:88:F9:29:67:F5:08:4E:4C:38:19:96:13:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tr3oeUsKDYj5KWf1CE5MOBmWE6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:48:56:99:3d:36:2b:a4:21:a0:c5:cd:ce:4b:0b:43:9b:48:
c5:a9:80:14:0e:77:83:ad:00:be:d4:39:7b:0c:55:6b:76:03:
5e:8b:99:a8:6f:1b:fa:7e:3c:17:d7:89:96:d7:22:d8:14:1f:
2c:c4:71:4d:d2:81:c6:22:4c:ac:4f:d7:53:91:8e:06:06:ac:
d3:9a:6e:04:b8:4b:bd:8c:35:32:04:87:e2:e9:3e:fd:11:0e:
8e:49:0f:2e:1e:41:ed:6d:c8:06:8c:12:2a:a0:d3:69:09:88:
9c:e1:82:b4:4a:65:37:52:de:44:ab:cd:78:eb:36:54:42:d4:
f0:ca:a6:d8:8f:c4:bc:ea:7f:64:8f:c3:23:09:6f:0e:4d:78:
fe:6e:6e:a0:99:9b:ae:cc:8b:b2:56:96:96:7f:32:4c:18:73:
a0:f7:91:37:8d:01:2b:25:fb:41:9c:d6:ea:82:d8:7b:69:07:
5a:91:58:bf:e7:bf:21:9a:fa:e9:d0:bd:0a:36:96:14:18:f5:
ee:94:ae:d1:f6:b8:c2:cf:26:28:36:b4:a1:52:73:58:69:b4:
13:06:9f:03:89:0c:24:49:d5:59:34:f2:45:60:3e:ba:f9:05:
38:7b:68:18:bb:a2:cb:68:d1:28:fe:d8:2d:86:b7:a1:45:71:
11:6b:43:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:36:09 2026 by rpki-client