Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.mft
File: TrwmqzTIMZdDMt05mo5W6aqbe4U.mft (raw, json)
Hash identifier: iUingVqHoP26MnTqSqFlZCi/2ODirWXrOvlOtfPmfYQ=
Subject key identifier: ED:0D:AB:17:FC:7F:92:C8:04:BA:7A:70:8F:1C:1D:EE:48:89:7C:A5
Authority key identifier: 4E:BC:26:AB:34:C8:31:97:43:32:DD:39:9A:8E:56:E9:AA:9B:7B:85
Certificate issuer: /CN=4ebc26ab34c831974332dd399a8e56e9aa9b7b85
Certificate serial: 019DAFB31790EFE241656ABF8F86E6232DF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TrwmqzTIMZdDMt05mo5W6aqbe4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.mft
Manifest number: 020A
Signing time: Tue 21 Apr 2026 11:00:42 +0000
Manifest this update: Tue 21 Apr 2026 11:00:42 +0000
Manifest next update: Wed 22 Apr 2026 11:00:42 +0000
Files and hashes: 1: TrwmqzTIMZdDMt05mo5W6aqbe4U.crl (hash: PNTUiUhrkP1WBwVX+jZ9+f8e68I44DPPyN2wWAe/kNc=)
2: zYL449gEhOrSRUOWk45-5w_QwxY.asa (hash: 2I3JzyYDlWOa37LiRrfqotSTSjqIyf07yQPMZe4sNg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TrwmqzTIMZdDMt05mo5W6aqbe4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:af:b3:17:90:ef:e2:41:65:6a:bf:8f:86:e6:23:2d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ebc26ab34c831974332dd399a8e56e9aa9b7b85
Validity
Not Before: Apr 21 11:00:42 2026 GMT
Not After : Apr 22 11:00:42 2026 GMT
Subject: CN=ed0dab17fc7f92c804ba7a708f1c1dee48897ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:aa:34:6d:1a:49:06:b3:e4:1e:6f:7e:9e:57:
5a:79:60:6f:1f:6b:49:74:4f:44:32:8d:18:0f:8d:
3f:ba:74:38:25:bf:8b:6d:94:93:78:38:d0:b8:5f:
4c:99:88:fc:44:68:45:35:aa:23:d6:dc:7a:2c:55:
f6:02:02:fc:75:77:2f:b0:15:1c:52:7c:a3:36:69:
7a:e6:bf:46:d4:33:56:86:f0:1e:cc:bf:2b:a3:b0:
61:e6:8a:62:2e:c3:2e:0b:8e:4a:79:e6:72:ef:b1:
e5:08:6e:3f:2b:1c:1e:fb:39:ca:0c:dd:47:a0:70:
e0:65:f4:b8:0d:dc:03:82:2a:39:b4:15:66:2e:30:
4d:e3:b9:ff:10:1f:8f:5c:08:7e:1a:e0:c3:11:65:
58:b5:dc:76:43:76:2e:ec:17:d1:ac:c8:e7:86:a7:
95:9a:ec:d0:c2:a2:10:7d:c4:63:45:de:b5:bc:9c:
d5:be:02:90:ca:15:da:3c:d4:5a:f2:05:0f:b3:83:
43:b4:08:59:a7:d7:1b:d7:79:6f:9f:70:2d:e1:3b:
3d:0f:14:4d:0e:12:60:b9:10:3e:a1:9f:62:e8:ba:
39:23:b8:20:af:75:46:81:f5:d3:ed:0a:ef:eb:4f:
ec:93:82:65:c9:87:c8:7f:5a:19:b6:93:5d:0b:d6:
14:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0D:AB:17:FC:7F:92:C8:04:BA:7A:70:8F:1C:1D:EE:48:89:7C:A5
X509v3 Authority Key Identifier:
keyid:4E:BC:26:AB:34:C8:31:97:43:32:DD:39:9A:8E:56:E9:AA:9B:7B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TrwmqzTIMZdDMt05mo5W6aqbe4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b5:1d:7f:ca:b3:db:52:7c:68:a4:23:95:2a:2f:eb:3c:7b:
1e:3c:3d:3f:3c:e6:d3:1d:2f:e5:30:ef:ec:b1:bb:7e:2f:93:
f9:0e:fd:92:77:47:c8:d4:40:cf:8f:1c:46:c1:ac:50:9d:35:
b4:c9:ae:3c:02:4f:79:9b:f7:b1:19:d1:3d:87:15:79:4b:03:
fc:f6:3c:3e:8b:b3:5e:89:cb:db:6e:d0:b8:de:94:28:e5:ed:
90:bf:35:63:2e:6f:79:c9:a2:bb:ac:07:68:e7:fa:75:69:f7:
7e:80:b0:18:b6:98:51:73:a0:d8:e6:0f:ef:ee:33:7a:a1:34:
63:1a:16:93:d9:9c:2b:0e:25:48:b6:c9:72:6f:c9:59:94:be:
6d:69:64:98:e1:50:0c:5d:da:5b:19:46:17:93:75:17:8e:6d:
30:f7:88:23:18:0a:e7:d3:cd:71:f5:fb:af:99:3f:f2:ee:67:
75:15:d7:65:6d:b4:b7:05:71:ee:10:53:20:21:c2:cc:16:4f:
a7:3a:1e:2f:51:47:17:bb:38:61:76:d5:8b:8b:dd:9c:1b:50:
b9:b2:62:e3:db:b9:62:9f:f0:e4:65:af:12:12:f9:49:9a:f4:
1a:f9:76:b1:95:2f:cd:13:b4:1c:4f:41:67:71:f7:cb:ac:ad:
78:cd:da:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 21:13:24 2026 by rpki-client