Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
File: TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft (raw, json)
Hash identifier: 2DS1Wp7Oo6hUO7WieSgwn806bcxahM21RtlS/914Uoo=
Subject key identifier: 44:38:E4:B6:20:BF:00:E8:B9:3C:66:57:C4:08:27:87:20:E3:14:BE
Authority key identifier: 4D:15:27:D1:83:9B:F8:30:36:0D:71:59:01:34:35:4E:6D:90:46:97
Certificate issuer: /CN=4d1527d1839bf830360d71590134354e6d904697
Certificate serial: 019D3865FB940464A91EC2BFA56356CCE650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 07:01:40 +0000
Manifest this update: Sun 29 Mar 2026 07:01:40 +0000
Manifest next update: Mon 30 Mar 2026 07:01:40 +0000
Files and hashes: 1: 5IRwRfh8Fym_BtVi99L5BSoQylk.roa (hash: zVO1DYlBvdQtHAVcl2WpceQxT4SVa8kf2zP0TMDOH1A=)
2: TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl (hash: Z+zbRZ++KG9GCi/F0CdSumHppc1SnOHDC63POxl7sI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:fb:94:04:64:a9:1e:c2:bf:a5:63:56:cc:e6:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d1527d1839bf830360d71590134354e6d904697
Validity
Not Before: Mar 29 07:01:40 2026 GMT
Not After : Mar 30 07:01:40 2026 GMT
Subject: CN=4438e4b620bf00e8b93c6657c408278720e314be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:de:b4:e2:db:47:3d:36:7d:67:c9:82:82:6b:
4e:6c:66:42:6a:61:1d:de:b6:2d:30:c5:f4:46:38:
e6:50:7d:3e:44:59:e7:43:2c:3c:cd:09:5a:52:4c:
04:87:29:70:ef:68:3c:eb:c8:6d:67:30:d4:6f:57:
fe:c9:3b:58:44:cc:9d:6a:57:bf:c5:e8:5c:2c:51:
3a:11:91:06:43:39:5b:99:1b:f6:55:e0:b1:91:f4:
81:c4:4d:db:3f:cd:6a:28:ca:80:57:1a:dd:cc:2c:
3f:02:0d:cb:00:46:ae:2a:81:06:e6:fe:98:82:a7:
ee:e4:f6:76:4a:1a:d6:f8:13:ad:3b:58:35:cb:63:
2a:cf:77:09:e5:ff:48:f2:e2:df:d6:d7:f2:f2:7c:
23:3c:2c:b6:0b:26:79:27:de:fb:e6:6d:f5:d4:f5:
a9:4e:8e:57:ea:b1:65:89:eb:90:92:ab:7a:39:bc:
e1:fd:4e:c2:58:53:1e:19:63:9e:08:eb:98:40:80:
6a:76:d3:47:79:1b:4f:3a:af:a6:1c:79:ea:f2:9b:
84:ff:0f:d8:df:84:c2:ab:15:d1:e5:9d:9e:fd:00:
be:8a:b6:0e:ed:9e:a8:21:0a:47:8f:39:db:ec:c3:
68:37:e1:95:7d:9a:be:05:c6:1d:f7:4f:aa:82:a4:
00:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:38:E4:B6:20:BF:00:E8:B9:3C:66:57:C4:08:27:87:20:E3:14:BE
X509v3 Authority Key Identifier:
keyid:4D:15:27:D1:83:9B:F8:30:36:0D:71:59:01:34:35:4E:6D:90:46:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:0e:b2:e4:3c:5a:5b:53:6d:74:61:48:28:f7:34:dd:00:e0:
10:37:48:b3:d4:64:15:c4:7a:f0:9e:c8:98:77:2f:bb:5c:60:
56:c2:7e:dc:f7:32:3f:82:e4:25:78:22:9b:cc:10:0c:42:a2:
00:a1:c4:29:17:3d:82:92:84:c7:83:23:fa:eb:35:62:db:02:
09:92:2c:5c:37:1e:d9:cf:a3:57:ac:e4:5e:43:f0:a0:7b:34:
37:5f:7c:71:54:a3:57:98:70:c5:83:fe:62:94:d4:f0:89:91:
45:18:a0:67:ba:30:cc:c3:cd:dd:11:d2:24:73:d1:05:e9:97:
52:a3:b9:ca:4a:2a:9a:fd:32:cf:1e:2c:af:82:8c:31:c0:49:
e2:43:a1:92:dc:3e:46:36:cf:ab:dc:30:d2:9d:6e:af:36:7d:
52:25:85:b1:4a:4b:7a:1e:b9:98:97:fc:64:9b:f3:f9:cc:3b:
df:cb:3f:2c:c8:51:40:80:51:9e:f6:8b:7f:41:6b:ca:05:6c:
89:f3:a8:68:7b:58:3b:c9:92:a4:82:9c:91:5c:4c:d3:1d:a8:
9c:b3:6c:49:f3:1f:57:0d:d1:1d:ed:df:6e:d1:83:ca:0c:97:
6d:48:17:dc:4a:44:5d:ba:2f:c2:3c:60:fa:6d:0e:16:b6:3f:
90:d0:be:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:46:41 2026 by rpki-client