Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
File: _TrysG9KUBbg5avtGD9GXbFfQdU.mft (raw, json)
Hash identifier: GfzwhAj4wIZQVpztReMf9FZujT+LUxbCk56NzmVjhIo=
Subject key identifier: 37:9D:B8:58:BD:7F:FE:E3:CD:C7:83:76:D8:87:E4:54:C5:A6:0C:D0
Authority key identifier: FD:3A:F2:B0:6F:4A:50:16:E0:E5:AB:ED:18:3F:46:5D:B1:5F:41:D5
Certificate issuer: /CN=fd3af2b06f4a5016e0e5abed183f465db15f41d5
Certificate serial: 01A10ADE0A2FA7B6E547DA5ACF7617C31C00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
Manifest number: 127D
Signing time: Mon 05 Oct 2026 07:01:26 +0000
Manifest this update: Mon 05 Oct 2026 07:01:26 +0000
Manifest next update: Tue 06 Oct 2026 07:01:26 +0000
Files and hashes: 1: E6uFRto1KOOlDteB9p8TgWfe7iA.roa (hash: dfDYcJiyeiY8hSBk1DQV6nWMpgUuU4rmpVyKldkTJrs=)
2: _TrysG9KUBbg5avtGD9GXbFfQdU.crl (hash: 3VpKtF2W7OgagBWTtQn2LjT89BI5qV/FCORc/sqncsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:de:0a:2f:a7:b6:e5:47:da:5a:cf:76:17:c3:1c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd3af2b06f4a5016e0e5abed183f465db15f41d5
Validity
Not Before: Oct 5 07:01:26 2026 GMT
Not After : Oct 6 07:01:26 2026 GMT
Subject: CN=379db858bd7ffee3cdc78376d887e454c5a60cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2f:8c:14:c1:6b:2d:dd:06:eb:86:eb:bb:56:
51:ec:b7:49:cd:d7:d0:ac:2d:e3:3a:1d:e3:e9:c5:
19:9d:21:27:9e:8f:da:ee:c8:7c:27:9f:f8:5b:ba:
fb:0c:5e:ff:c2:01:14:bf:fa:ea:a6:0e:66:7f:cd:
d5:f9:2f:63:37:c2:25:8b:91:e6:d8:53:3c:fd:a9:
a1:50:6f:fc:a7:ef:22:8f:1f:df:f4:c2:21:c7:b4:
0b:06:33:e0:4d:09:61:be:99:d4:e5:ae:ee:29:1d:
0b:af:24:ff:0f:29:f8:b3:07:8e:ed:d1:3e:0f:57:
5e:22:04:59:07:2f:b3:40:97:06:e0:ec:15:a6:6f:
ef:1d:8c:66:e0:d7:11:e7:ae:af:2e:fa:65:de:2d:
0f:66:89:cb:7c:b3:31:a5:ea:b3:87:c9:72:42:a7:
03:af:d1:10:89:f1:88:7a:85:a8:98:db:24:a3:b4:
2f:aa:c2:a8:c1:23:74:75:f8:33:d1:e1:5b:b3:e2:
8e:b8:1a:ef:5b:4c:58:4f:70:21:bc:c6:ac:a8:e1:
e1:fb:cd:07:a1:ca:93:12:3a:cd:46:9b:a2:76:cb:
71:01:cb:22:ea:3b:e0:7a:a4:e9:ac:06:94:66:f0:
4e:5d:17:73:8c:6b:42:87:8e:a9:bd:d8:3d:67:4e:
6e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:9D:B8:58:BD:7F:FE:E3:CD:C7:83:76:D8:87:E4:54:C5:A6:0C:D0
X509v3 Authority Key Identifier:
keyid:FD:3A:F2:B0:6F:4A:50:16:E0:E5:AB:ED:18:3F:46:5D:B1:5F:41:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:04:3e:12:aa:bc:82:8f:70:98:ef:f5:ae:d7:dd:a6:a3:84:
