Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
File: _TrysG9KUBbg5avtGD9GXbFfQdU.mft (raw, json)
Hash identifier: hLji4R9GYOP2voxVuCqk70gkTLBnWtwndDHQ5yABsN4=
Subject key identifier: 8B:5A:AE:90:1F:52:BF:74:9B:ED:74:31:5D:CA:45:77:38:42:82:F5
Authority key identifier: FD:3A:F2:B0:6F:4A:50:16:E0:E5:AB:ED:18:3F:46:5D:B1:5F:41:D5
Certificate issuer: /CN=fd3af2b06f4a5016e0e5abed183f465db15f41d5
Certificate serial: 01A17EBCDB6035B45063DEF7ABF2F2148707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
Manifest number: 12B9
Signing time: Tue 27 Oct 2026 19:01:08 +0000
Manifest this update: Tue 27 Oct 2026 19:01:08 +0000
Manifest next update: Wed 28 Oct 2026 19:01:08 +0000
Files and hashes: 1: E6uFRto1KOOlDteB9p8TgWfe7iA.roa (hash: dfDYcJiyeiY8hSBk1DQV6nWMpgUuU4rmpVyKldkTJrs=)
2: _TrysG9KUBbg5avtGD9GXbFfQdU.crl (hash: 1eUK6DrKvRbqpiLwdGj8RHLlOQaLdxFkRz+Mo1kVHqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 19:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:bc:db:60:35:b4:50:63:de:f7:ab:f2:f2:14:87:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd3af2b06f4a5016e0e5abed183f465db15f41d5
Validity
Not Before: Oct 27 19:01:08 2026 GMT
Not After : Oct 28 19:01:08 2026 GMT
Subject: CN=8b5aae901f52bf749bed74315dca4577384282f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:30:d5:9d:5f:80:7b:55:f0:70:7f:8b:d7:7d:
b2:7c:27:7f:5c:14:cd:77:5a:90:36:10:97:38:ce:
10:18:e2:39:54:0e:7b:35:57:37:e4:30:7e:da:66:
cc:38:1c:60:fd:7e:cb:97:48:ea:1a:4f:b6:bb:70:
51:8a:ec:dc:be:d5:ac:c4:ef:5d:58:bf:f2:6d:87:
3f:28:fd:0e:f8:97:32:2b:23:02:7e:0e:19:14:0f:
cd:cc:7a:1d:25:83:7a:c4:2c:33:df:74:fd:fe:9d:
2a:60:57:34:3c:c4:c3:86:08:01:7b:f2:bc:63:70:
7e:e1:6e:d4:f4:28:7d:9d:91:b1:98:6e:07:ba:c8:
ba:27:35:a9:c6:6e:9e:00:7d:76:e3:90:56:7f:38:
a8:87:3a:ff:7e:73:fc:fc:ba:e6:fd:62:29:e0:5c:
94:94:8a:8d:2e:3b:a7:11:fd:d4:63:c7:ca:97:25:
e6:56:35:83:93:ff:9b:d0:01:5a:0e:d9:af:02:ee:
bd:d3:60:27:e9:ae:e8:9f:03:44:a6:25:16:17:76:
ef:6b:e6:eb:f2:ff:96:d8:cc:58:d6:62:8d:b2:75:
8e:bb:7c:39:f5:e5:a7:3b:66:71:2f:e9:c3:4a:3f:
4d:ca:c7:15:bf:8f:df:ec:48:0a:d9:45:1e:54:36:
39:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5A:AE:90:1F:52:BF:74:9B:ED:74:31:5D:CA:45:77:38:42:82:F5
X509v3 Authority Key Identifier:
keyid:FD:3A:F2:B0:6F:4A:50:16:E0:E5:AB:ED:18:3F:46:5D:B1:5F:41:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e5:64:69:66:db:8a:a7:58:83:7f:ab:3a:5d:63:09:01:d4:
5d:bd:3a:69:4e:74:a7:f5:02:34:1b:0b:08:9a:89:96:48:36:
f1:e8:9e:17:68:8a:4f:02:81:ad:5a:86:80:2b:8f:e5:00:34:
6b:8e:7a:4b:7e:15:8e:4a:ed:56:8e:64:3a:7e:a5:fb:4c:1a:
60:22:71:be:82:c3:13:53:6c:cf:8f:b9:5d:86:df:23:a2:5f:
cc:50:74:74:e1:af:5d:99:cd:41:55:c8:0f:98:9b:47:63:72:
1c:d2:97:27:52:c0:ec:1c:be:f0:d9:9c:9a:db:a8:e9:ab:2e:
09:6b:12:03:e3:81:15:26:9c:fb:20:23:ab:62:9b:7e:eb:b4:
e5:84:71:8d:fc:06:71:32:e6:c3:36:4b:c9:e9:1d:4b:67:b2:
07:b3:bf:77:27:65:d8:ee:eb:39:98:04:75:35:52:e1:39:b8:
64:a4:bc:b2:03:a2:40:c2:98:79:65:33:7f:cb:7a:1c:ea:0a:
14:87:bb:d6:f6:66:6c:51:0d:44:d7:39:c2:38:25:f7:19:27:
a9:67:c6:d0:a9:b9:06:c0:81:bb:94:f8:90:8e:4a:5f:98:5f:
cd:4a:5c:53:12:22:c4:70:5b:9e:17:1c:2e:b5:ce:88:c7:22:
a9:39:d1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:13:52 2026 by rpki-client