Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
File: _TrysG9KUBbg5avtGD9GXbFfQdU.mft (raw, json)
Hash identifier: mcxDAu+QweIV2kzmO56srZv+basjstVjn8kfrjFYlfY=
Subject key identifier: 33:FE:F8:6E:CE:BC:8D:E0:30:5A:9F:09:06:5A:32:3F:0D:8D:DA:3E
Authority key identifier: FD:3A:F2:B0:6F:4A:50:16:E0:E5:AB:ED:18:3F:46:5D:B1:5F:41:D5
Certificate issuer: /CN=fd3af2b06f4a5016e0e5abed183f465db15f41d5
Certificate serial: 019DD23FEDC065FCCAB35965AD9877D0BC76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
Manifest number: 10D2
Signing time: Tue 28 Apr 2026 04:01:38 +0000
Manifest this update: Tue 28 Apr 2026 04:01:38 +0000
Manifest next update: Wed 29 Apr 2026 04:01:38 +0000
Files and hashes: 1: E6uFRto1KOOlDteB9p8TgWfe7iA.roa (hash: dfDYcJiyeiY8hSBk1DQV6nWMpgUuU4rmpVyKldkTJrs=)
2: _TrysG9KUBbg5avtGD9GXbFfQdU.crl (hash: ic2ln/mfR3BMDnLKFa4SKh8cK1QYwYo/ntjF9VbKfmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d2:3f:ed:c0:65:fc:ca:b3:59:65:ad:98:77:d0:bc:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd3af2b06f4a5016e0e5abed183f465db15f41d5
Validity
Not Before: Apr 28 04:01:38 2026 GMT
Not After : Apr 29 04:01:38 2026 GMT
Subject: CN=33fef86ecebc8de0305a9f09065a323f0d8dda3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ec:90:d7:18:76:f6:87:16:ed:88:f4:ad:95:
dd:d8:2c:65:79:e9:d7:bc:a4:d0:ea:1e:a1:29:17:
08:16:4f:2b:eb:8b:8e:15:2d:48:ea:c8:a0:16:f8:
08:f8:d5:59:9b:79:38:2c:10:83:2c:98:90:00:06:
eb:31:b8:d5:8d:98:a7:18:4f:be:e0:14:6e:aa:bd:
9d:c1:75:1d:01:dd:59:3f:05:9a:d6:1c:5c:da:45:
95:ce:56:64:a7:e8:61:b9:f2:a8:a5:f1:9a:0e:bf:
d6:01:fa:f7:6e:f8:ee:aa:8e:08:d7:dc:65:ab:fe:
af:29:d1:dc:d1:4f:19:42:f0:12:43:ab:f6:99:c8:
24:8e:b3:01:c5:9d:16:b3:40:e6:a8:a1:98:6d:c0:
ad:3a:a8:a4:5d:40:34:46:c2:c2:32:44:15:48:63:
3e:f0:f2:6f:6f:1e:ae:aa:48:27:5d:aa:05:cf:17:
8a:13:6f:2c:98:bf:0c:57:ba:25:8b:ed:3d:67:23:
ef:71:bb:47:71:87:b9:18:d9:5f:b2:4f:a1:ce:76:
72:46:6f:c7:32:86:3a:df:9d:2c:f5:79:72:74:ea:
1b:95:e4:78:41:bd:61:3b:e0:47:b5:7b:dd:e5:31:
64:74:90:82:57:c1:94:88:e0:93:04:e3:92:27:e4:
dc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FE:F8:6E:CE:BC:8D:E0:30:5A:9F:09:06:5A:32:3F:0D:8D:DA:3E
X509v3 Authority Key Identifier:
keyid:FD:3A:F2:B0:6F:4A:50:16:E0:E5:AB:ED:18:3F:46:5D:B1:5F:41:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:69:d6:d4:18:eb:f7:e6:ff:5f:93:37:92:0a:0f:39:72:0c:
7e:00:ec:f9:2c:f1:b1:c6:37:df:92:38:ab:85:b4:3c:ed:29:
3f:50:37:72:99:d0:4e:7e:be:51:67:49:a4:70:65:04:cf:c6:
bc:e1:f0:0e:45:25:6c:c5:b8:aa:74:8b:51:e1:8a:0e:63:ed:
d5:56:25:53:49:22:51:37:5c:19:10:0b:46:6c:8d:f8:92:2a:
5e:59:71:29:78:0d:1a:46:b6:5f:74:0f:f2:e1:cd:5c:6a:61:
2f:12:65:24:1d:61:05:ab:04:be:f3:e5:70:6b:ae:25:79:5b:
5e:25:62:73:45:c6:d0:5e:c6:8a:d8:cf:b2:cf:d5:bf:21:38:
df:2e:9b:85:78:ab:a0:ef:8c:d4:e7:de:91:65:37:c0:a7:5f:
3b:f8:e6:7d:92:93:25:3f:04:fe:e2:2e:47:06:3f:cd:f4:75:
80:91:61:31:32:e8:9f:42:c9:b0:da:d0:87:0d:c5:8a:bb:f4:
d9:2c:84:57:33:d4:33:bf:be:ed:02:ab:10:69:02:9d:52:5d:
fe:8e:45:2d:9b:81:6a:6c:7e:fc:81:85:89:18:12:42:eb:20:
84:23:32:05:8e:bb:b0:35:e1:4a:89:48:4d:95:d6:ce:76:42:
90:2d:8c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 05:46:49 2026 by rpki-client