Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.mft
File: trcm8FkrUE5yMwX2e6tRR9TqaW0.mft (raw, json)
Hash identifier: TtCik+bGAe9EVB5xeyH+JG6s6jsnxeYg78WP2g6kjB0=
Subject key identifier: 1F:38:D2:4D:0B:AD:83:C0:24:E5:FA:3C:C9:1D:BA:0A:29:45:9B:A1
Authority key identifier: B6:B7:26:F0:59:2B:50:4E:72:33:05:F6:7B:AB:51:47:D4:EA:69:6D
Certificate issuer: /CN=b6b726f0592b504e723305f67bab5147d4ea696d
Certificate serial: 019D37891B26B08B0BE5D1D00BB68EB4DB78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/trcm8FkrUE5yMwX2e6tRR9TqaW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.mft
Manifest number: 0BCF
Signing time: Sun 29 Mar 2026 03:00:25 +0000
Manifest this update: Sun 29 Mar 2026 03:00:25 +0000
Manifest next update: Mon 30 Mar 2026 03:00:25 +0000
Files and hashes: 1: BgaIoZwQRt2oZC2BzablBd309Sk.roa (hash: 0smh/WGipg6DXsx63DMVAp+gWZ9HDNa2kEwq3ysrdfQ=)
2: trcm8FkrUE5yMwX2e6tRR9TqaW0.crl (hash: zCAS30QWcFcUCl8BNA6spaoQtg6C5xZb5mo8nq9OpJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/trcm8FkrUE5yMwX2e6tRR9TqaW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:1b:26:b0:8b:0b:e5:d1:d0:0b:b6:8e:b4:db:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6b726f0592b504e723305f67bab5147d4ea696d
Validity
Not Before: Mar 29 03:00:25 2026 GMT
Not After : Mar 30 03:00:25 2026 GMT
Subject: CN=1f38d24d0bad83c024e5fa3cc91dba0a29459ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9c:18:cc:25:8f:f1:2f:fe:9e:ea:ce:77:08:
25:5e:8a:da:50:e8:bf:7f:ec:eb:ec:ca:64:44:2c:
84:07:9a:9c:14:d2:0c:7d:a5:aa:f2:63:9a:75:60:
ab:2e:ef:99:0a:06:9b:c8:51:fa:e5:29:6e:62:b4:
24:75:0a:78:61:8f:e6:b3:d2:91:08:f8:9c:5f:b3:
48:bb:bc:49:1a:39:58:73:cf:d5:20:f5:5e:61:c5:
13:0a:c9:c6:80:a9:12:72:ea:f5:ef:7a:de:8b:98:
d2:b6:01:2e:2d:cf:66:58:a1:0c:a1:fb:e8:c1:0f:
53:e7:81:3d:fe:14:a4:b5:5c:a6:60:c9:93:46:44:
6e:6d:39:74:48:b7:0d:c4:d5:9f:74:4c:2d:27:a6:
33:54:0c:73:f5:57:b0:0a:ee:af:9e:ff:b9:18:16:
10:62:d9:78:c8:5b:71:46:42:fb:a3:08:85:d3:33:
f2:7d:2e:ec:8e:99:92:10:0c:05:df:34:c6:bd:b8:
ad:d9:55:5a:62:c3:b5:33:4a:c5:5d:ba:73:25:6d:
73:e9:4b:3b:a0:41:f5:0b:9f:cb:5b:c3:1f:8e:b6:
d2:e5:3b:ab:c2:24:6c:7f:3e:62:28:07:40:a0:8a:
f7:62:21:fa:6f:f4:ba:ba:14:a2:4f:64:a9:cf:cc:
dd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:38:D2:4D:0B:AD:83:C0:24:E5:FA:3C:C9:1D:BA:0A:29:45:9B:A1
X509v3 Authority Key Identifier:
keyid:B6:B7:26:F0:59:2B:50:4E:72:33:05:F6:7B:AB:51:47:D4:EA:69:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trcm8FkrUE5yMwX2e6tRR9TqaW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:55:82:c7:63:88:c8:2d:93:30:c1:d9:89:56:c7:9a:3e:f8:
b6:2c:a7:f2:90:0a:64:d1:cd:bd:8a:b5:03:82:2f:f3:94:91:
10:65:76:b6:ed:96:bc:46:21:96:16:29:8b:d7:ca:fb:9e:24:
fc:28:3e:6b:47:b7:ac:73:e6:e2:df:29:c7:76:bd:6f:c2:df:
9c:fa:cc:d6:ce:ca:22:07:0b:e0:c1:8c:cc:f1:c0:58:ad:17:
f6:4e:09:5b:40:e7:f6:e9:b5:09:3d:f8:18:9c:8c:de:2e:01:
80:9f:89:a3:9d:6f:2a:93:25:4e:46:d4:b5:b2:0c:b4:9c:23:
9e:81:d3:91:03:fb:80:c1:93:5e:87:30:28:1c:5f:25:7b:ac:
b1:89:55:9b:11:12:6b:32:b4:94:77:12:ef:b3:0c:18:93:56:
58:bd:ea:01:2d:43:24:b2:ca:6c:34:57:28:83:ab:10:3c:d8:
94:3c:9b:93:e1:d6:a6:e7:8b:f6:29:e8:92:ed:2d:f9:d4:57:
ec:63:35:b0:c4:66:52:60:7d:73:2a:68:b3:16:e7:29:42:d9:
08:f2:3c:5a:8d:14:f9:c0:3a:02:98:2d:16:a2:1d:36:4a:c1:
85:72:a3:ee:de:be:40:7a:38:f2:76:7b:e3:f4:94:39:9c:7d:
f6:80:ea:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:52:24 2026 by rpki-client