Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
File: TRMSiBUQNXRBfKenBBLaOrO4RRE.mft (raw, json)
Hash identifier: VkdCWMWjRbTu1qyMIyfriuNnw8dhuJeqW4+aeLQZu/o=
Subject key identifier: 39:9B:13:93:C8:FF:A8:2D:7B:A4:03:9E:18:1F:78:3C:6B:6B:91:0F
Authority key identifier: 4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11
Certificate issuer: /CN=4d13128815103574417ca7a70412da3ab3b84511
Certificate serial: 01A0070340C8EB20FB403C9BC83686F95045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
Manifest number: 1A0A
Signing time: Sat 15 Aug 2026 20:00:48 +0000
Manifest this update: Sat 15 Aug 2026 20:00:48 +0000
Manifest next update: Sun 16 Aug 2026 20:00:48 +0000
Files and hashes: 1: 6eIRyeCu3DuhOHztVXWukRMlVQA.roa (hash: DP3c7R08RGBcAiJwXHjmhLQIdE9Va1ZG6ASQ9GdKigk=)
2: TRMSiBUQNXRBfKenBBLaOrO4RRE.crl (hash: MfR4sX6tsxsfDR5utNa9dMioiAVxY5SfVezBAWZLKmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:07:03:40:c8:eb:20:fb:40:3c:9b:c8:36:86:f9:50:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d13128815103574417ca7a70412da3ab3b84511
Validity
Not Before: Aug 15 20:00:48 2026 GMT
Not After : Aug 16 20:00:48 2026 GMT
Subject: CN=399b1393c8ffa82d7ba4039e181f783c6b6b910f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d0:4f:95:b9:4a:ca:9a:48:5d:23:01:43:3a:
14:3b:f2:6d:be:6d:dc:96:42:0b:a9:73:be:1f:38:
19:7d:3b:88:60:90:22:88:aa:91:6c:9d:9d:9a:c2:
a2:a2:9e:6d:e6:1e:0f:83:76:3e:14:0f:e0:c7:78:
2f:4f:9d:07:54:ea:53:ae:58:6e:ea:2c:1f:e2:c5:
0e:8b:99:62:64:9c:20:8d:74:2e:9d:5a:d4:86:06:
ed:35:00:7f:55:a1:02:fa:8a:2e:86:b6:b8:f1:6b:
fe:75:7a:22:d3:19:2a:2a:ed:6e:65:c9:7c:fc:c2:
76:c5:a4:f6:69:03:b9:52:37:25:a3:64:59:74:3f:
15:65:9c:75:32:a6:8a:91:17:67:13:e5:ad:ab:7b:
79:7e:8b:5e:e5:07:1b:8e:de:47:79:15:3e:e8:c9:
2c:3f:c8:89:6b:8b:88:ab:41:ee:38:46:24:41:9f:
66:e6:17:25:6b:d1:83:de:6d:59:03:ff:8b:30:b3:
ce:57:8d:e2:2b:28:87:8c:50:4a:65:90:70:98:31:
d5:9b:69:9d:07:c3:dd:20:45:56:e0:29:f2:b6:f5:
41:e3:88:28:6b:e1:50:e2:cf:10:2e:29:7c:8a:ac:
b5:2e:99:ec:f8:fa:51:78:d3:2c:6c:e8:aa:83:4a:
f7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9B:13:93:C8:FF:A8:2D:7B:A4:03:9E:18:1F:78:3C:6B:6B:91:0F
X509v3 Authority Key Identifier:
keyid:4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:de:71:2d:68:90:1e:32:ef:92:c9:4d:17:6a:0b:35:e1:20:
73:21:90:6e:80:dd:7c:f3:ba:41:ac:25:a2:28:33:ad:5b:40:
b3:18:e4:05:3d:01:ed:4c:47:1b:af:f3:02:4f:ec:10:c9:08:
2d:4a:bc:ae:de:19:c3:a8:f7:bd:01:8e:b0:4d:e5:df:12:5e:
63:d2:d1:1e:a4:d2:f9:33:e9:91:60:d0:0d:63:2b:58:9e:d3:
2d:cf:d3:52:4b:bc:82:f9:e5:9e:4a:75:38:a6:c2:f3:2b:fa:
09:58:61:c7:7d:6d:be:e5:80:55:85:74:2d:24:e8:7f:15:11:
0d:4e:dd:be:f9:7c:47:72:71:36:c5:ea:74:78:86:04:3f:ca:
01:7e:f5:86:d3:d6:0d:8d:4d:d0:7a:c4:cf:bf:27:a7:30:e8:
b2:40:19:a6:9c:63:50:f7:f1:ee:fe:46:fe:04:80:d9:7a:9d:
88:f5:29:14:5d:0d:53:8d:fa:37:79:81:54:9d:5c:25:1b:7a:
15:05:d3:a1:6d:6d:67:14:d0:30:28:f8:7f:00:4f:8a:db:76:
4c:92:90:25:51:db:a1:4b:7e:0e:47:42:77:53:9e:73:93:59:
48:60:6f:72:62:0a:34:7a:e0:5f:27:a7:9b:d2:cd:e1:3c:c4:
52:b5:89:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 02:50:45 2026 by rpki-client