Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
File: _TrysG9KUBbg5avtGD9GXbFfQdU.mft (raw, json)
Hash identifier: +fc7haiVk2PN27IFNfCkwXL6oeeM/WR1EMOGzVOy2jI=
Subject key identifier: 46:39:ED:16:13:9E:0D:1C:E6:A5:06:3F:AF:39:3B:77:5A:D7:2E:3D
Authority key identifier: FD:3A:F2:B0:6F:4A:50:16:E0:E5:AB:ED:18:3F:46:5D:B1:5F:41:D5
Certificate issuer: /CN=fd3af2b06f4a5016e0e5abed183f465db15f41d5
Certificate serial: 019D265FCA0FA51980CA1CC344EA79DD86D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
Manifest number: 1079
Signing time: Wed 25 Mar 2026 19:01:44 +0000
Manifest this update: Wed 25 Mar 2026 19:01:44 +0000
Manifest next update: Thu 26 Mar 2026 19:01:44 +0000
Files and hashes: 1: E6uFRto1KOOlDteB9p8TgWfe7iA.roa (hash: dfDYcJiyeiY8hSBk1DQV6nWMpgUuU4rmpVyKldkTJrs=)
2: _TrysG9KUBbg5avtGD9GXbFfQdU.crl (hash: Ad625bysaKXhQCMTvSXarKWqofWRmiBMxyveSutqxK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:ca:0f:a5:19:80:ca:1c:c3:44:ea:79:dd:86:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd3af2b06f4a5016e0e5abed183f465db15f41d5
Validity
Not Before: Mar 25 19:01:44 2026 GMT
Not After : Mar 26 19:01:44 2026 GMT
Subject: CN=4639ed16139e0d1ce6a5063faf393b775ad72e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5c:c7:d0:dd:4f:db:64:4e:2d:f9:56:ba:15:
d4:47:35:24:cc:46:4b:60:15:29:dc:d8:1a:36:ed:
cd:a0:04:3d:49:ab:1c:a4:3d:14:6f:c4:ec:19:84:
56:7c:6c:c6:44:d9:33:51:a7:dd:b1:3d:a0:27:f1:
b8:48:41:b6:18:6e:2d:3a:6e:cf:8c:c6:23:37:1d:
03:be:e7:fc:ed:c3:5f:03:aa:56:9d:54:3f:90:4f:
67:4e:06:a1:a7:27:82:1d:21:4d:fd:85:c1:3f:48:
a7:0e:95:74:81:f8:88:a6:7b:56:d1:13:eb:92:80:
be:b7:6b:92:3d:66:60:d6:fb:ba:a1:9c:ab:78:4b:
50:d6:d6:d7:82:55:0c:60:ad:89:ff:30:48:d5:43:
04:4b:a2:91:0c:b6:95:55:86:fe:dd:81:b6:e5:12:
52:e6:d5:f6:11:96:49:02:f2:80:22:e5:27:99:b9:
ef:06:55:f2:9c:70:3d:0e:ef:c0:69:66:44:69:72:
e7:a7:6c:45:59:62:7b:ec:38:01:9f:33:61:68:05:
44:75:e4:3a:a2:b9:8d:77:98:84:43:5b:fe:cd:7e:
6c:da:2d:4c:89:91:49:da:1e:06:dc:f1:52:11:99:
17:c5:6a:2f:bc:a5:d7:22:57:a2:b9:ca:b8:12:9d:
94:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:39:ED:16:13:9E:0D:1C:E6:A5:06:3F:AF:39:3B:77:5A:D7:2E:3D
X509v3 Authority Key Identifier:
keyid:FD:3A:F2:B0:6F:4A:50:16:E0:E5:AB:ED:18:3F:46:5D:B1:5F:41:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:31:23:cd:8e:40:f5:fb:94:7f:2e:84:d9:40:26:83:6e:ba:
4e:b3:8e:07:ef:5e:10:0e:73:02:bc:58:53:8e:5c:40:06:e1:
67:d0:eb:c8:fb:05:1e:47:40:07:cb:a6:ec:0c:a8:20:23:63:
22:19:51:cd:b0:ab:c8:e8:78:fc:dc:92:2d:40:ce:a5:0f:b9:
3c:61:d8:9b:4e:fc:46:67:2e:ee:8f:1b:0c:62:60:4e:27:c5:
8b:7b:ac:45:92:69:95:a9:15:cf:46:65:a5:6f:f5:d3:27:1e:
13:96:04:3f:d4:3d:3a:e5:02:3f:e0:40:16:6b:65:aa:9a:b7:
09:6c:f5:eb:1c:8a:c5:95:a6:3c:fd:c7:a9:67:ef:b7:98:d6:
7b:93:e7:6c:b1:73:58:c7:6f:a8:51:5a:2c:49:87:d8:65:e9:
d7:5f:a5:57:ee:dd:a4:7d:88:28:a4:65:ad:48:44:87:d4:50:
34:4d:91:82:9b:66:83:5b:57:fa:eb:76:7d:ef:6a:35:a9:61:
0b:6d:7d:49:fa:34:3e:7d:1c:c0:94:99:1e:bb:0c:4f:1f:e1:
f5:2b:ed:c3:8e:0e:ad:18:ed:f6:c0:19:95:c6:2a:86:bc:6d:
00:7a:0a:18:06:5c:92:0f:1d:5b:0a:3e:04:33:e6:06:95:ea:
75:a5:37:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:55:09 2026 by rpki-client