Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft
File: tRQMX448e8JKGtTIQGQVJj62ur8.mft (raw, json)
Hash identifier: 29j77uPvFjeiYYyXy6IFFGbvlEmSsHhvvBSW+iICo3A=
Subject key identifier: 03:B1:DE:7F:4D:11:40:23:57:84:4E:7B:A5:F0:DF:C3:4F:FD:50:DD
Authority key identifier: B5:14:0C:5F:8E:3C:7B:C2:4A:1A:D4:C8:40:64:15:26:3E:B6:BA:BF
Certificate issuer: /CN=b5140c5f8e3c7bc24a1ad4c8406415263eb6babf
Certificate serial: 01A18006764566467C7BA951FF4E57E79315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRQMX448e8JKGtTIQGQVJj62ur8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft
Manifest number: 1882
Signing time: Wed 28 Oct 2026 01:01:09 +0000
Manifest this update: Wed 28 Oct 2026 01:01:09 +0000
Manifest next update: Thu 29 Oct 2026 01:01:09 +0000
Files and hashes: 1: KPtch8_0qzZU6CkKEvFkXYq2ViY.roa (hash: ClU8AEytbQIwHPgMAzbIutrvifBxjGRmu/3pZThvLHI=)
2: tRQMX448e8JKGtTIQGQVJj62ur8.crl (hash: nxtoKOA/DgWmoC+gLP4jW99h2b5hCfEtk+6lGylMoYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRQMX448e8JKGtTIQGQVJj62ur8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:06:76:45:66:46:7c:7b:a9:51:ff:4e:57:e7:93:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5140c5f8e3c7bc24a1ad4c8406415263eb6babf
Validity
Not Before: Oct 28 01:01:09 2026 GMT
Not After : Oct 29 01:01:09 2026 GMT
Subject: CN=03b1de7f4d11402357844e7ba5f0dfc34ffd50dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:25:d5:22:16:c7:39:a2:41:c8:3a:a2:18:60:
79:ae:16:03:0a:9a:29:1f:a2:e7:70:a2:b6:43:82:
d6:80:c4:f2:97:ae:ac:ca:41:c7:de:b3:53:ba:2e:
4a:e7:c2:fa:5d:78:6e:76:b7:76:8e:9b:74:4b:2c:
22:77:80:a2:72:7a:82:32:58:fc:7b:95:4b:c7:c8:
ea:c3:7b:c1:d9:68:f7:e7:b8:76:e7:08:77:65:ce:
80:f0:8e:8d:36:79:a6:ce:76:47:06:ec:35:d3:6e:
7a:ce:5d:77:e5:cf:e0:d4:96:1c:c4:d1:87:01:09:
61:e7:8d:80:c2:74:82:86:e4:b7:f5:12:3c:f3:ba:
8b:19:a2:5f:dc:d5:31:90:7e:97:6f:16:ee:33:89:
c5:d6:56:6a:8f:ae:e0:3e:c9:a6:9d:5d:78:88:75:
f7:5e:f5:57:db:b7:5b:2d:d4:ea:dc:94:50:cb:a9:
1b:0e:97:fc:f8:c8:a7:7a:30:fc:89:8d:0d:5f:3d:
5a:51:1a:74:61:61:a6:3a:4b:40:0b:18:1c:c8:03:
f2:a3:6a:79:ad:0e:db:76:eb:7f:4d:50:b3:28:7d:
20:5c:f0:9b:33:1f:a2:04:57:c8:af:4e:6b:c6:2f:
fd:77:12:ca:98:ff:70:8d:1d:34:77:e3:1c:b7:36:
17:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B1:DE:7F:4D:11:40:23:57:84:4E:7B:A5:F0:DF:C3:4F:FD:50:DD
X509v3 Authority Key Identifier:
keyid:B5:14:0C:5F:8E:3C:7B:C2:4A:1A:D4:C8:40:64:15:26:3E:B6:BA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRQMX448e8JKGtTIQGQVJj62ur8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:16:5b:c6:97:40:01:0b:3a:74:b0:a1:65:9a:de:9f:d8:55:
b8:e8:18:f8:70:d6:9e:4f:c2:33:da:0d:64:9b:8a:af:ef:8a:
87:55:ab:de:ee:71:97:5e:f1:a3:f8:0e:84:90:a3:7d:02:24:
4f:62:36:73:d5:ce:3e:5e:2a:61:77:cd:1e:5d:09:4d:d8:09:
e8:87:25:c0:f6:58:9f:d2:f9:20:fb:9e:80:bf:2b:cd:a4:d3:
a1:14:f6:b1:12:77:86:5c:d5:4d:c3:8e:ea:e6:c1:b1:9a:08:
47:9d:4c:c2:37:0c:9e:9b:93:d4:5a:7a:bc:d1:88:51:d2:9e:
d1:b6:95:6e:a3:e1:31:5b:b8:ab:e9:68:02:70:b8:e3:c7:cd:
67:2b:cc:1d:9f:32:83:42:17:da:c1:ea:fe:d1:b5:01:cd:d3:
3c:6c:8e:9c:9e:f7:20:fa:50:de:62:01:1e:66:ca:ab:a1:ce:
3c:f5:1b:b5:92:9a:09:bc:43:c5:68:37:6d:82:f9:c6:48:eb:
f3:d4:b3:f7:0a:d3:b3:da:32:29:74:63:2c:96:74:15:95:2c:
62:da:ea:0d:28:a6:6b:71:ca:19:fa:6e:b9:fb:dc:a8:9e:f4:
db:2b:1c:47:88:55:5e:f4:02:1b:0f:e4:cb:b6:30:33:64:b9:
e6:ee:62:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 10:15:35 2026 by rpki-client