Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.mft
File: tr3oeUsKDYj5KWf1CE5MOBmWE6A.mft (raw, json)
Hash identifier: a9mxANDdaSecZuiIPQUJm4IWVuof/fRJsEoba5Cq4/E=
Subject key identifier: 8E:5E:0B:28:26:F9:8D:ED:A3:55:B5:7C:DC:E0:24:6F:D0:58:CC:5E
Authority key identifier: B6:BD:E8:79:4B:0A:0D:88:F9:29:67:F5:08:4E:4C:38:19:96:13:A0
Certificate issuer: /CN=b6bde8794b0a0d88f92967f5084e4c38199613a0
Certificate serial: 019CADC7DC0EA0BC4E34E91DC4616E496A7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tr3oeUsKDYj5KWf1CE5MOBmWE6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.mft
Manifest number: D0
Signing time: Mon 02 Mar 2026 09:01:22 +0000
Manifest this update: Mon 02 Mar 2026 09:01:22 +0000
Manifest next update: Tue 03 Mar 2026 09:01:22 +0000
Files and hashes: 1: tr3oeUsKDYj5KWf1CE5MOBmWE6A.crl (hash: zf5G0Oi8VBZCCOI7nY5hMlEGzE/62Rz8EgH77OowdvE=)
2: ukIbrLUvPtIxZ5wtDHPd0BjbBfs.roa (hash: 4R245tMXj5hWTZh+CwuGNWMTCAhfqI5ky1f9sYscEcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tr3oeUsKDYj5KWf1CE5MOBmWE6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:dc:0e:a0:bc:4e:34:e9:1d:c4:61:6e:49:6a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6bde8794b0a0d88f92967f5084e4c38199613a0
Validity
Not Before: Mar 2 09:01:22 2026 GMT
Not After : Mar 3 09:01:22 2026 GMT
Subject: CN=8e5e0b2826f98deda355b57cdce0246fd058cc5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:a5:c3:98:bc:a1:71:58:d9:ed:68:87:49:e9:
19:3a:85:a3:fc:4c:46:af:1d:f8:09:ee:f4:f0:c2:
08:43:64:b3:ab:ed:f9:0b:71:bf:34:d8:8f:53:fe:
28:2b:e2:1e:00:5d:99:96:05:a7:0e:b7:1d:57:27:
de:09:72:11:2a:7d:d6:3d:71:60:1b:a6:4f:69:15:
d5:3c:32:42:e7:9c:bb:7b:e3:40:b2:57:62:27:40:
17:bc:48:3d:18:1d:12:d1:af:f8:d9:5a:6b:c8:9c:
bc:2b:a1:f8:4f:b4:76:68:9d:78:f0:0a:c8:3b:f0:
eb:d4:8e:18:c2:c1:21:0a:47:02:19:60:51:1d:6f:
c5:85:39:20:41:4b:b9:34:1c:94:69:7e:1d:a2:8e:
25:8b:87:13:8f:fd:de:76:51:54:90:f0:5b:79:be:
06:49:3e:aa:a7:0d:5a:84:bc:1c:a6:3a:63:cf:c2:
3d:24:c8:76:05:3a:36:d3:05:23:25:e3:94:ed:d5:
d6:d1:51:36:b2:3a:c5:67:18:49:c4:68:7f:b9:7e:
cb:be:e6:f6:70:ef:0a:50:d5:18:6e:d9:91:9f:3d:
6d:57:89:0e:f0:2e:b2:11:c8:84:90:68:58:db:4d:
c9:e6:fa:cd:f5:d5:5b:09:0c:b4:08:d8:a8:fc:0f:
ae:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5E:0B:28:26:F9:8D:ED:A3:55:B5:7C:DC:E0:24:6F:D0:58:CC:5E
X509v3 Authority Key Identifier:
keyid:B6:BD:E8:79:4B:0A:0D:88:F9:29:67:F5:08:4E:4C:38:19:96:13:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tr3oeUsKDYj5KWf1CE5MOBmWE6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:0f:03:e1:f0:76:33:6a:6b:31:c4:50:26:2f:38:b4:4e:9a:
