Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
File: _TrysG9KUBbg5avtGD9GXbFfQdU.mft (raw, json)
Hash identifier: Mitq3DZb7/hJ2Qc+LZa9qkRfWSmS9/lkFTL0IK1JTZs=
Subject key identifier: 84:A3:3E:EB:47:22:BD:E0:BE:72:E1:ED:58:B3:AB:2C:A1:4E:04:32
Authority key identifier: FD:3A:F2:B0:6F:4A:50:16:E0:E5:AB:ED:18:3F:46:5D:B1:5F:41:D5
Certificate issuer: /CN=fd3af2b06f4a5016e0e5abed183f465db15f41d5
Certificate serial: 019E1F7ED93AE8A4B4EAF4452905866A04D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
Manifest number: 10FA
Signing time: Wed 13 May 2026 04:01:07 +0000
Manifest this update: Wed 13 May 2026 04:01:07 +0000
Manifest next update: Thu 14 May 2026 04:01:07 +0000
Files and hashes: 1: E6uFRto1KOOlDteB9p8TgWfe7iA.roa (hash: dfDYcJiyeiY8hSBk1DQV6nWMpgUuU4rmpVyKldkTJrs=)
2: _TrysG9KUBbg5avtGD9GXbFfQdU.crl (hash: y6Uco/zXjp+aXI4AWlyG9e0Pq7wUCkjkwWCTKGP9+jY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:d9:3a:e8:a4:b4:ea:f4:45:29:05:86:6a:04:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd3af2b06f4a5016e0e5abed183f465db15f41d5
Validity
Not Before: May 13 04:01:07 2026 GMT
Not After : May 14 04:01:07 2026 GMT
Subject: CN=84a33eeb4722bde0be72e1ed58b3ab2ca14e0432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f5:04:bf:1d:54:5b:bb:6a:62:23:e1:5b:5c:
04:d8:2b:d7:33:11:dc:82:bd:eb:5b:43:06:e2:eb:
8f:7e:a1:3d:99:8d:4c:71:57:64:42:52:d8:55:8f:
cd:b5:55:e0:05:a1:6d:9a:b7:98:eb:99:86:67:7d:
e0:91:cf:99:e9:14:0c:48:48:6c:54:97:d9:35:94:
a3:d9:77:7f:d0:e7:17:62:d7:2a:b7:ab:1e:0a:45:
e4:ed:9e:ad:ce:76:4d:ab:fc:b6:80:e9:f3:da:10:
15:51:d7:17:54:d5:f4:57:25:06:0f:98:69:f4:0f:
66:1b:61:a8:0f:8b:7e:ad:ab:60:24:66:1b:ff:ab:
66:a4:be:7e:77:84:15:e3:06:bf:26:f3:42:2b:d2:
0e:b5:cf:cf:d1:9c:32:c8:3a:ba:b0:bc:33:22:21:
9d:ab:80:b7:45:21:36:43:0a:38:d3:b5:ba:66:89:
75:76:2b:e9:86:46:f5:48:af:61:b4:0d:a3:13:03:
a0:dc:51:1d:1b:f8:e8:db:57:4b:7f:f1:bb:c8:3c:
13:c2:af:6a:30:37:fb:bf:a8:2a:45:fd:25:a8:54:
92:ba:e4:68:f3:b8:50:67:65:57:52:ec:15:03:3c:
3d:a8:1f:70:26:af:5b:9a:3e:4a:44:3a:10:92:7c:
c8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A3:3E:EB:47:22:BD:E0:BE:72:E1:ED:58:B3:AB:2C:A1:4E:04:32
X509v3 Authority Key Identifier:
keyid:FD:3A:F2:B0:6F:4A:50:16:E0:E5:AB:ED:18:3F:46:5D:B1:5F:41:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:7b:4f:e4:d6:7c:1e:7f:42:ee:28:d1:02:35:e0:38:e7:b7:
4a:09:7d:b3:1a:57:b2:08:e5:39:b4:95:1d:11:ec:51:d8:75:
b3:64:c5:f0:17:29:aa:f3:d8:7c:84:20:80:20:d7:50:ce:e0:
38:b4:8b:4c:00:9f:30:51:48:82:2b:21:13:12:b2:88:75:cf:
2a:70:91:ab:40:63:9c:79:c2:9c:49:cf:8f:93:bc:00:6a:67:
dc:76:ae:f8:a4:a1:79:9f:4d:1a:df:60:67:bd:25:a1:5b:d8:
1f:48:a2:9a:e6:7d:77:fe:2b:62:2b:a7:33:1a:6e:48:ae:5f:
03:4b:4a:e2:c1:d1:0d:e8:d0:be:f1:2d:d4:ce:4c:37:38:cd:
0b:89:be:9a:d9:63:e8:64:73:15:74:e5:66:e3:31:5d:14:c0:
4b:39:08:41:39:82:2b:6f:db:b0:2d:db:2c:5b:ec:f5:84:25:
9c:84:72:66:5b:c0:62:11:85:e8:e3:4a:21:ac:2f:7d:ac:b5:
04:6e:cc:21:91:0c:a3:e0:3c:5f:a6:6d:8d:85:68:4c:48:cd:
90:72:62:99:20:2a:bc:9c:fa:54:0a:db:ec:db:57:3a:0f:28:
0a:85:0b:ef:26:35:55:87:57:5d:59:e7:e7:5e:b8:f6:3f:64:
2c:fd:a9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:52:37 2026 by rpki-client