Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
File: _trmiRA5jJ2O51bhaCAd2eiYm1I.mft (raw, json)
Hash identifier: kQznWcQveW4z4X2XZ9ISy1VASVJZOkG3fagC00RHs6E=
Subject key identifier: B2:FA:41:D3:4C:E4:39:51:58:EF:94:06:1C:75:B2:C7:09:09:EA:D4
Authority key identifier: FE:DA:E6:89:10:39:8C:9D:8E:E7:56:E1:68:20:1D:D9:E8:98:9B:52
Certificate issuer: /CN=fedae68910398c9d8ee756e168201dd9e8989b52
Certificate serial: 019D39780721A519A39AE4F72D1E59ADA25F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
Manifest number: 0506
Signing time: Sun 29 Mar 2026 12:01:00 +0000
Manifest this update: Sun 29 Mar 2026 12:01:00 +0000
Manifest next update: Mon 30 Mar 2026 12:01:00 +0000
Files and hashes: 1: 5sXzjnKS3JRs5_PkjVDa27eoC-M.roa (hash: 2V+6XQqLf/lpOVZXMep8bSqQydoN+IRrPy2YYET6j4Q=)
2: _trmiRA5jJ2O51bhaCAd2eiYm1I.crl (hash: gmslqpgCFzgSAkKS3pOqJcyaQvsf70l16Vc/z4ainwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:07:21:a5:19:a3:9a:e4:f7:2d:1e:59:ad:a2:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fedae68910398c9d8ee756e168201dd9e8989b52
Validity
Not Before: Mar 29 12:01:00 2026 GMT
Not After : Mar 30 12:01:00 2026 GMT
Subject: CN=b2fa41d34ce4395158ef94061c75b2c70909ead4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6b:27:17:bf:a8:f6:ff:72:b9:8b:9d:c9:dd:
05:02:48:3c:8e:fd:c2:c0:e0:ee:92:2a:15:e8:07:
3d:63:16:41:18:00:be:fb:62:fb:df:55:ee:89:88:
d3:53:0b:22:05:01:28:99:97:6c:7a:43:43:c8:4c:
04:c8:00:5e:5c:17:64:a9:df:95:da:24:2b:e3:09:
4b:a9:94:01:76:e1:21:60:13:d0:3f:66:6e:2c:be:
35:da:aa:64:bb:69:9a:a9:3c:f2:fd:33:56:d4:90:
db:9d:6b:db:5a:93:7d:4b:21:c8:96:92:81:73:64:
bd:3b:a5:05:a1:e7:a7:7a:d8:e6:40:d4:97:bc:29:
f3:1b:b6:89:f6:05:ad:28:ab:ce:40:1d:bf:f5:1a:
99:3b:cd:3d:bd:09:a6:48:a7:e3:53:62:1d:f3:0b:
c3:8e:ec:05:b4:a4:da:d8:f2:8f:37:a2:f7:81:a2:
98:12:6e:b9:8e:5b:43:44:11:77:eb:13:d3:04:6b:
94:a3:82:d2:4a:72:7d:a7:e9:fa:d9:9c:55:4d:de:
4e:22:c6:33:04:0b:2a:08:ff:2d:05:e4:a8:30:a8:
3d:98:43:94:61:87:7f:45:91:c0:3b:d0:e8:aa:4f:
96:54:22:d5:14:c6:4f:18:9f:c7:60:cb:e0:fd:83:
85:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FA:41:D3:4C:E4:39:51:58:EF:94:06:1C:75:B2:C7:09:09:EA:D4
X509v3 Authority Key Identifier:
keyid:FE:DA:E6:89:10:39:8C:9D:8E:E7:56:E1:68:20:1D:D9:E8:98:9B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:38:58:4f:88:65:a3:9d:68:c6:05:a8:4d:42:36:51:30:37:
