Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
File: tRu6i9P6566CScnEYWi6kAI9sZQ.mft (raw, json)
Hash identifier: bUAmeBQ9r8fI2Oe+Ymv0aFztahiFz168rhcqOUEUWRM=
Subject key identifier: 95:73:F4:45:7A:E1:B8:32:46:E0:C2:1C:93:7C:F8:A6:03:7A:15:30
Authority key identifier: B5:1B:BA:8B:D3:FA:E7:AE:82:49:C9:C4:61:68:BA:90:02:3D:B1:94
Certificate issuer: /CN=b51bba8bd3fae7ae8249c9c46168ba90023db194
Certificate serial: 019D394180154BA7EC0AE922C069A643389C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 11:01:27 +0000
Manifest this update: Sun 29 Mar 2026 11:01:27 +0000
Manifest next update: Mon 30 Mar 2026 11:01:27 +0000
Files and hashes: 1: AZ8OvTpGpdDuAF6Y-kPV_Stbyhg.roa (hash: 7rgz8yqocL/1oucg5hPOQaaan/ogeM7MMAM1VpFC/0U=)
2: tRu6i9P6566CScnEYWi6kAI9sZQ.crl (hash: 2ERkDA8yIir2/fk4auGFokHQiDh6uCw7XajQI/vWCZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:80:15:4b:a7:ec:0a:e9:22:c0:69:a6:43:38:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51bba8bd3fae7ae8249c9c46168ba90023db194
Validity
Not Before: Mar 29 11:01:27 2026 GMT
Not After : Mar 30 11:01:27 2026 GMT
Subject: CN=9573f4457ae1b83246e0c21c937cf8a6037a1530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2f:4a:68:13:98:29:05:1b:33:31:20:f5:86:
66:5c:03:bb:05:48:4a:32:db:60:69:43:f7:0d:79:
2c:33:2b:b6:9e:47:16:8f:59:cd:69:69:33:97:5a:
6b:63:0c:91:84:bc:8f:cd:a8:62:23:31:14:14:32:
7c:e1:d4:0a:a7:19:8f:c2:d0:37:f4:00:dd:be:83:
2c:bc:c8:e9:ea:ba:5e:21:bb:de:b0:cb:0f:3d:f2:
fa:c8:06:c5:9b:f9:5a:73:d5:d4:cd:fd:61:d4:74:
e3:4e:f4:53:c5:0c:61:48:f6:e1:e9:17:b5:ba:c4:
c4:4d:e5:9d:05:b0:4c:55:b3:44:bd:00:94:bc:1f:
31:da:a7:30:4c:94:35:0b:12:fc:8d:82:62:83:14:
c6:77:66:da:78:65:20:3e:94:c9:dc:8d:fe:d4:1d:
da:9a:a8:01:84:4c:d0:85:ba:d6:a2:83:6c:49:02:
ec:ec:52:44:5a:d2:85:8b:ed:16:bf:0e:c5:24:44:
26:e3:9a:84:ad:84:e9:4d:b6:f2:68:be:0a:86:6a:
5d:2a:3e:54:8f:ac:8d:e0:a0:27:b8:25:0f:fb:51:
76:18:7b:32:95:83:7f:01:5c:44:6f:a2:d8:75:79:
5f:d6:c3:f6:c4:6d:b1:c6:9a:ff:2b:20:29:38:86:
6a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:73:F4:45:7A:E1:B8:32:46:E0:C2:1C:93:7C:F8:A6:03:7A:15:30
X509v3 Authority Key Identifier:
keyid:B5:1B:BA:8B:D3:FA:E7:AE:82:49:C9:C4:61:68:BA:90:02:3D:B1:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:4b:ab:d5:00:92:6d:ee:84:4f:36:7a:8a:37:16:17:0e:a3:
4b:87:e0:ca:9f:f0:c3:72:0b:2a:98:8e:3a:a3:7f:a7:41:49:
ed:c8:c8:31:82:ab:4b:d2:2c:f8:6e:ec:be:eb:50:08:f5:8c:
f6:45:91:b1:0a:ba:46:c2:af:8b:91:94:9a:4d:94:40:dc:8c:
50:f4:eb:20:47:26:c0:4e:21:6c:e2:1a:f2:79:42:ef:53:ab:
f5:79:1f:d1:c5:43:d0:03:a5:45:fd:0c:88:75:40:fa:c8:b5:
81:8d:f5:a4:d0:86:bd:bf:bc:d6:0d:ff:d1:65:b2:fa:fe:7b:
21:df:08:81:a0:ab:fa:86:cd:4e:65:8c:65:d3:01:63:75:40:
f3:74:cd:2d:f6:2d:52:8a:07:0a:f2:49:8b:d1:1a:15:39:e3:
01:1e:45:92:98:b2:f5:1d:35:27:6d:ae:e0:68:e9:c5:59:b2:
75:76:13:bf:04:4a:f1:53:c1:be:f6:9a:3e:57:a6:7b:09:ed:
0c:c4:83:09:9e:dd:99:85:d7:07:9d:56:2d:ad:f8:d2:0a:d8:
22:80:04:51:b0:8c:4f:b5:c8:ec:14:6f:bb:ec:aa:cb:f7:f3:
95:89:dd:e7:9f:0f:46:78:c7:92:0f:37:0f:99:77:f0:7f:86:
66:e4:11:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:49:54 2026 by rpki-client