Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
File: _TrysG9KUBbg5avtGD9GXbFfQdU.mft (raw, json)
Hash identifier: kLVXxCk+X/Y3bfkALcw8NykjTB2B/8DG7l1DRgJXX+E=
Subject key identifier: 44:D4:A8:72:63:1B:B7:BA:3B:65:2D:17:53:C0:01:69:C5:C0:55:EB
Authority key identifier: FD:3A:F2:B0:6F:4A:50:16:E0:E5:AB:ED:18:3F:46:5D:B1:5F:41:D5
Certificate issuer: /CN=fd3af2b06f4a5016e0e5abed183f465db15f41d5
Certificate serial: 019DD0516AB01B3EDBE6FE76279B156EC686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
Manifest number: 10D1
Signing time: Mon 27 Apr 2026 19:01:29 +0000
Manifest this update: Mon 27 Apr 2026 19:01:29 +0000
Manifest next update: Tue 28 Apr 2026 19:01:29 +0000
Files and hashes: 1: E6uFRto1KOOlDteB9p8TgWfe7iA.roa (hash: dfDYcJiyeiY8hSBk1DQV6nWMpgUuU4rmpVyKldkTJrs=)
2: _TrysG9KUBbg5avtGD9GXbFfQdU.crl (hash: Ay6qIykYvBJALvwGg9QIc/AxGM3neTqpaEwxTLNunGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 19:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:51:6a:b0:1b:3e:db:e6:fe:76:27:9b:15:6e:c6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd3af2b06f4a5016e0e5abed183f465db15f41d5
Validity
Not Before: Apr 27 19:01:29 2026 GMT
Not After : Apr 28 19:01:29 2026 GMT
Subject: CN=44d4a872631bb7ba3b652d1753c00169c5c055eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7f:0c:6a:8f:e2:65:a2:ba:77:20:53:94:b1:
f4:13:ab:63:92:f4:76:28:a5:62:6d:d7:08:fe:23:
9c:c0:25:22:b8:1c:d4:9f:61:68:a8:86:ef:28:45:
6f:50:6b:4d:31:84:fa:09:ac:1a:5a:6d:4f:20:22:
7c:e9:b3:2d:e7:2d:5e:e9:b3:99:b2:92:af:f5:13:
7b:28:24:cf:d8:2c:38:a8:67:77:1b:87:36:c7:8d:
82:fe:0d:82:5e:9c:cb:2d:51:45:0f:89:0b:4e:41:
e8:fc:40:69:64:d4:e9:9e:76:8d:a4:66:e9:0b:02:
e8:68:3a:89:41:df:5a:f1:2b:d9:db:2f:b0:a9:8c:
a3:2b:6b:31:86:f5:e1:a8:6c:b4:95:f9:02:a6:09:
d4:8d:ce:cf:00:3b:f4:84:c8:40:5e:15:ec:c1:6a:
46:9b:25:d4:1c:2e:4c:3f:22:e1:5e:88:11:d7:e6:
f2:dd:6e:ee:56:ed:1c:c3:30:19:eb:39:dc:ad:ee:
da:c6:f9:12:f0:96:a3:25:0b:95:b8:67:55:93:f3:
91:5b:e5:a4:eb:db:00:10:e4:26:04:35:e7:4c:bd:
59:de:8c:0b:6a:88:f9:62:20:23:ca:fe:20:cd:b8:
35:27:99:af:10:05:d9:ba:d7:84:1e:40:a5:b9:b7:
47:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D4:A8:72:63:1B:B7:BA:3B:65:2D:17:53:C0:01:69:C5:C0:55:EB
X509v3 Authority Key Identifier:
keyid:FD:3A:F2:B0:6F:4A:50:16:E0:E5:AB:ED:18:3F:46:5D:B1:5F:41:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:33:ba:3b:8d:e5:85:34:66:a0:3e:11:04:3f:6c:15:c3:e8:
7b:f0:c0:b1:2e:8d:49:3c:8e:fa:90:95:fd:1d:46:d8:c6:28:
13:fe:66:e4:0a:7c:69:d0:79:43:82:2e:6a:18:b9:2f:ae:fe:
0e:a9:9b:23:ca:2b:d5:dc:9b:10:bd:f1:ef:7e:f5:1b:d0:d5:
00:d4:f6:eb:a0:f8:e9:40:6a:7e:fe:f9:81:e9:fb:ab:f6:39:
41:56:a7:80:b9:65:81:48:69:a9:c1:4b:37:a1:4e:f6:22:a0:
38:a6:47:14:d7:c6:9e:53:f8:bf:97:42:c8:e4:97:96:81:7c:
cc:5b:a0:cb:29:4d:a1:45:dc:76:b7:ec:b2:f6:82:ee:98:83:
7a:b0:1a:5e:6c:8f:85:2f:28:1c:ff:05:ff:d7:80:ac:3b:8f:
5b:fd:41:ff:9b:b6:87:f9:94:fe:7a:e9:46:4e:83:d1:4e:59:
ce:9f:d1:5d:3a:9b:16:49:2b:5b:b6:a9:d5:18:4a:71:1a:24:
f4:33:e9:e7:49:51:29:bc:0a:3b:a2:af:03:0a:02:1f:7f:75:
ea:5d:e3:6e:6a:d3:f7:f7:11:07:b3:bd:5f:ae:a4:f2:b7:95:
bd:94:36:ed:9c:df:74:57:69:de:81:5f:cb:2e:de:09:1b:35:
f8:f6:ce:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 04:31:27 2026 by rpki-client