Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/TRCb5Q1A4ys9UW_B63LqsyxeC84.mft
File: TRCb5Q1A4ys9UW_B63LqsyxeC84.mft (raw, json)
Hash identifier: EP8MkpdwC2a9NgzCm+dDXJ+QfcSRQKIVfnkEA3dzuIg=
Subject key identifier: B2:25:11:A5:68:93:78:E0:97:FF:1D:12:BE:28:EC:DF:6A:B2:B6:CA
Authority key identifier: 4D:10:9B:E5:0D:40:E3:2B:3D:51:6F:C1:EB:72:EA:B3:2C:5E:0B:CE
Certificate issuer: /CN=4d109be50d40e32b3d516fc1eb72eab32c5e0bce
Certificate serial: 019D37C02A9AE7FCF70E463810DEDA2A5677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRCb5Q1A4ys9UW_B63LqsyxeC84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/TRCb5Q1A4ys9UW_B63LqsyxeC84.mft
Manifest number: 0384
Signing time: Sun 29 Mar 2026 04:00:33 +0000
Manifest this update: Sun 29 Mar 2026 04:00:33 +0000
Manifest next update: Mon 30 Mar 2026 04:00:33 +0000
Files and hashes: 1: QFemVBga8R6MUy4la4qdXV606kc.roa (hash: 75fcTq+XSvxc/YMDH3A8ovZYGGLiO1iXpSLbHu45owU=)
2: TRCb5Q1A4ys9UW_B63LqsyxeC84.crl (hash: b8+u1HGRdKK1RTh85aIc6+eNyZmPuJvS+vHkiaPxpzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/TRCb5Q1A4ys9UW_B63LqsyxeC84.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/TRCb5Q1A4ys9UW_B63LqsyxeC84.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRCb5Q1A4ys9UW_B63LqsyxeC84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:2a:9a:e7:fc:f7:0e:46:38:10:de:da:2a:56:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d109be50d40e32b3d516fc1eb72eab32c5e0bce
Validity
Not Before: Mar 29 04:00:33 2026 GMT
Not After : Mar 30 04:00:33 2026 GMT
Subject: CN=b22511a5689378e097ff1d12be28ecdf6ab2b6ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:67:45:0e:35:f6:49:b6:cc:2c:4b:1b:00:f1:
7e:e6:87:6a:7d:01:de:bb:d1:a6:c9:20:55:e5:72:
4a:60:86:ec:b1:3b:97:a9:fc:91:67:7c:4c:16:5f:
de:fc:8f:9c:cd:9a:fc:fb:e4:fb:a6:6b:c7:16:18:
80:bf:35:af:ef:ef:bf:80:40:d0:23:b0:af:fb:b2:
ec:bd:45:27:18:6a:60:28:73:47:51:c1:cf:d4:12:
c5:68:3b:47:d1:46:14:21:3b:64:a2:8d:0d:22:c4:
85:25:ec:8b:5b:c6:5e:00:fa:b0:ee:23:93:bf:ca:
59:3d:7d:d8:79:d7:f9:33:d3:91:53:48:fe:b7:33:
27:c8:ad:05:6d:f2:36:5f:55:0a:76:ca:29:0b:ab:
01:b6:5c:7e:38:ca:0c:f7:be:a1:10:61:d6:8b:4b:
11:b5:72:b5:85:51:77:18:ce:b8:71:ce:6e:09:73:
9b:b1:79:26:2c:1e:af:d0:27:b9:ad:ca:6f:1d:d9:
79:5f:ac:ba:8c:71:b2:bf:18:46:a7:31:07:91:34:
cc:9d:d1:63:56:bb:90:dc:3f:81:05:00:b1:ee:88:
5c:4e:8d:ea:2f:02:38:93:d2:5e:6b:32:d6:4f:8f:
90:37:d0:99:10:c7:d8:d2:66:65:77:21:a2:c3:28:
57:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:25:11:A5:68:93:78:E0:97:FF:1D:12:BE:28:EC:DF:6A:B2:B6:CA
X509v3 Authority Key Identifier:
keyid:4D:10:9B:E5:0D:40:E3:2B:3D:51:6F:C1:EB:72:EA:B3:2C:5E:0B:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRCb5Q1A4ys9UW_B63LqsyxeC84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/TRCb5Q1A4ys9UW_B63LqsyxeC84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/TRCb5Q1A4ys9UW_B63LqsyxeC84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:07:9b:10:f6:9f:cf:71:aa:08:31:b7:70:b9:51:18:47:27:
14:65:6d:57:61:fe:3a:08:05:6a:86:6b:89:e2:a2:8a:3b:e8:
e9:93:f3:d7:e9:8c:8f:93:8a:62:5e:61:ab:36:a9:fe:c4:1c:
0d:2f:02:d9:0b:fe:08:e2:e2:ce:9b:a5:76:a8:55:67:1b:c1:
e3:50:47:c8:44:2e:07:3a:ff:72:94:af:c2:ca:58:78:ab:d5:
88:88:df:b7:c4:f1:fa:52:71:6b:85:d8:12:fe:e8:86:c8:85:
6f:e0:05:5b:f4:52:2d:1b:a2:24:16:9e:07:c5:70:c4:93:a8:
ad:8b:74:39:05:69:7f:3b:81:2e:74:75:5c:c8:dd:6e:21:f9:
59:b8:57:d6:ee:6c:24:ec:66:0c:fe:2a:f8:de:94:6e:1f:3b:
71:cf:c2:bb:6c:f2:6e:3f:6a:97:97:0e:5a:4f:43:4a:67:16:
bf:9c:80:5e:06:02:98:b7:3b:7d:5c:7b:0c:d0:ee:cb:76:4d:
50:ea:92:6c:9c:2a:99:ee:04:88:ab:7e:ab:4f:42:7d:dd:02:
d9:81:3f:e0:24:71:96:75:0f:7d:02:1f:b8:f6:2f:17:72:cf:
9d:53:30:ff:ab:a2:b5:8a:bd:1e:d5:eb:98:13:53:d0:b1:e1:
94:54:ae:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:25 2026 by rpki-client