Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
File: tRu6i9P6566CScnEYWi6kAI9sZQ.mft (raw, json)
Hash identifier: +bJG6Rti2L1/S2S0nDPm8N3YaHuQXLB95CUtTN96BEo=
Subject key identifier: 27:F5:3A:FE:20:C1:95:6C:97:C2:BE:9F:53:40:9D:5C:01:B8:C3:57
Authority key identifier: B5:1B:BA:8B:D3:FA:E7:AE:82:49:C9:C4:61:68:BA:90:02:3D:B1:94
Certificate issuer: /CN=b51bba8bd3fae7ae8249c9c46168ba90023db194
Certificate serial: 019D27E02A71EA87B25DCC6690F8E474AB50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
Manifest number: 1882
Signing time: Thu 26 Mar 2026 02:01:35 +0000
Manifest this update: Thu 26 Mar 2026 02:01:35 +0000
Manifest next update: Fri 27 Mar 2026 02:01:35 +0000
Files and hashes: 1: AZ8OvTpGpdDuAF6Y-kPV_Stbyhg.roa (hash: 7rgz8yqocL/1oucg5hPOQaaan/ogeM7MMAM1VpFC/0U=)
2: tRu6i9P6566CScnEYWi6kAI9sZQ.crl (hash: 0kNPHs/EqJFlH7lv60RHt0//7i6WNe2+gzvOqZUzMws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:2a:71:ea:87:b2:5d:cc:66:90:f8:e4:74:ab:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51bba8bd3fae7ae8249c9c46168ba90023db194
Validity
Not Before: Mar 26 02:01:35 2026 GMT
Not After : Mar 27 02:01:35 2026 GMT
Subject: CN=27f53afe20c1956c97c2be9f53409d5c01b8c357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:40:76:0b:74:bb:37:f1:89:fd:25:ca:7a:50:
57:40:ed:71:cf:a4:6e:cd:27:cc:7a:35:26:fd:53:
d5:84:aa:af:64:dc:a8:06:30:1f:2e:1c:94:78:52:
09:6a:4d:c0:b6:26:5c:33:e0:ed:df:cc:1f:92:56:
fe:0b:66:75:03:5d:e8:2a:db:0f:e8:67:3b:cf:d5:
e1:f8:34:dc:b1:a1:39:37:8d:e8:c3:c8:67:24:e6:
b7:09:f9:ac:83:7a:72:16:26:c8:32:46:ab:36:d3:
ef:0f:d4:10:3c:78:5d:ca:0d:ba:dd:4d:4e:2b:ba:
ba:d6:4e:52:1a:85:e0:e8:da:9a:93:69:3f:a5:75:
f3:94:24:f0:00:a7:70:e7:7f:82:35:1b:1f:78:1f:
30:cf:70:a6:26:30:ee:e0:31:da:59:56:07:c5:95:
7f:71:ad:6d:ee:05:0a:9f:38:e5:7d:27:58:28:f9:
e6:b3:3a:4e:3c:6d:56:0a:7f:1d:d1:e8:19:e6:08:
65:b5:4a:d4:87:93:a4:58:b0:8d:55:ac:5c:8f:24:
93:ee:b0:75:cc:4a:39:a4:66:d7:80:92:8a:69:44:
48:34:9e:1a:0b:3d:93:d2:f5:f9:50:c1:fc:59:3a:
bc:5d:bc:39:96:da:b2:c9:3a:6c:52:e1:6c:4f:6f:
c4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F5:3A:FE:20:C1:95:6C:97:C2:BE:9F:53:40:9D:5C:01:B8:C3:57
X509v3 Authority Key Identifier:
keyid:B5:1B:BA:8B:D3:FA:E7:AE:82:49:C9:C4:61:68:BA:90:02:3D:B1:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:de:bb:26:72:44:4a:0c:8b:8d:05:c5:01:b0:c2:d7:4d:a0:
2b:08:79:52:0a:63:ef:e4:24:ba:c4:ef:d7:4e:f1:c4:84:89:
6b:d4:f2:31:96:ab:47:6c:38:b7:69:16:11:9d:ff:b1:3d:40:
eb:84:28:a4:14:5e:9c:85:5f:cd:a5:1b:c2:c8:15:51:eb:e6:
a2:e6:be:1a:2c:5f:ef:03:d7:a2:8c:e5:10:38:0e:17:9f:c0:
1a:de:6b:af:6c:e7:5d:35:c5:51:ce:f8:c8:00:bd:b9:e9:ec:
a1:3a:30:4e:62:07:01:56:27:d6:eb:cc:22:2c:58:d3:ce:bc:
ec:19:b5:93:15:e8:56:89:40:d9:63:41:22:4a:68:23:59:8f:
4d:e2:de:69:28:e4:44:43:73:f3:e4:25:59:12:60:17:c5:28:
35:33:07:83:90:36:af:07:37:cf:f8:94:bb:5b:a2:15:05:22:
21:78:7f:e3:f4:7c:fb:d8:70:44:59:72:1c:fd:9f:49:ce:47:
37:95:c9:90:c2:8f:07:3d:b5:91:a8:b6:19:8f:f3:32:b7:8d:
26:41:42:60:a6:95:71:d3:44:43:51:11:80:d2:9d:6f:a5:33:
15:95:b9:57:e2:b0:25:d2:89:82:9e:73:11:53:5e:b9:30:f8:
a2:84:af:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:48 2026 by rpki-client