a6:ec:63:22:b0:01:fa:0c:a6:6c:84:6b:d9:3e:0b:47:2f:3f:
a4:4d:e4:be:7d:35:ff:cf:56:32:02:25:e9:bc:88:14:5e:67:
2e:38:7c:db:87:8f:6d:02:a2:bf:9b:43:dd:01:de:b5:16:96:
4f:2d:1a:2f:50:77:13:59:54:7d:6b:9d:a1:77:af:7a:bf:70:
3e:67:37:88:42:e2:d6:f8:f3:f9:84:82:b3:42:98:6f:9b:75:
00:ea:17:a7:07:6e:2d:41:08:24:34:9c:60:87:a4:30:a5:e5:
24:4e:5f:d8:b9:f1:34:63:a2:96:49:4b:d2:69:e4:e9:47:39:
22:1d:49:9d:9e:75:19:a7:8d:e8:92:5d:e8:a9:36:0a:be:a3:
fa:a0:24:8a:c1:51:29:87:c9:97:3e:92:0d:98:68:1f:c6:88:
8d:da:be:2d:75:87:c9:3b:69:d1:3e:3b:d6:41:3b:9f:49:ea:
dd:ed:7f:9f:7c:41:af:d3:3f:63:18:02:10:7f:5e:23:14:f4:
22:18:60:ac:1d:45:21:51:a0:cc:d8:85:51:5f:8e:50:38:6c:
df:6c:89:85:80:bf:44:5c:87:6e:9b:92:ed:83:cd:da:03:de:
d0:0b:0c:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytx9wOoLxONOkdxGFuSWp/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2YmRlODc5NGIwYTBkODhmOTI5NjdmNTA4NGU0YzM4MTk5
NjEzYTAwHhcNMjYwMzAyMDkwMTIyWhcNMjYwMzAzMDkwMTIyWjAzMTEwLwYDVQQD
Eyg4ZTVlMGIyODI2Zjk4ZGVkYTM1NWI1N2NkY2UwMjQ2ZmQwNThjYzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+aXDmLyhcVjZ7WiHSekZOoWj/ExG
rx34Ce708MIIQ2Szq+35C3G/NNiPU/4oK+IeAF2ZlgWnDrcdVyfeCXIRKn3WPXFg
G6ZPaRXVPDJC55y7e+NAsldiJ0AXvEg9GB0S0a/42VpryJy8K6H4T7R2aJ148ArI
O/Dr1I4YwsEhCkcCGWBRHW/FhTkgQUu5NByUaX4doo4li4cTj/3edlFUkPBbeb4G
ST6qpw1ahLwcpjpjz8I9JMh2BTo20wUjJeOU7dXW0VE2sjrFZxhJxGh/uX7Lvub2
cO8KUNUYbtmRnz1tV4kO8C6yEciEkGhY203J5vrN9dVbCQy0CNio/A+uhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5eCygm+Y3to1W1fNzgJG/QWMxeMB8GA1UdIwQY
MBaAFLa96HlLCg2I+Sln9QhOTDgZlhOgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHIzb2VVc0tEWWo1S1dmMUNFNU1PQm1XRTZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85OGFhMGItZDhiMy00MTA5LThmOGIt
MjBlNTljZjkyNjg2LzEvdHIzb2VVc0tEWWo1S1dmMUNFNU1PQm1XRTZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS85OGFhMGItZDhiMy00MTA5LThmOGItMjBlNTljZjkyNjg2
LzEvdHIzb2VVc0tEWWo1S1dmMUNFNU1PQm1XRTZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGg8D4fB2
M2prMcRQJi84tE6apuxjIrAB+gymbIRr2T4LRy8/pE3kvn01/89WMgIl6byIFF5n
Ljh824ePbQKiv5tD3QHetRaWTy0aL1B3E1lUfWudoXever9wPmc3iELi1vjz+YSC
s0KYb5t1AOoXpwduLUEIJDScYIekMKXlJE5f2LnxNGOilklL0mnk6Uc5Ih1JnZ51
GaeN6JJd6Kk2Cr6j+qAkisFRKYfJlz6SDZhoH8aIjdq+LXWHyTtp0T471kE7n0nq
3e1/n3xBr9M/YxgCEH9eIxT0IhhgrB1FIVGgzNiFUV+OUDhs32yJhYC/RFyHbpuS
7YPN2gPe0AsMMA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:42:02 2026 by rpki-client