Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.mft
File: Tr9rN7lPlbSQXPjGoh2IA-q_p34.mft (raw, json)
Hash identifier: loNIKeSlXWSErMxGIgNEqwWI3OzgSl4r51WvDG5O2e8=
Subject key identifier: B3:59:9C:90:E8:7E:4A:4A:36:8C:A5:13:81:95:91:6D:D4:72:37:49
Authority key identifier: 4E:BF:6B:37:B9:4F:95:B4:90:5C:F8:C6:A2:1D:88:03:EA:BF:A7:7E
Certificate issuer: /CN=4ebf6b37b94f95b4905cf8c6a21d8803eabfa77e
Certificate serial: 01A0024B2606749CC17929D15BC31F8CD182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tr9rN7lPlbSQXPjGoh2IA-q_p34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.mft
Manifest number: 05EC
Signing time: Fri 14 Aug 2026 22:01:14 +0000
Manifest this update: Fri 14 Aug 2026 22:01:14 +0000
Manifest next update: Sat 15 Aug 2026 22:01:14 +0000
Files and hashes: 1: E3Ps_1Y0RPyTuff7vspqXs8HJd0.roa (hash: SDa/tg7mYNNs8Ig1oDFyYQAMW6ncyRIYSQRc76ZseiQ=)
2: Tr9rN7lPlbSQXPjGoh2IA-q_p34.crl (hash: h4QXBGGNW2fNu5JFFHaMo5k5vcIplFUsHl9N/xxXRnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tr9rN7lPlbSQXPjGoh2IA-q_p34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 22:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4b:26:06:74:9c:c1:79:29:d1:5b:c3:1f:8c:d1:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ebf6b37b94f95b4905cf8c6a21d8803eabfa77e
Validity
Not Before: Aug 14 22:01:14 2026 GMT
Not After : Aug 15 22:01:14 2026 GMT
Subject: CN=b3599c90e87e4a4a368ca5138195916dd4723749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:26:71:f3:b1:e1:29:ef:02:48:c4:74:e3:d2:
1b:7b:46:51:64:de:8b:89:1c:cc:8d:21:15:67:50:
c0:d8:fa:0e:96:69:60:da:67:fd:19:35:0e:88:fa:
3e:8e:97:20:9a:a2:f9:0e:21:22:63:2f:a7:47:fe:
59:ab:f6:9d:e2:10:5a:a3:8a:31:e0:2f:01:7b:17:
1f:4a:78:ea:b3:10:d8:b3:d8:ff:8d:3d:06:66:07:
11:27:f0:e5:d4:5d:e8:3a:7c:b9:24:cb:13:2f:c9:
40:8b:da:b5:63:1b:c7:11:4d:53:82:8b:16:ba:47:
47:26:ca:8c:74:a3:6a:f8:7d:14:aa:e5:69:9c:ff:
a8:31:fb:dd:31:df:9d:59:07:cc:76:25:df:c4:68:
4d:70:8b:3d:e0:86:d2:75:08:79:96:40:f1:30:84:
cb:93:7e:f0:e2:37:22:9c:20:2f:e5:14:d3:54:31:
2d:0a:89:79:00:7c:d0:13:56:51:39:4f:37:1c:da:
f7:55:e0:4e:8d:91:82:d4:56:73:d1:db:ea:7d:95:
95:53:6d:71:0e:8c:f2:19:73:58:01:36:ba:ba:8e:
ee:7e:3e:97:fe:01:46:64:13:f4:f3:d0:3c:88:67:
9a:6a:d8:32:a1:a6:57:35:d7:dd:07:0d:0a:fb:5f:
a0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:59:9C:90:E8:7E:4A:4A:36:8C:A5:13:81:95:91:6D:D4:72:37:49
X509v3 Authority Key Identifier:
keyid:4E:BF:6B:37:B9:4F:95:B4:90:5C:F8:C6:A2:1D:88:03:EA:BF:A7:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tr9rN7lPlbSQXPjGoh2IA-q_p34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:6e:89:ac:d5:c2:e2:93:5c:f0:3f:1c:05:5b:53:87:85:53:
5a:f7:c9:7c:fc:62:d5:49:a0:30:26:5d:8f:58:c2:3d:3a:b0:
75:6a:96:6b:09:03:7c:05:70:37:48:d6:1c:1f:f7:5d:86:ad:
29:1f:85:9a:50:b5:31:2f:56:86:ad:31:0a:55:81:70:c2:8f:
6e:47:b2:88:71:41:c6:ca:68:2a:56:eb:15:91:dd:29:00:3f:
64:96:77:82:c9:70:98:a0:4d:65:2c:d2:dc:51:19:f0:fa:0e:
5e:c0:c1:0b:bd:b2:71:7e:45:ee:ba:08:6a:61:1e:9e:7e:e9:
f0:8e:3c:dd:25:5e:7b:f5:93:26:29:34:e6:b7:5d:2d:c4:c3:
30:58:5c:9d:76:d9:a6:0f:22:04:2a:3c:3d:20:29:c7:92:25:
85:a8:91:bb:b4:42:92:4c:ad:89:46:8d:5e:70:17:4c:60:46:
a3:94:1d:8a:29:49:8a:32:f5:7b:4e:cb:f6:00:e3:10:cf:d6:
b4:2c:be:64:d2:9a:55:21:c7:2c:cc:9f:25:1c:ca:2d:85:d9:
2f:2b:60:e3:69:90:c9:c3:13:f5:1e:48:32:bb:ba:89:6c:a2:
4e:57:21:9e:c6:21:c6:92:38:81:32:6b:bd:a2:9a:41:3d:3a:
50:5a:7e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:14:25 2026 by rpki-client