Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
File: TRMSiBUQNXRBfKenBBLaOrO4RRE.mft (raw, json)
Hash identifier: xb8AmFnRuRACWUXV3J/Pp78vLgNhxwemBCsi3piqXeg=
Subject key identifier: 47:17:B6:19:C3:4E:83:1D:E9:81:9D:9C:23:66:4F:89:C3:11:CC:55
Authority key identifier: 4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11
Certificate issuer: /CN=4d13128815103574417ca7a70412da3ab3b84511
Certificate serial: 019F1D8EBEB76C9EB4BC01727327CBE4A08E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
Manifest number: 198E
Signing time: Wed 01 Jul 2026 12:02:01 +0000
Manifest this update: Wed 01 Jul 2026 12:02:01 +0000
Manifest next update: Thu 02 Jul 2026 12:02:01 +0000
Files and hashes: 1: TRMSiBUQNXRBfKenBBLaOrO4RRE.crl (hash: G4IZJmZXokV3davbZm5UUXmqBD+f6HMGVzfWqSCDIW8=)
2: mGlCacge7YnUjqIQY4CvKFnqpx4.roa (hash: AVo0MRQRTy6CdeGacGKP+5uMUkB7HT3z+0JrAGp0xWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 Jul 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:8e:be:b7:6c:9e:b4:bc:01:72:73:27:cb:e4:a0:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d13128815103574417ca7a70412da3ab3b84511
Validity
Not Before: Jul 1 12:02:01 2026 GMT
Not After : Jul 2 12:02:01 2026 GMT
Subject: CN=4717b619c34e831de9819d9c23664f89c311cc55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:0e:3f:92:ae:6f:da:29:01:ea:36:35:36:9d:
64:e4:1d:e3:fd:b8:98:94:70:1d:5e:88:4b:0c:a3:
7e:52:71:cc:1e:9c:c8:5f:87:5a:75:47:e0:4b:9d:
ef:89:3b:3a:1e:64:a8:25:dc:fb:60:d3:3b:2e:51:
63:69:5c:03:32:1b:17:33:d3:c2:83:19:f8:9c:af:
ab:c2:ee:5d:c1:12:be:af:cc:6f:44:b0:72:f3:14:
b1:fa:1c:75:ff:7e:1d:d1:a7:8c:9c:d0:55:ef:2a:
ff:50:2b:b1:99:d5:8e:b6:f3:92:9f:04:0c:67:46:
4a:19:4e:96:97:59:25:a6:be:de:70:91:ba:fa:44:
3f:25:df:aa:59:15:aa:6b:fc:28:09:b9:9d:47:1c:
52:7b:62:20:ac:af:5d:b6:b0:13:90:63:0b:8f:cb:
52:ad:fc:2c:7f:02:8d:fd:20:7b:1d:9e:48:3f:8e:
73:10:94:95:65:76:9b:2f:22:84:49:71:df:8d:d3:
09:84:78:32:1a:4e:40:7f:f1:6a:7f:e3:04:33:70:
c7:fe:c1:7f:6e:85:f6:73:42:e9:73:40:ef:a6:63:
4e:0c:17:2a:4a:f9:d7:30:e5:ea:e5:f8:0a:9b:bf:
c4:5c:21:a0:e2:6a:1d:c3:f3:08:12:4a:1b:5e:7b:
d1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:17:B6:19:C3:4E:83:1D:E9:81:9D:9C:23:66:4F:89:C3:11:CC:55
X509v3 Authority Key Identifier:
keyid:4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ab:08:7d:c0:e9:a5:6b:6b:13:03:f3:15:14:dc:35:f3:e5:
d2:33:d2:6b:ff:64:ab:52:0b:4a:d4:9b:0d:6c:46:0a:41:1d:
b7:ac:3d:9d:33:5b:70:a9:a0:c5:de:3b:05:ad:ef:60:0f:bd:
61:3d:09:90:df:ec:21:ac:7b:e6:2e:7f:d1:0f:28:96:05:3d:
ea:b6:3a:82:38:b8:ef:82:f8:8c:63:86:25:24:ff:ec:12:7f:
7b:44:47:cd:34:a3:b9:a0:3c:f4:4b:57:38:ef:b7:67:b7:9c:
03:bc:ff:3a:09:06:77:67:bd:0b:f2:5b:20:16:41:4c:c0:1b:
36:97:69:59:be:33:50:5d:59:34:90:9c:4e:f1:45:b4:64:1d:
a1:7c:a2:81:f2:b7:c0:76:a1:3a:5a:cd:80:1a:09:1c:09:a1:
58:f7:42:cc:00:42:d6:e5:30:7f:b3:60:a9:e0:9d:f9:e6:60:
a7:7b:c7:70:c6:5d:fd:95:c1:e6:7a:28:95:4b:0b:ad:c3:e8:
77:6f:f9:ef:21:cd:00:aa:f8:83:19:de:e2:8c:51:1e:9a:a0:
d8:8a:9d:d7:80:b1:c4:a7:11:eb:5c:f4:01:7d:0c:ca:19:89:
51:80:56:e4:00:88:9b:13:7f:52:7d:db:02:d3:aa:bd:8d:64:
e7:0b:ce:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 14:28:53 2026 by rpki-client