Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
File: TRMSiBUQNXRBfKenBBLaOrO4RRE.mft (raw, json)
Hash identifier: kvlnh90EvHSzjvQK02WHiX8hfDKYPN34ZxQ14Jr/M8s=
Subject key identifier: 6F:6A:CB:C2:A5:11:80:B1:62:E4:9D:51:67:DF:36:A3:E3:37:66:30
Authority key identifier: 4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11
Certificate issuer: /CN=4d13128815103574417ca7a70412da3ab3b84511
Certificate serial: 019D38D2A04A6FC89BE49A2FA9D23CC2DD7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 09:00:20 +0000
Manifest this update: Sun 29 Mar 2026 09:00:20 +0000
Manifest next update: Mon 30 Mar 2026 09:00:20 +0000
Files and hashes: 1: TRMSiBUQNXRBfKenBBLaOrO4RRE.crl (hash: EpTlRCWh5uGa5AguLxQZpp4nXdgAp5T0aaiJtQ2yD5g=)
2: mGlCacge7YnUjqIQY4CvKFnqpx4.roa (hash: AVo0MRQRTy6CdeGacGKP+5uMUkB7HT3z+0JrAGp0xWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:a0:4a:6f:c8:9b:e4:9a:2f:a9:d2:3c:c2:dd:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d13128815103574417ca7a70412da3ab3b84511
Validity
Not Before: Mar 29 09:00:20 2026 GMT
Not After : Mar 30 09:00:20 2026 GMT
Subject: CN=6f6acbc2a51180b162e49d5167df36a3e3376630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7b:69:27:1f:42:87:df:34:f4:c2:59:2a:38:
bd:2b:d1:d2:87:aa:63:f7:c1:a9:a4:ad:64:3b:58:
64:2a:32:ab:0c:88:cf:42:80:94:6e:c2:54:ea:d8:
78:69:2a:5b:95:39:6e:c2:57:6a:b9:cd:12:5e:6d:
0d:5e:75:ec:51:16:0f:9c:c3:f1:ef:5f:16:ed:41:
1d:d0:33:7f:d3:3e:50:2d:4a:c7:eb:aa:ff:ef:df:
8e:fe:d6:98:d6:43:cc:0c:99:3d:9c:19:31:af:dc:
80:84:63:c6:e5:24:32:1c:d4:ff:30:05:44:01:8f:
ea:ca:88:ee:16:97:d5:60:6c:c7:59:70:15:4a:d6:
83:34:64:44:b7:c3:5f:d7:8f:e6:b3:0a:f9:58:06:
f0:29:b1:46:1b:d3:3e:5a:2b:25:74:05:f8:66:e0:
70:e3:a4:cb:24:b8:73:5f:15:a8:29:90:37:01:39:
43:49:11:6c:da:d9:92:b1:f4:ef:55:a8:50:b2:2c:
0d:27:c6:68:a3:8c:4a:83:73:08:4b:59:8c:0b:ac:
ca:38:ea:91:e0:49:1a:30:f6:ca:a7:c4:64:0e:ba:
5f:c9:57:51:9e:6c:ba:48:49:b5:22:31:73:4f:79:
23:87:31:e4:06:d2:8a:4d:91:e8:1a:a9:aa:e1:d7:
fa:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6A:CB:C2:A5:11:80:B1:62:E4:9D:51:67:DF:36:A3:E3:37:66:30
X509v3 Authority Key Identifier:
keyid:4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:40:d9:c9:70:1b:a5:37:78:11:82:55:c6:62:f9:bc:2f:47:
4d:77:11:a2:dc:b5:c3:62:f3:b8:74:c2:0e:72:51:1a:ef:64:
10:62:2e:32:df:b7:d7:dd:96:3d:61:29:42:23:10:f4:c3:d6:
f7:4e:20:e3:90:e0:36:fb:41:23:a1:3c:75:dc:6f:91:a8:f0:
d3:24:d7:52:0a:ef:03:a1:41:74:fe:79:7d:f1:20:7a:3e:74:
35:f6:d7:e0:3e:45:95:3c:45:25:06:e1:57:1c:0b:f0:0d:0f:
6f:64:49:17:1b:d0:f9:c3:67:cd:9b:2b:f5:80:b0:8a:36:42:
a7:42:41:ed:31:77:85:2d:db:94:d7:8e:fc:16:a1:47:2d:7b:
49:bb:0f:5c:b2:bb:45:dc:d6:2d:74:66:ae:50:c4:89:e5:8c:
1c:3c:b7:75:9f:a1:43:21:69:cc:94:95:00:98:a4:30:7a:72:
f2:aa:c5:17:af:3a:bb:86:5f:6b:8c:bb:f1:ea:dc:bc:53:86:
d3:ff:29:fb:48:8f:30:a5:c5:c0:36:08:57:0a:78:9d:ee:67:
fc:9b:a3:dc:93:ef:2e:dd:4d:2b:35:ce:83:9b:16:aa:15:be:
cc:c3:48:0c:97:eb:a2:d1:9f:ff:a0:f0:10:45:8e:55:b5:14:
53:99:fc:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:05 2026 by rpki-client