Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.mft
File: tRYDJr5-XNw1tcA2RBFjzSWkl00.mft (raw, json)
Hash identifier: ZWcs4gSh9KphgJdKI5Q2pEDiEasqlO/optpTAc45KG0=
Subject key identifier: 48:8D:9F:60:F7:F3:B4:D3:0D:EC:E9:BD:7B:41:65:81:CF:0E:C4:2E
Authority key identifier: B5:16:03:26:BE:7E:5C:DC:35:B5:C0:36:44:11:63:CD:25:A4:97:4D
Certificate issuer: /CN=b5160326be7e5cdc35b5c036441163cd25a4974d
Certificate serial: 019D38D3014E548ADA411819773E109EC6D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRYDJr5-XNw1tcA2RBFjzSWkl00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 09:00:45 +0000
Manifest this update: Sun 29 Mar 2026 09:00:45 +0000
Manifest next update: Mon 30 Mar 2026 09:00:45 +0000
Files and hashes: 1: 5f-UuDoTp5gYMURYo2jt2lK0wo0.roa (hash: Xs27w1pjtbaPiwS7XxbIK5JOznQzGRl8strYBgv7AYc=)
2: tRYDJr5-XNw1tcA2RBFjzSWkl00.crl (hash: 4TU2VfEeu3II8bBTXvpq9+vo/xeuruM00KvnAU871yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRYDJr5-XNw1tcA2RBFjzSWkl00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:01:4e:54:8a:da:41:18:19:77:3e:10:9e:c6:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5160326be7e5cdc35b5c036441163cd25a4974d
Validity
Not Before: Mar 29 09:00:45 2026 GMT
Not After : Mar 30 09:00:45 2026 GMT
Subject: CN=488d9f60f7f3b4d30dece9bd7b416581cf0ec42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d5:4d:13:ea:52:7e:27:a2:15:a6:da:fd:24:
30:c8:56:7a:80:cb:fc:7c:c0:77:47:a1:7f:f5:08:
99:ea:82:ae:a9:a1:4e:67:db:01:8b:3c:35:e0:7c:
e6:6c:91:a6:97:ad:ff:d1:de:81:5b:cd:34:bd:00:
26:21:3f:12:05:4c:31:c8:0f:3b:e6:55:1e:41:11:
d0:a5:91:19:50:35:fc:5e:a5:c5:99:ee:37:c6:0e:
a0:b0:d6:63:73:c6:27:c2:4b:15:c8:4b:9f:e0:14:
35:ed:a2:da:2a:5a:9d:fa:c8:29:e3:f8:a9:b1:16:
7b:25:52:c7:91:18:be:1a:08:2b:30:e2:89:35:09:
50:92:35:9e:f8:cf:04:3f:a7:89:55:a7:32:cc:e6:
47:95:8e:52:80:60:f4:8a:84:70:be:06:51:29:2f:
44:6c:31:4d:02:db:e0:5a:44:38:1e:0d:87:73:d8:
a9:62:f4:c4:e5:87:b9:fb:46:a5:3d:9b:68:8d:f0:
e9:6f:89:cb:77:c6:80:39:fb:aa:9f:ba:73:df:10:
1a:96:d9:49:f3:4e:84:4b:4b:cd:bb:6d:aa:ab:b9:
38:34:c2:33:e1:1f:a5:2a:1f:cc:1d:81:3c:3d:62:
34:5e:f2:a3:fc:46:fb:8f:cb:61:44:ff:44:2e:91:
21:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8D:9F:60:F7:F3:B4:D3:0D:EC:E9:BD:7B:41:65:81:CF:0E:C4:2E
X509v3 Authority Key Identifier:
keyid:B5:16:03:26:BE:7E:5C:DC:35:B5:C0:36:44:11:63:CD:25:A4:97:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRYDJr5-XNw1tcA2RBFjzSWkl00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:09:08:e1:ad:4c:f8:72:67:4d:3e:63:eb:75:80:45:3a:d3:
dd:39:cf:ca:01:23:b6:ee:0f:6f:49:34:74:89:16:41:30:a3:
d0:cd:15:03:8c:2b:1e:75:46:27:ca:7f:45:3c:33:07:37:1a:
c9:55:fc:fa:01:7d:fa:a1:98:44:51:f2:82:84:2b:bc:1f:20:
c0:20:c8:ff:29:ff:93:ce:0f:01:59:42:30:05:b7:69:85:d0:
1a:94:9d:b0:8a:67:5a:da:50:83:6c:5c:78:8e:d6:bb:35:37:
f9:a5:f9:85:5e:9b:67:0c:10:a5:cc:b7:95:43:c8:8a:2d:bc:
cd:24:ad:0c:7a:9a:11:ff:54:b6:76:31:d1:e2:64:b2:e8:9f:
f2:80:51:03:ef:4d:56:cb:d1:e7:07:1b:86:46:b9:c2:3a:47:
c0:a1:f3:62:9b:ee:5e:4f:ec:7d:04:f3:8a:5e:3a:63:6c:2a:
9f:3d:9a:24:52:ba:73:17:ec:bb:29:d1:84:27:62:67:7f:b9:
55:6d:61:62:bf:e7:39:88:49:13:d6:69:51:ca:a3:2b:6e:1c:
cc:6a:fe:cd:71:40:48:db:f8:45:ee:6f:47:39:16:36:cf:33:
48:e1:1d:bd:0b:f4:15:fc:15:da:fa:0b:62:a0:a6:c6:89:e3:
62:e3:4c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:39 2026 by rpki-client