Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
File: trJJosVixe29t1BY4mvXcBI-la4.mft (raw, json)
Hash identifier: s68AmV+VK7iJ/CV/N/twPXpWQhjzQt4n5vkWfWxd3E0=
Subject key identifier: 04:45:09:A5:7E:CC:79:24:7B:0C:55:73:2C:EF:01:D1:AC:9D:43:2F
Authority key identifier: B6:B2:49:A2:C5:62:C5:ED:BD:B7:50:58:E2:6B:D7:70:12:3E:95:AE
Certificate issuer: /CN=b6b249a2c562c5edbdb75058e26bd770123e95ae
Certificate serial: 019DB2B41C63C0D6B74A9E634C263C2BEAE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
Manifest number: 1561
Signing time: Wed 22 Apr 2026 01:00:41 +0000
Manifest this update: Wed 22 Apr 2026 01:00:41 +0000
Manifest next update: Thu 23 Apr 2026 01:00:41 +0000
Files and hashes: 1: 6RygQ5X9m4wR38_i9WAiO4if2HM.roa (hash: kUWQpysYJq9PoXLRmw04AY/W59nDN80L6l7bNKqqxYU=)
2: trJJosVixe29t1BY4mvXcBI-la4.crl (hash: IsVzqCsNXH93rRindW5E1E++fHw2Yss4f8/2loZ1C+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:b4:1c:63:c0:d6:b7:4a:9e:63:4c:26:3c:2b:ea:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6b249a2c562c5edbdb75058e26bd770123e95ae
Validity
Not Before: Apr 22 01:00:41 2026 GMT
Not After : Apr 23 01:00:41 2026 GMT
Subject: CN=044509a57ecc79247b0c55732cef01d1ac9d432f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:41:1a:5b:24:68:10:1a:1a:24:cd:76:03:73:
f4:cf:c7:51:8c:9f:cb:28:4d:06:84:65:01:49:17:
bd:c3:a1:46:37:29:6b:92:6b:83:6a:81:c0:25:37:
41:87:8b:83:09:a5:f8:f5:9d:e9:b1:b6:77:13:41:
90:f9:09:4f:cd:bf:21:73:cd:f7:eb:6c:30:55:22:
aa:2e:ed:9c:26:0c:6a:8a:98:5c:94:f2:c9:9b:2a:
e7:c0:a6:e8:08:2e:da:2d:18:76:93:92:34:e0:3b:
71:70:84:e7:42:ea:28:05:37:a8:5a:a4:04:f2:bc:
f9:48:4c:f2:9f:42:c9:6e:f4:7a:c4:75:16:6a:c5:
00:f2:1f:60:2b:c6:e9:8b:71:61:18:99:2a:ad:9a:
1b:e9:29:d5:88:9e:f8:ec:a6:f3:57:99:b8:ca:95:
6a:07:33:34:66:98:e9:41:2e:74:1d:5a:71:26:2d:
c1:a7:5f:9c:e1:de:33:cb:7f:83:e5:c6:e5:04:73:
5e:6a:fd:5c:ea:5a:9b:06:07:8f:3d:2f:f0:f5:e9:
8a:64:0a:23:96:36:bb:2f:f3:2a:b1:02:c0:33:89:
5b:81:9c:c7:00:db:df:03:d5:62:3c:29:ed:23:61:
0d:16:53:3d:e5:53:e9:37:a3:60:73:7b:23:68:11:
e4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:45:09:A5:7E:CC:79:24:7B:0C:55:73:2C:EF:01:D1:AC:9D:43:2F
X509v3 Authority Key Identifier:
keyid:B6:B2:49:A2:C5:62:C5:ED:BD:B7:50:58:E2:6B:D7:70:12:3E:95:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:42:ce:47:40:b1:9e:b3:45:4c:07:38:5c:a5:c6:91:4f:8c:
8a:6e:33:25:00:29:f3:b8:07:6d:6c:7a:54:65:98:b2:f1:c9:
21:de:3a:f7:ab:3e:c0:38:e9:e1:fc:da:8a:27:2b:ae:39:cb:
96:bf:b9:f9:c9:08:34:97:df:0e:d2:21:5a:cb:e0:07:9c:7e:
69:ca:fb:b7:e7:a7:3e:93:ba:75:9e:9e:7d:46:97:3d:85:8e:
d3:4e:65:8b:66:42:2f:19:13:42:29:67:4f:00:1b:89:25:21:
d6:0c:9a:84:fb:23:86:77:a7:51:73:13:50:10:ed:44:b2:b8:
71:a7:23:ab:ee:7f:c8:26:51:77:26:3f:39:fb:28:1f:ef:3b:
67:50:a9:62:be:aa:72:53:3c:a0:1e:c8:b3:54:00:80:23:0c:
03:94:4b:98:47:35:08:5f:e6:b6:b2:b7:40:0f:be:48:9e:de:
d3:47:d7:66:8b:c4:04:cb:20:7b:99:43:62:48:ef:1b:f8:81:
95:29:f4:94:bf:de:1f:4f:7a:56:1a:30:f8:08:d9:71:48:7b:
a2:7d:95:98:c5:bb:8f:4d:80:83:2e:0a:2d:c0:a9:d1:76:ac:
f7:f8:8e:da:7d:7b:28:6e:96:35:70:ef:4e:75:15:c3:d2:3f:
d9:e8:b1:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ytBxjwNa3Sp5jTCY8K+rgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2YjI0OWEyYzU2MmM1ZWRiZGI3NTA1OGUyNmJkNzcwMTIz
ZTk1YWUwHhcNMjYwNDIyMDEwMDQxWhcNMjYwNDIzMDEwMDQxWjAzMTEwLwYDVQQD
EygwNDQ1MDlhNTdlY2M3OTI0N2IwYzU1NzMyY2VmMDFkMWFjOWQ0MzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEEaWyRoEBoaJM12A3P0z8dRjJ/L
KE0GhGUBSRe9w6FGNylrkmuDaoHAJTdBh4uDCaX49Z3psbZ3E0GQ+QlPzb8hc833
62wwVSKqLu2cJgxqiphclPLJmyrnwKboCC7aLRh2k5I04DtxcITnQuooBTeoWqQE
8rz5SEzyn0LJbvR6xHUWasUA8h9gK8bpi3FhGJkqrZob6SnViJ747KbzV5m4ypVq
BzM0ZpjpQS50HVpxJi3Bp1+c4d4zy3+D5cblBHNeav1c6lqbBgePPS/w9emKZAoj
lja7L/MqsQLAM4lbgZzHANvfA9ViPCntI2ENFlM95VPpN6Ngc3sjaBHkdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFARFCaV+zHkkewxVcyzvAdGsnUMvMB8GA1UdIwQY
MBaAFLaySaLFYsXtvbdQWOJr13ASPpWuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHJKSm9zVml4ZTI5dDFCWTRtdlhjQkktbGE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80NTViMjYtNmFhMS00MzVmLWJkNDUt
OWNlMzFjMjczMTA4LzEvdHJKSm9zVml4ZTI5dDFCWTRtdlhjQkktbGE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC80NTViMjYtNmFhMS00MzVmLWJkNDUtOWNlMzFjMjczMTA4
LzEvdHJKSm9zVml4ZTI5dDFCWTRtdlhjQkktbGE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUELOR0Cx
nrNFTAc4XKXGkU+Mim4zJQAp87gHbWx6VGWYsvHJId4696s+wDjp4fzaiicrrjnL
lr+5+ckINJffDtIhWsvgB5x+acr7t+enPpO6dZ6efUaXPYWO005li2ZCLxkTQiln
TwAbiSUh1gyahPsjhnenUXMTUBDtRLK4cacjq+5/yCZRdyY/OfsoH+87Z1CpYr6q
clM8oB7Is1QAgCMMA5RLmEc1CF/mtrK3QA++SJ7e00fXZovEBMsge5lDYkjvG/iB
lSn0lL/eH096Vhow+AjZcUh7on2VmMW7j02Agy4KLcCp0Xas9/iO2n17KG6WNXDv
TnUVw9I/2eixNw==
-----END CERTIFICATE-----
Generated at Wed Apr 22 04:09:21 2026 by rpki-client