78:32:2d:56:8c:dd:b1:b3:bf:11:00:1d:a0:c5:1f:00:f9:f8:
ee:e4:b3:53:54:0d:df:7f:03:2f:10:18:0b:7e:e1:46:9d:59:
d2:f6:88:1c:50:59:ac:c7:2d:11:c4:49:72:98:01:c2:c3:8a:
b1:3d:66:21:e0:b9:07:ed:14:f1:95:a1:e8:65:ba:1e:af:49:
6d:a8:7b:4a:03:0e:35:74:b5:a9:50:31:73:6a:ae:d1:52:e7:
72:b4:8f:f5:3b:f1:bd:7d:4c:ac:04:d0:cd:bc:54:fd:51:22:
03:a2:d6:da:d0:72:24:c7:8b:f8:94:01:26:8a:e7:76:77:48:
03:4b:0e:43:24:56:8f:fa:0f:56:e0:2d:25:9d:ec:16:df:67:
11:e1:8e:5d:38:d1:95:44:1a:e5:e4:f9:ce:c9:4f:45:1f:c9:
ad:4b:1b:bd:20:98:63:92:c5:eb:17:eb:3c:c8:30:12:bb:eb:
64:73:65:83:bf:9f:a0:30:96:ab:16:03:8c:32:1a:93:66:24:
e7:89:40:6a:92:c0:48:9e:bf:69:62:a8:a9:58:a7:44:b6:b9:
6c:d7:5d:17:9b:57:e2:7e:6a:df:b8:0f:8d:cc:d6:93:19:35:
5a:ad:da:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05eAchpRmjmuT3LR5ZraJfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlZGFlNjg5MTAzOThjOWQ4ZWU3NTZlMTY4MjAxZGQ5ZTg5
ODliNTIwHhcNMjYwMzI5MTIwMTAwWhcNMjYwMzMwMTIwMTAwWjAzMTEwLwYDVQQD
EyhiMmZhNDFkMzRjZTQzOTUxNThlZjk0MDYxYzc1YjJjNzA5MDllYWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2snF7+o9v9yuYudyd0FAkg8jv3C
wODukioV6Ac9YxZBGAC++2L731XuiYjTUwsiBQEomZdsekNDyEwEyABeXBdkqd+V
2iQr4wlLqZQBduEhYBPQP2ZuLL412qpku2maqTzy/TNW1JDbnWvbWpN9SyHIlpKB
c2S9O6UFoeenetjmQNSXvCnzG7aJ9gWtKKvOQB2/9RqZO809vQmmSKfjU2Id8wvD
juwFtKTa2PKPN6L3gaKYEm65jltDRBF36xPTBGuUo4LSSnJ9p+n62ZxVTd5OIsYz
BAsqCP8tBeSoMKg9mEOUYYd/RZHAO9Doqk+WVCLVFMZPGJ/HYMvg/YOFWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLL6QdNM5DlRWO+UBhx1sscJCerUMB8GA1UdIwQY
MBaAFP7a5okQOYydjudW4WggHdnomJtSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3RybWlSQTVqSjJPNTFiaGFDQWQyZWlZbTFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81ZjUzYTMtMjI2MC00MWIwLWEzNDEt
NTAwNDMyNTAxNzQzLzEvX3RybWlSQTVqSjJPNTFiaGFDQWQyZWlZbTFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS81ZjUzYTMtMjI2MC00MWIwLWEzNDEtNTAwNDMyNTAxNzQz
LzEvX3RybWlSQTVqSjJPNTFiaGFDQWQyZWlZbTFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAijhYT4hl
o51oxgWoTUI2UTA3eDItVozdsbO/EQAdoMUfAPn47uSzU1QN338DLxAYC37hRp1Z
0vaIHFBZrMctEcRJcpgBwsOKsT1mIeC5B+0U8ZWh6GW6Hq9Jbah7SgMONXS1qVAx
c2qu0VLncrSP9TvxvX1MrATQzbxU/VEiA6LW2tByJMeL+JQBJorndndIA0sOQyRW
j/oPVuAtJZ3sFt9nEeGOXTjRlUQa5eT5zslPRR/JrUsbvSCYY5LF6xfrPMgwErvr
ZHNlg7+foDCWqxYDjDIak2Yk54lAapLASJ6/aWKoqVinRLa5bNddF5tX4n5q37gP
jczWkxk1Wq3a9Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:55 2026 by rpki-client