Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
File: _trmiRA5jJ2O51bhaCAd2eiYm1I.mft (raw, json)
Hash identifier: 0U/hrvNipCXEIRvm+/FsyscChPgs2FqlhAPPrF0WZEM=
Subject key identifier: 48:E3:FD:43:06:27:B6:76:B3:26:F0:65:E0:E2:57:37:37:54:70:F2
Authority key identifier: FE:DA:E6:89:10:39:8C:9D:8E:E7:56:E1:68:20:1D:D9:E8:98:9B:52
Certificate issuer: /CN=fedae68910398c9d8ee756e168201dd9e8989b52
Certificate serial: 019D2816A98F2542D1B5821958FF5782C3E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
Manifest number: 04FD
Signing time: Thu 26 Mar 2026 03:01:06 +0000
Manifest this update: Thu 26 Mar 2026 03:01:06 +0000
Manifest next update: Fri 27 Mar 2026 03:01:06 +0000
Files and hashes: 1: 5sXzjnKS3JRs5_PkjVDa27eoC-M.roa (hash: 2V+6XQqLf/lpOVZXMep8bSqQydoN+IRrPy2YYET6j4Q=)
2: _trmiRA5jJ2O51bhaCAd2eiYm1I.crl (hash: YXcZkSjUK/MXzfcFuQTfXoVFyao2Lef8HFWeyl4peV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:a9:8f:25:42:d1:b5:82:19:58:ff:57:82:c3:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fedae68910398c9d8ee756e168201dd9e8989b52
Validity
Not Before: Mar 26 03:01:06 2026 GMT
Not After : Mar 27 03:01:06 2026 GMT
Subject: CN=48e3fd430627b676b326f065e0e25737375470f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f8:d4:bc:a8:40:c2:2d:0c:34:94:77:a2:ac:
c8:7d:1d:bb:ee:dd:1f:fd:0b:18:3e:89:36:84:86:
6f:00:f6:3e:e5:90:b7:05:fc:89:f9:f4:6c:f5:9d:
ef:29:b5:36:93:a5:2f:72:fd:30:0b:75:1a:d7:00:
3c:3a:73:c7:65:4e:61:2d:3f:04:3e:96:9a:11:d1:
ed:f8:d5:88:00:db:6d:f6:4f:e1:d3:fe:1b:83:fb:
9d:e1:6c:48:51:3c:e0:55:a1:95:6e:b1:84:72:39:
dc:9c:fd:dc:a5:65:5d:ae:8c:77:14:39:39:55:56:
3d:67:9c:c0:dd:ee:a6:df:7f:c9:c5:f9:20:57:b8:
43:95:34:2b:6d:d9:1d:76:44:47:45:12:6d:65:90:
55:3e:64:8c:9e:e2:72:d7:70:34:86:40:f6:72:63:
55:c9:f5:a3:0e:b4:6b:74:94:ba:7b:34:8c:83:97:
41:1d:d1:d4:a2:7d:eb:3e:bf:95:61:ea:5e:8c:aa:
54:f9:a1:ad:1a:31:0a:f2:da:4b:09:99:ce:fe:72:
5e:46:bf:e4:ab:44:11:1a:9e:e6:fa:15:e8:9e:ef:
fe:1a:77:c5:bf:0e:c0:6c:39:45:52:9d:74:2f:b5:
07:33:db:50:1b:08:e4:d6:2a:bf:d5:12:93:14:ff:
de:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E3:FD:43:06:27:B6:76:B3:26:F0:65:E0:E2:57:37:37:54:70:F2
X509v3 Authority Key Identifier:
keyid:FE:DA:E6:89:10:39:8C:9D:8E:E7:56:E1:68:20:1D:D9:E8:98:9B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:21:79:43:1f:f1:44:25:c2:53:f7:d1:c8:f6:0f:a7:fe:f8:
56:43:10:08:0a:c3:b8:22:12:2d:9a:d4:91:f4:7a:ac:b4:bb:
c0:2d:0a:64:4d:df:77:f9:0b:c9:3c:bd:a7:a7:ff:a4:a2:f6:
83:8f:9f:a6:01:2d:b1:24:61:45:a3:96:eb:a7:e8:e6:cd:16:
80:96:18:4e:2f:ab:45:c1:56:5e:7b:68:4e:0f:1a:21:cf:36:
af:20:71:01:9a:9b:e8:1f:34:87:58:f7:96:fb:b9:66:1e:15:
df:e2:f9:d8:88:f8:ff:fa:47:a5:dd:44:1a:1a:75:3f:52:57:
62:64:be:78:1c:8a:5a:33:63:21:a1:7b:48:ff:4b:55:e9:cf:
66:8b:6c:0c:f8:fe:e8:b0:a2:86:5b:58:74:3e:0d:34:32:3e:
96:f4:59:df:9b:b2:d5:db:62:30:75:87:6a:19:70:cd:4a:b9:
c3:ff:13:06:a8:f8:7f:ae:6b:2f:55:89:58:bd:48:c6:7a:87:
c5:30:5d:f9:e8:2b:a2:68:7d:36:fb:b7:c7:d9:f9:85:7b:e3:
74:4e:68:80:4b:7f:7d:80:d8:95:e5:33:a7:f1:1a:e6:d9:54:
45:79:07:9d:83:bf:2c:73:31:7a:80:f2:67:b6:d8:26:78:30:
87:a2:11:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:35 2026 by rpki-client