Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.mft
File: trIzPwZlc_UxbgdaAc4kkLWMauE.mft (raw, json)
Hash identifier: FQGTsomKvEXSNCDf2/Ro1r8npaG3DWE/4Hykx6ZUw2A=
Subject key identifier: FB:32:FE:00:76:B8:2C:D3:65:FA:2C:7E:8B:6E:D4:0A:82:58:79:81
Authority key identifier: B6:B2:33:3F:06:65:73:F5:31:6E:07:5A:01:CE:24:90:B5:8C:6A:E1
Certificate issuer: /CN=b6b2333f066573f5316e075a01ce2490b58c6ae1
Certificate serial: 019CB95DF65509A791EB105F20855170B072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/trIzPwZlc_UxbgdaAc4kkLWMauE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.mft
Manifest number: B3
Signing time: Wed 04 Mar 2026 15:01:08 +0000
Manifest this update: Wed 04 Mar 2026 15:01:08 +0000
Manifest next update: Thu 05 Mar 2026 15:01:08 +0000
Files and hashes: 1: dyP9HmlPNYApUiXMVkJy7vMe5z4.roa (hash: ZvC63f+lYCaC59XADOOzP040O3Hve9ZkEMDWI+F9kcM=)
2: trIzPwZlc_UxbgdaAc4kkLWMauE.crl (hash: T3/mdKUsjpVXAUKuOc5it/xB6WBe5BsSbk99oBS68TA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.mft
rsync://rpki.ripe.net/repository/DEFAULT/trIzPwZlc_UxbgdaAc4kkLWMauE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 14:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:5d:f6:55:09:a7:91:eb:10:5f:20:85:51:70:b0:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6b2333f066573f5316e075a01ce2490b58c6ae1
Validity
Not Before: Mar 4 15:01:08 2026 GMT
Not After : Mar 5 15:01:08 2026 GMT
Subject: CN=fb32fe0076b82cd365fa2c7e8b6ed40a82587981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:63:5b:4f:a3:3d:e9:c9:7c:25:4e:45:d4:91:
37:28:23:bf:33:fd:eb:11:c3:91:d2:24:80:1c:cd:
c8:b3:19:68:19:d7:1c:8c:c8:7c:eb:ae:22:e3:78:
98:d9:d8:cb:4a:22:33:e8:ba:1c:38:59:24:3a:51:
90:41:eb:d8:d1:e2:05:eb:e2:45:ed:41:b4:48:db:
4d:05:3b:b9:e1:da:28:75:21:43:b3:8c:74:f2:3c:
7d:e6:ae:18:a6:53:18:3c:d3:16:fa:5d:67:4c:ba:
91:92:ff:f5:8e:05:66:5d:a6:2a:16:19:fc:ca:0d:
e0:fe:fc:b0:88:8c:55:41:cc:69:9f:f3:47:11:b9:
8c:e7:b9:d4:a6:03:5c:19:91:70:46:79:83:5b:41:
cf:4f:fa:fe:a6:19:eb:07:9b:78:1f:f9:83:91:5b:
d4:16:c6:fb:24:0d:17:41:fa:e1:ab:71:8e:f7:32:
e8:db:f1:4a:ed:22:d9:46:18:c7:0e:10:0d:0e:01:
01:5f:f5:c6:86:f9:48:3d:6a:7e:e2:89:cf:1d:0c:
09:ad:86:94:5c:3d:81:eb:5c:24:e6:04:0f:ec:88:
7e:4b:bb:d1:11:26:33:ba:64:f4:e3:55:be:38:97:
11:13:90:cf:9e:4a:6f:48:06:35:dd:c0:bc:fd:22:
14:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:32:FE:00:76:B8:2C:D3:65:FA:2C:7E:8B:6E:D4:0A:82:58:79:81
X509v3 Authority Key Identifier:
keyid:B6:B2:33:3F:06:65:73:F5:31:6E:07:5A:01:CE:24:90:B5:8C:6A:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trIzPwZlc_UxbgdaAc4kkLWMauE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:6f:c3:ae:5e:6e:6e:ee:ba:7b:fd:4d:1d:db:2f:97:fd:db:
8a:af:99:3d:1c:33:e1:f8:57:28:bd:b8:f2:a4:b1:36:15:e8:
10:f3:57:09:bc:8d:07:ff:11:4e:82:94:e4:e2:84:8b:c5:63:
4a:4f:b2:18:99:48:04:91:54:b5:54:32:5a:e1:06:a1:22:6f:
56:13:05:26:4f:b3:ca:ca:2e:0e:4d:2d:ae:75:9b:c6:db:8a:
27:7f:42:77:9c:86:3f:4b:7c:bf:54:43:ee:e9:18:38:f4:e3:
11:ee:d6:67:02:3e:ae:dc:2e:48:f6:72:14:f4:7e:3f:b7:1d:
e2:a3:09:85:5a:db:86:71:d3:00:c7:23:0b:2d:3a:1f:6f:40:
17:92:a0:1a:10:d8:0d:43:b6:67:33:14:f1:09:9a:1b:16:76:
56:63:62:13:88:6a:86:3a:c1:44:bf:59:0c:da:26:41:c5:05:
62:95:b2:2c:69:1f:0b:c7:0f:20:16:81:73:5a:dc:78:e7:fa:
48:33:8a:76:71:89:05:88:2a:8b:56:7b:33:92:bb:de:39:a8:
48:e5:c7:dc:b6:62:db:0e:8b:89:de:2b:81:bb:74:ab:d8:f4:
d3:02:2d:e5:f8:64:a8:c3:09:ce:42:73:ea:80:4b:56:c0:26:
1e:74:59:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 23:20:13 2026 by rpki-client