Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
File: TRMSiBUQNXRBfKenBBLaOrO4RRE.mft (raw, json)
Hash identifier: Ha0257VlPolmakWh+04MNUVtUqFkV4NHqqddgJR1Flk=
Subject key identifier: 43:A9:8F:20:3F:A8:12:07:25:9C:4A:67:0C:F1:7A:E4:7C:F1:8F:04
Authority key identifier: 4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11
Certificate issuer: /CN=4d13128815103574417ca7a70412da3ab3b84511
Certificate serial: 01A11B2C2EB62036C7CBEA40E6F0ED4E87C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
Manifest number: 1A99
Signing time: Thu 08 Oct 2026 11:00:42 +0000
Manifest this update: Thu 08 Oct 2026 11:00:42 +0000
Manifest next update: Fri 09 Oct 2026 11:00:42 +0000
Files and hashes: 1: 6eIRyeCu3DuhOHztVXWukRMlVQA.roa (hash: DP3c7R08RGBcAiJwXHjmhLQIdE9Va1ZG6ASQ9GdKigk=)
2: TRMSiBUQNXRBfKenBBLaOrO4RRE.crl (hash: MRa5vBktKLWTMdnbEskL/uDo36q/awQDE8LgPG1hY9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:2c:2e:b6:20:36:c7:cb:ea:40:e6:f0:ed:4e:87:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d13128815103574417ca7a70412da3ab3b84511
Validity
Not Before: Oct 8 11:00:42 2026 GMT
Not After : Oct 9 11:00:42 2026 GMT
Subject: CN=43a98f203fa81207259c4a670cf17ae47cf18f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fd:e5:62:2d:8b:3e:4a:45:c1:19:8b:56:cf:
5a:cc:17:cf:1d:6e:19:ae:f1:f0:9d:2b:27:bf:58:
30:d6:e9:d3:40:35:7c:03:71:a1:a4:51:33:1e:93:
0f:7a:5a:27:2e:67:ef:7e:8e:2e:64:2c:98:0c:46:
34:f4:b1:a8:f2:fe:cd:fb:12:18:87:29:9f:41:77:
39:20:e6:33:71:98:4d:ef:9b:59:ba:95:eb:09:aa:
d8:62:51:72:b8:03:42:b3:5d:1b:aa:5b:e6:a0:73:
ab:9c:b6:f2:69:69:21:ed:f5:32:88:08:2e:fe:95:
48:89:d4:fc:c0:89:5f:f4:8d:09:4b:d6:79:74:58:
25:2f:74:cc:5e:4d:b9:68:9b:47:43:92:9c:82:59:
89:30:c4:ab:bb:da:d0:3c:3c:c7:d7:92:61:ad:a4:
08:88:71:c6:52:ed:d6:0b:df:bc:b0:52:92:69:7e:
fc:7b:ae:94:fb:60:ec:7e:fd:04:73:d8:2f:a0:3c:
b0:96:89:c9:75:d0:3b:92:81:e9:ed:52:64:cf:28:
2f:93:1a:d8:ca:7b:7d:3a:4c:7e:3c:12:ce:0c:29:
0f:d9:df:14:f4:c6:5a:57:55:be:a0:92:6a:54:3e:
56:5a:de:e7:2b:b4:9d:c2:92:6b:3b:9e:94:90:dc:
26:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A9:8F:20:3F:A8:12:07:25:9C:4A:67:0C:F1:7A:E4:7C:F1:8F:04
X509v3 Authority Key Identifier:
keyid:4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:85:c2:96:c9:62:bd:ad:62:ec:c0:ab:e1:d5:b4:08:7e:30:
69:3f:d2:79:97:a9:02:ee:66:9d:7d:ee:2a:bb:63:a2:03:25:
60:2e:88:5c:27:5f:31:b0:23:3c:cb:42:66:b1:df:b3:86:f4:
f9:65:ca:1a:10:6c:29:d8:79:e8:0f:51:5a:58:64:3a:3d:95:
6d:22:b7:1e:e5:0b:dd:69:b9:fc:28:e6:ac:19:bb:56:e5:59:
8a:84:6a:06:13:e0:96:39:9e:00:e0:b0:89:b8:f8:2d:36:2f:
11:49:ce:d5:43:51:78:56:d1:a8:32:21:c4:ff:07:53:8a:5a:
12:d8:5f:70:34:a6:0c:01:b8:8a:f1:5a:b4:07:72:78:36:bd:
40:b9:27:83:dd:95:61:8f:11:77:ca:44:c2:f8:1a:9e:31:c0:
ce:6a:a9:b5:9e:74:b2:1c:39:d8:48:b4:6a:1f:43:61:76:01:
a7:c5:ba:75:5a:a2:7f:ea:1b:bd:96:43:17:41:c5:50:d4:f6:
e3:0d:0e:28:1c:36:30:d4:f1:c0:92:57:df:e7:3d:da:1f:da:
5f:10:b7:ec:8f:60:a0:7a:c9:a9:e4:d1:eb:0e:9c:a3:07:c9:
67:0d:80:6c:94:a8:88:6d:d2:ca:26:b2:f6:ce:ad:1f:fd:f3:
8e:b6:50:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 19:33:57 2026 by rpki-client