fb:55:4a:42:5c:20:13:e0:3f:d0:98:04:05:c7:46:b3:ec:b5:
50:f0:b7:82:68:b2:c1:86:8d:71:1c:d9:aa:c9:c0:0e:52:31:
08:08:0a:bb:7b:41:aa:7a:2d:aa:fa:49:d4:18:f3:d8:51:0b:
34:0a:87:98:30:d9:78:f6:4b:f9:22:1a:56:4b:bf:f2:eb:3f:
ed:50:6b:38:96:a7:d6:57:ef:62:fe:a0:b2:93:c1:0a:62:e5:
10:64:e4:8f:27:b2:e8:f2:ac:b4:36:b4:e4:f7:0e:73:43:a7:
96:d4:df:7b:9f:0a:f5:5b:1c:06:5a:fa:f5:13:60:0a:2e:75:
2e:05:40:c8:09:fc:53:46:4d:6e:8e:03:3f:7c:01:81:8b:b3:
e5:50:69:f4:c4:d3:d0:89:15:fb:09:82:00:8d:7b:e7:6f:e4:
70:b2:c0:d5:c3:ab:64:8a:d7:bf:a4:57:8b:61:b5:2b:9e:6d:
57:3a:b1:c1:78:8d:29:49:de:a8:65:9e:0b:71:8e:f6:c1:76:
90:da:54:0c:e6:f1:a7:4f:ad:9e:73:a4:a7:74:6f:40:d4:e0:
1d:5f:5c:ed:f1:d0:69:90:26:6e:0e:e7:2f:1d:c5:c4:5d:f0:
3a:92:b8:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEK3govp7blR9paz3YXwxwAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkM2FmMmIwNmY0YTUwMTZlMGU1YWJlZDE4M2Y0NjVkYjE1
ZjQxZDUwHhcNMjYxMDA1MDcwMTI2WhcNMjYxMDA2MDcwMTI2WjAzMTEwLwYDVQQD
EygzNzlkYjg1OGJkN2ZmZWUzY2RjNzgzNzZkODg3ZTQ1NGM1YTYwY2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAti+MFMFrLd0G64bru1ZR7LdJzdfQ
rC3jOh3j6cUZnSEnno/a7sh8J5/4W7r7DF7/wgEUv/rqpg5mf83V+S9jN8Ili5Hm
2FM8/amhUG/8p+8ijx/f9MIhx7QLBjPgTQlhvpnU5a7uKR0LryT/Dyn4sweO7dE+
D1deIgRZBy+zQJcG4OwVpm/vHYxm4NcR566vLvpl3i0PZonLfLMxpeqzh8lyQqcD
r9EQifGIeoWomNsko7QvqsKowSN0dfgz0eFbs+KOuBrvW0xYT3AhvMasqOHh+80H
ocqTEjrNRpuidstxAcsi6jvgeqTprAaUZvBOXRdzjGtCh46pvdg9Z05u2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDeduFi9f/7jzceDdtiH5FTFpgzQMB8GA1UdIwQY
MBaAFP068rBvSlAW4OWr7Rg/Rl2xX0HVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1RyeXNHOUtVQmJnNWF2dEdEOUdYYkZmUWRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS85MjI2MmUtMjI3Ni00YTg4LWE3MzMt
MDQ5YmQ3YjFlMTE5LzEvX1RyeXNHOUtVQmJnNWF2dEdEOUdYYkZmUWRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS85MjI2MmUtMjI3Ni00YTg4LWE3MzMtMDQ5YmQ3YjFlMTE5
LzEvX1RyeXNHOUtVQmJnNWF2dEdEOUdYYkZmUWRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjQQ+Eqq8
go9wmO/1rtfdpqOE+1VKQlwgE+A/0JgEBcdGs+y1UPC3gmiywYaNcRzZqsnADlIx
CAgKu3tBqnotqvpJ1Bjz2FELNAqHmDDZePZL+SIaVku/8us/7VBrOJan1lfvYv6g
spPBCmLlEGTkjyey6PKstDa05PcOc0OnltTfe58K9VscBlr69RNgCi51LgVAyAn8
U0ZNbo4DP3wBgYuz5VBp9MTT0IkV+wmCAI1752/kcLLA1cOrZIrXv6RXi2G1K55t
VzqxwXiNKUneqGWeC3GO9sF2kNpUDObxp0+tnnOkp3RvQNTgHV9c7fHQaZAmbg7n
Lx3FxF3wOpK4BA==
-----END CERTIFICATE-----
Generated at Mon Oct 5 13:24:06 2026 by rpki-client