Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
File: trJJosVixe29t1BY4mvXcBI-la4.mft (raw, json)
Hash identifier: J2bBiaSlGfe+nBeZeS8CN2SNesFPg3KBIIkoDORMgb4=
Subject key identifier: 7A:E2:87:96:BF:3F:AD:A2:A0:FE:68:D5:34:F8:F5:A0:B7:EA:76:08
Authority key identifier: B6:B2:49:A2:C5:62:C5:ED:BD:B7:50:58:E2:6B:D7:70:12:3E:95:AE
Certificate issuer: /CN=b6b249a2c562c5edbdb75058e26bd770123e95ae
Certificate serial: 019CC907DD57FBF91FBC377C9C43503CE805
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
Manifest number: 14E8
Signing time: Sat 07 Mar 2026 16:01:01 +0000
Manifest this update: Sat 07 Mar 2026 16:01:01 +0000
Manifest next update: Sun 08 Mar 2026 16:01:01 +0000
Files and hashes: 1: 6RygQ5X9m4wR38_i9WAiO4if2HM.roa (hash: kUWQpysYJq9PoXLRmw04AY/W59nDN80L6l7bNKqqxYU=)
2: trJJosVixe29t1BY4mvXcBI-la4.crl (hash: vIwaoR/G2C7hXwFV1Iv1WhYtt+bP2KjaKLnCyG463jQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c9:07:dd:57:fb:f9:1f:bc:37:7c:9c:43:50:3c:e8:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6b249a2c562c5edbdb75058e26bd770123e95ae
Validity
Not Before: Mar 7 16:01:01 2026 GMT
Not After : Mar 8 16:01:01 2026 GMT
Subject: CN=7ae28796bf3fada2a0fe68d534f8f5a0b7ea7608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:59:fe:3f:0d:89:fe:c5:aa:e2:7c:9c:a4:5a:
9b:c1:7f:02:9e:b5:b1:21:87:9a:7f:0f:46:24:fd:
c6:ac:7e:38:ac:2a:79:16:9e:86:2c:5c:8c:ae:d3:
2c:d9:f9:53:b8:0a:92:aa:8e:aa:d2:5e:e6:9f:83:
d1:95:43:4c:7f:ee:42:0f:4c:25:b5:c8:44:35:75:
47:42:cb:53:d9:55:38:d2:e5:50:9a:33:65:86:0d:
d9:67:6f:1c:8f:2b:49:d9:42:99:7e:dc:62:20:0f:
b2:42:72:15:b4:a0:a6:66:d2:46:fd:39:00:0b:9f:
43:f9:21:65:9c:38:70:e4:a4:14:ad:15:a9:20:16:
20:55:a8:de:ce:78:54:c2:9e:29:de:0e:0c:24:f5:
95:34:f2:c5:fe:ca:3e:9e:ef:89:4c:09:f3:fe:40:
a6:87:d8:b3:4a:86:41:b6:11:8e:df:f4:68:29:85:
31:9a:cd:43:83:e9:2d:05:99:c2:bf:42:63:f3:a7:
72:f2:65:b8:4d:ac:fb:a9:3d:65:9c:0e:2e:be:27:
92:a5:0e:c3:e1:ab:27:d0:90:5a:17:8f:e3:f5:f5:
55:8e:48:0e:5a:75:56:f8:90:d8:94:7a:f2:d8:24:
fa:d5:09:8d:1a:7c:4b:44:8c:1e:78:c5:c1:3c:e7:
ba:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E2:87:96:BF:3F:AD:A2:A0:FE:68:D5:34:F8:F5:A0:B7:EA:76:08
X509v3 Authority Key Identifier:
keyid:B6:B2:49:A2:C5:62:C5:ED:BD:B7:50:58:E2:6B:D7:70:12:3E:95:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:06:c4:78:a2:92:61:ca:94:37:1b:74:46:15:b3:d6:bf:69:
0e:d9:16:36:cf:45:42:c0:93:9a:5e:6c:2d:9f:0e:06:01:96:
d8:c5:62:b7:e1:5a:55:53:6c:58:6c:18:15:42:b8:e7:e6:51:
c0:f5:be:54:27:a7:69:bf:92:83:15:d5:c0:33:92:b2:66:99:
07:34:e1:55:a4:59:08:79:96:23:7d:0d:9e:71:bd:1e:84:82:
6b:e0:2a:df:6b:14:14:f2:e9:5d:ff:b2:50:32:21:67:00:9f:
55:07:c7:e3:26:aa:13:8b:51:16:38:db:24:69:38:2e:e4:ed:
65:65:ca:ec:9a:1e:da:4c:91:cd:d4:6c:02:7b:48:0a:3f:5e:
bc:a8:3c:8a:b3:14:67:6b:33:10:a2:0f:e0:f3:44:68:97:7c:
9b:ef:5c:d6:64:0d:81:8b:da:e2:1b:19:87:77:43:b6:98:78:
7f:5b:11:fc:4d:e0:0d:50:b3:eb:50:98:1f:57:8b:62:d4:bb:
4c:e7:50:b1:ab:ea:d4:d2:0b:c1:8e:62:ec:43:cc:87:c1:77:
36:df:89:24:44:07:20:61:a0:71:af:8d:ef:74:79:a4:8b:a0:
49:ca:f5:7d:86:80:a0:67:e5:3b:c1:72:4b:5e:44:f6:e6:60:
45:f8:cf:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzJB91X+/kfvDd8nENQPOgFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2YjI0OWEyYzU2MmM1ZWRiZGI3NTA1OGUyNmJkNzcwMTIz
ZTk1YWUwHhcNMjYwMzA3MTYwMTAxWhcNMjYwMzA4MTYwMTAxWjAzMTEwLwYDVQQD
Eyg3YWUyODc5NmJmM2ZhZGEyYTBmZTY4ZDUzNGY4ZjVhMGI3ZWE3NjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1n+Pw2J/sWq4nycpFqbwX8CnrWx
IYeafw9GJP3GrH44rCp5Fp6GLFyMrtMs2flTuAqSqo6q0l7mn4PRlUNMf+5CD0wl
tchENXVHQstT2VU40uVQmjNlhg3ZZ28cjytJ2UKZftxiIA+yQnIVtKCmZtJG/TkA
C59D+SFlnDhw5KQUrRWpIBYgVajeznhUwp4p3g4MJPWVNPLF/so+nu+JTAnz/kCm
h9izSoZBthGO3/RoKYUxms1Dg+ktBZnCv0Jj86dy8mW4Taz7qT1lnA4uvieSpQ7D
4asn0JBaF4/j9fVVjkgOWnVW+JDYlHry2CT61QmNGnxLRIweeMXBPOe6RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHrih5a/P62ioP5o1TT49aC36nYIMB8GA1UdIwQY
MBaAFLaySaLFYsXtvbdQWOJr13ASPpWuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHJKSm9zVml4ZTI5dDFCWTRtdlhjQkktbGE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80NTViMjYtNmFhMS00MzVmLWJkNDUt
OWNlMzFjMjczMTA4LzEvdHJKSm9zVml4ZTI5dDFCWTRtdlhjQkktbGE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC80NTViMjYtNmFhMS00MzVmLWJkNDUtOWNlMzFjMjczMTA4
LzEvdHJKSm9zVml4ZTI5dDFCWTRtdlhjQkktbGE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlwbEeKKS
YcqUNxt0RhWz1r9pDtkWNs9FQsCTml5sLZ8OBgGW2MVit+FaVVNsWGwYFUK45+ZR
wPW+VCenab+SgxXVwDOSsmaZBzThVaRZCHmWI30NnnG9HoSCa+Aq32sUFPLpXf+y
UDIhZwCfVQfH4yaqE4tRFjjbJGk4LuTtZWXK7Joe2kyRzdRsAntICj9evKg8irMU
Z2szEKIP4PNEaJd8m+9c1mQNgYva4hsZh3dDtph4f1sR/E3gDVCz61CYH1eLYtS7
TOdQsavq1NILwY5i7EPMh8F3Nt+JJEQHIGGgca+N73R5pIugScr1fYaAoGflO8Fy
S15E9uZgRfjPxg==
-----END CERTIFICATE-----
Generated at Sat Mar 7 21:04:02 2026 by rpki-client