Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.mft
File: TrwmqzTIMZdDMt05mo5W6aqbe4U.mft (raw, json)
Hash identifier: UHO5PF7ydegLj35t7ulkcc1Y19zGKHIRgl7yBNHGhVo=
Subject key identifier: 52:5E:E1:C8:B6:C1:55:72:3A:09:C7:EF:84:5A:43:BA:F6:29:CF:24
Authority key identifier: 4E:BC:26:AB:34:C8:31:97:43:32:DD:39:9A:8E:56:E9:AA:9B:7B:85
Certificate issuer: /CN=4ebc26ab34c831974332dd399a8e56e9aa9b7b85
Certificate serial: 019D322BEBD2A03B6C4575628D124A23BE02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TrwmqzTIMZdDMt05mo5W6aqbe4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.mft
Manifest number: 01C9
Signing time: Sat 28 Mar 2026 02:00:32 +0000
Manifest this update: Sat 28 Mar 2026 02:00:32 +0000
Manifest next update: Sun 29 Mar 2026 02:00:32 +0000
Files and hashes: 1: TrwmqzTIMZdDMt05mo5W6aqbe4U.crl (hash: sU5ZdBn4wmOcnRD8bheSmAc2Cw0QUjfb5PrUUAlSOFk=)
2: zYL449gEhOrSRUOWk45-5w_QwxY.asa (hash: 2I3JzyYDlWOa37LiRrfqotSTSjqIyf07yQPMZe4sNg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TrwmqzTIMZdDMt05mo5W6aqbe4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2b:eb:d2:a0:3b:6c:45:75:62:8d:12:4a:23:be:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ebc26ab34c831974332dd399a8e56e9aa9b7b85
Validity
Not Before: Mar 28 02:00:32 2026 GMT
Not After : Mar 29 02:00:32 2026 GMT
Subject: CN=525ee1c8b6c155723a09c7ef845a43baf629cf24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:14:b4:c6:69:8d:9a:03:a9:42:e2:c4:4d:f3:
96:6b:e4:ed:91:0b:36:d2:72:14:38:e1:f1:cd:a9:
b8:7f:9d:c1:46:ab:dc:5e:31:5a:65:2d:77:84:e9:
69:a4:02:d7:02:db:61:69:16:9e:6c:57:5f:bf:fa:
6d:49:5d:71:0c:fc:c2:74:c5:b7:30:99:57:2f:fc:
9d:d3:a9:ff:c9:3e:c9:07:0d:47:5f:4b:96:01:3a:
f2:c7:78:66:c8:c7:eb:c6:6b:8c:dc:21:bf:16:37:
b6:3a:32:e5:57:8e:30:29:6b:67:d0:f3:0b:78:24:
d9:08:06:bd:d2:5b:15:82:4b:da:81:96:90:b6:f3:
68:e8:ac:72:4d:33:f7:ae:9d:ef:4f:4a:ce:3f:92:
5b:f4:50:93:ba:cf:b4:06:47:7e:b7:94:fb:ce:6b:
56:05:c2:1d:29:43:85:88:97:42:8e:83:fb:0a:71:
69:17:e5:10:39:c1:3c:3f:2c:b4:d4:64:df:e0:27:
bf:4e:ed:48:18:19:10:d2:15:f8:95:65:75:08:a7:
1c:d5:a3:f7:a0:57:58:c0:92:ec:5d:e1:d1:d1:ca:
6f:d1:2f:79:f8:2d:ab:7d:42:cb:bd:95:59:c9:9c:
d3:a4:35:6b:5e:50:84:68:ed:99:7d:12:70:c1:f6:
5c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5E:E1:C8:B6:C1:55:72:3A:09:C7:EF:84:5A:43:BA:F6:29:CF:24
X509v3 Authority Key Identifier:
keyid:4E:BC:26:AB:34:C8:31:97:43:32:DD:39:9A:8E:56:E9:AA:9B:7B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TrwmqzTIMZdDMt05mo5W6aqbe4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:7e:58:97:30:1e:22:30:72:73:bb:c9:48:d8:2b:7d:43:51:
97:aa:bc:93:cd:fc:40:eb:17:d6:e4:36:1c:4e:22:6a:79:4a:
bf:3c:21:f1:86:94:52:53:97:12:d4:e3:a9:4b:5b:0e:28:ec:
89:93:86:bf:51:f8:65:9b:09:03:ef:f8:4b:ae:84:9d:95:07:
c5:b2:59:1d:4d:f1:1b:6e:f6:e5:ff:2d:fb:d5:36:21:59:41:
ea:85:56:08:99:46:46:d4:2a:97:82:e0:74:22:74:cc:4d:9c:
bb:23:2e:4d:d6:03:ed:92:d2:ec:d8:4c:85:a7:0a:8f:76:5e:
0a:e6:80:b5:ec:8d:25:dd:24:6e:d5:20:4c:53:9e:50:9a:06:
c2:aa:b9:aa:3e:fe:54:96:1d:1d:5e:9b:d3:ba:82:44:33:81:
23:ff:c5:db:00:86:e8:da:7c:d2:75:fd:f7:67:4d:c7:40:b7:
3d:7c:ba:6b:0c:70:db:ed:5d:2a:e3:58:82:fb:3f:f4:54:73:
7c:b3:cc:36:33:65:a4:62:69:ea:4b:20:71:6d:31:f1:a7:cf:
09:18:0e:ea:78:25:8e:16:3d:40:6d:03:41:f9:ae:cf:5f:69:
13:5e:13:8b:a8:b9:eb:02:58:10:1c:03:3d:ea:36:01:59:32:
f2:43:6f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:35:32 2026 by rpki-client