Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/fc481a-ab01-4f82-9e6e-eb02f3d3f40c/1/TRYkCJewEwVoHJQl_lI_WPqydBU.mft
File: TRYkCJewEwVoHJQl_lI_WPqydBU.mft (raw, json)
Hash identifier: rcOU3BvDZQcKQQGGlArhchWnsSaepG2j3Cowctcjzvg=
Subject key identifier: F9:8C:31:DF:6A:D1:C6:61:C1:93:5E:5E:2A:23:1D:83:3A:B2:37:A1
Authority key identifier: 4D:16:24:08:97:B0:13:05:68:1C:94:25:FE:52:3F:58:FA:B2:74:15
Certificate issuer: /CN=4d16240897b01305681c9425fe523f58fab27415
Certificate serial: 019D2A3C1D10AEF22ED2BF58699B987DCF4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRYkCJewEwVoHJQl_lI_WPqydBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/fc481a-ab01-4f82-9e6e-eb02f3d3f40c/1/TRYkCJewEwVoHJQl_lI_WPqydBU.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 13:01:15 +0000
Manifest this update: Thu 26 Mar 2026 13:01:15 +0000
Manifest next update: Fri 27 Mar 2026 13:01:15 +0000
Files and hashes: 1: NlDeDV4WzeoUvKdIW3pq1ndiD6Q.roa (hash: gXt+Eq5uxoOgBwvqy+Kxf+ntZAhbrgykVlmEcwvKBeA=)
2: TRYkCJewEwVoHJQl_lI_WPqydBU.crl (hash: OUa8oypK/EMWBe3fu2wDgJBYiy38iCO1rlidLU1vBRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/fc481a-ab01-4f82-9e6e-eb02f3d3f40c/1/TRYkCJewEwVoHJQl_lI_WPqydBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/fc481a-ab01-4f82-9e6e-eb02f3d3f40c/1/TRYkCJewEwVoHJQl_lI_WPqydBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRYkCJewEwVoHJQl_lI_WPqydBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:1d:10:ae:f2:2e:d2:bf:58:69:9b:98:7d:cf:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d16240897b01305681c9425fe523f58fab27415
Validity
Not Before: Mar 26 13:01:15 2026 GMT
Not After : Mar 27 13:01:15 2026 GMT
Subject: CN=f98c31df6ad1c661c1935e5e2a231d833ab237a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:17:0c:31:d6:f5:3f:a8:c7:da:ef:ac:ad:52:
05:c7:3e:ef:16:e6:fd:08:b8:5d:a9:3c:13:9e:ee:
5e:fa:d8:43:2f:f2:33:e6:af:f3:44:83:28:d2:91:
7e:77:f4:b7:bf:df:36:95:4a:cb:0f:61:4b:fb:5a:
90:a8:cb:db:23:49:9a:04:5e:44:26:2e:a2:db:e8:
7d:ab:95:24:c8:ee:a8:dd:f5:a6:0b:d2:06:67:3e:
3f:31:f8:76:dc:5b:15:af:58:6c:5e:12:d1:06:25:
67:00:dd:ae:95:f7:04:92:b0:fd:a5:aa:0b:56:1c:
bc:79:ad:17:da:da:f7:21:42:4f:f4:ba:44:b3:6e:
d0:a6:74:b7:26:50:67:ee:68:e1:5d:99:3f:f1:bd:
96:81:04:24:4d:f8:53:0f:7e:a5:ba:94:ab:e4:76:
76:4f:fd:1e:7a:7c:ec:62:29:af:50:41:01:29:29:
cd:94:74:d6:d8:c1:5a:b7:d4:44:79:0f:e6:b6:9c:
2c:38:91:6f:4d:e1:31:ef:5c:a8:2e:13:70:a7:88:
6a:c9:a3:fd:fb:d5:8b:54:2a:3f:cc:65:83:56:ca:
f4:60:5d:b8:4b:52:57:fb:a7:31:6a:2b:30:57:9f:
7c:91:66:6b:82:20:ac:c9:9d:0d:e7:ff:e9:23:aa:
6a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8C:31:DF:6A:D1:C6:61:C1:93:5E:5E:2A:23:1D:83:3A:B2:37:A1
X509v3 Authority Key Identifier:
keyid:4D:16:24:08:97:B0:13:05:68:1C:94:25:FE:52:3F:58:FA:B2:74:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRYkCJewEwVoHJQl_lI_WPqydBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc481a-ab01-4f82-9e6e-eb02f3d3f40c/1/TRYkCJewEwVoHJQl_lI_WPqydBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc481a-ab01-4f82-9e6e-eb02f3d3f40c/1/TRYkCJewEwVoHJQl_lI_WPqydBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:fd:d6:c2:8b:25:3f:cd:09:1d:5e:a9:df:4f:0a:05:12:44:
3a:bd:b7:37:98:b3:50:60:b5:14:3d:32:44:3c:c7:5d:1b:ed:
d3:81:52:74:f3:e6:8d:15:30:b1:be:44:4d:af:1e:3e:1d:3d:
b5:93:13:60:ff:ee:2a:70:f3:d5:ae:b6:65:46:7a:72:2b:ac:
46:37:b9:3c:60:be:42:8e:de:f0:38:46:ea:fa:90:08:16:29:
9e:4b:18:64:4d:8a:63:91:aa:3c:2f:fe:1c:58:7d:a0:75:8c:
0f:41:c3:62:cc:5d:fb:cf:2a:f4:75:e9:26:a2:89:4d:f5:01:
0f:e0:02:aa:57:b7:c3:e2:a1:f5:67:e8:77:60:d1:b0:07:46:
e0:0d:87:c8:29:9c:e5:09:bf:92:85:16:cd:6c:23:53:87:fd:
a7:79:fc:b6:15:76:b1:40:67:81:4b:d9:a6:8a:9e:bc:ef:e6:
dc:54:0b:5e:8f:37:c5:18:05:17:77:ca:3d:1f:c3:60:ed:b9:
5e:56:ae:c8:2e:10:44:25:81:16:86:0b:a7:ef:0d:de:34:b3:
04:75:20:7c:41:bb:95:dd:40:a4:12:bc:55:56:3d:6a:d8:8b:
bc:1f:35:8c:c1:3e:a3:a3:13:a9:a4:bd:00:f4:10:94:42:9b:
ca:c5:9a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:05 2026 by rpki-client