Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
File: TRMSiBUQNXRBfKenBBLaOrO4RRE.mft (raw, json)
Hash identifier: xNlR0VmbOEhBVkzteSpYMPeGVf33drI0WUMbQMuwJZE=
Subject key identifier: 35:95:19:74:4D:E9:5A:9C:19:24:CC:8D:12:1F:55:D1:08:AA:A6:CC
Authority key identifier: 4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11
Certificate issuer: /CN=4d13128815103574417ca7a70412da3ab3b84511
Certificate serial: 019D2772558B801E112228B84706A103A166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 00:01:37 +0000
Manifest this update: Thu 26 Mar 2026 00:01:37 +0000
Manifest next update: Fri 27 Mar 2026 00:01:37 +0000
Files and hashes: 1: TRMSiBUQNXRBfKenBBLaOrO4RRE.crl (hash: KICSrHHvkcqi3CKxG37YXxZramB/uDD+oBF3IBMPO4E=)
2: mGlCacge7YnUjqIQY4CvKFnqpx4.roa (hash: AVo0MRQRTy6CdeGacGKP+5uMUkB7HT3z+0JrAGp0xWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:55:8b:80:1e:11:22:28:b8:47:06:a1:03:a1:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d13128815103574417ca7a70412da3ab3b84511
Validity
Not Before: Mar 26 00:01:37 2026 GMT
Not After : Mar 27 00:01:37 2026 GMT
Subject: CN=359519744de95a9c1924cc8d121f55d108aaa6cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f0:81:69:2b:f7:e2:12:35:c2:de:40:69:1d:
f5:98:33:5b:8a:55:ee:ab:fb:8c:c3:d4:db:01:d8:
a7:84:c2:d8:37:c4:60:c3:ec:49:e7:24:79:ae:67:
0b:38:63:b6:d4:eb:14:11:ac:96:9e:0f:5f:41:71:
45:f4:e0:c4:f7:99:a3:e9:d2:9f:b5:c1:82:1d:bb:
56:24:45:0d:58:b2:7b:ab:e0:bc:2b:2d:d5:1d:49:
e1:a3:cb:81:da:bb:4e:b5:15:c5:f4:3f:da:02:4d:
8e:3b:8d:18:a9:d2:ff:1f:d7:8d:be:f4:05:28:07:
3a:0f:a1:70:dd:57:7e:01:56:91:7d:80:c7:ea:38:
2b:4f:45:76:e1:55:00:e6:ff:2f:a0:5a:d9:db:5e:
58:93:08:ab:67:e2:08:1e:ab:33:8a:8a:31:45:07:
5f:a5:8c:92:d6:91:cd:4c:55:ae:46:ae:ac:01:c9:
c2:b3:60:c0:b5:dc:b3:a1:b5:d7:72:28:43:66:8f:
7a:73:ed:b4:17:c0:10:11:0a:ed:c4:08:b2:2b:a3:
51:7d:d7:14:f4:07:80:18:3c:64:a1:7e:85:68:81:
3a:dc:12:8e:19:b4:83:92:c9:c2:68:5f:2c:5d:af:
71:82:33:ec:f2:62:ea:a5:49:e1:14:47:3c:d6:17:
6b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:95:19:74:4D:E9:5A:9C:19:24:CC:8D:12:1F:55:D1:08:AA:A6:CC
X509v3 Authority Key Identifier:
keyid:4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c9:6d:aa:86:56:b5:3a:28:29:e6:07:56:46:1e:ee:7e:d5:
1c:45:f6:dc:18:e5:9c:b4:0b:8f:75:ba:dc:ca:ba:52:69:1c:
6f:5c:42:75:39:97:62:eb:38:1c:70:37:73:51:40:8f:d5:e5:
d4:13:90:3d:7c:e6:ce:7c:92:ff:6d:08:12:91:37:ac:8b:e6:
2b:46:3d:11:34:ab:e1:d4:9a:98:91:6b:e0:04:f5:27:68:85:
9e:73:3c:fd:e2:bf:bb:11:f3:8e:2e:9a:b2:be:0f:11:a1:e1:
6e:ff:d0:75:03:72:2a:3a:5e:ed:c9:5d:03:6c:04:19:db:54:
7f:b8:ad:92:6f:ba:f0:70:c4:46:c4:f9:0b:91:6c:70:d2:eb:
f1:5b:7b:8b:86:1b:0c:38:a7:32:45:07:73:9d:81:db:d8:bb:
b0:97:7c:88:f0:7b:a3:01:73:13:fa:48:d2:06:0b:fb:c8:bb:
a3:11:4b:cf:1c:89:95:3e:e7:94:47:6c:c9:79:0b:4a:dd:5d:
3d:81:d7:e0:46:47:bb:f7:77:c2:71:71:6c:28:a1:96:d4:ab:
74:19:9c:3e:ce:02:ba:4a:dc:30:aa:fb:56:3d:c1:08:49:ff:
2d:95:0b:1c:a2:a5:19:90:9d:e8:8c:a8:8f:0f:d5:4a:86:c9:
36:1a:d8:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nclWLgB4RIii4RwahA6FmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMTMxMjg4MTUxMDM1NzQ0MTdjYTdhNzA0MTJkYTNhYjNi
ODQ1MTEwHhcNMjYwMzI2MDAwMTM3WhcNMjYwMzI3MDAwMTM3WjAzMTEwLwYDVQQD
EygzNTk1MTk3NDRkZTk1YTljMTkyNGNjOGQxMjFmNTVkMTA4YWFhNmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/CBaSv34hI1wt5AaR31mDNbilXu
q/uMw9TbAdinhMLYN8Rgw+xJ5yR5rmcLOGO21OsUEayWng9fQXFF9ODE95mj6dKf
tcGCHbtWJEUNWLJ7q+C8Ky3VHUnho8uB2rtOtRXF9D/aAk2OO40YqdL/H9eNvvQF
KAc6D6Fw3Vd+AVaRfYDH6jgrT0V24VUA5v8voFrZ215YkwirZ+IIHqsziooxRQdf
pYyS1pHNTFWuRq6sAcnCs2DAtdyzobXXcihDZo96c+20F8AQEQrtxAiyK6NRfdcU
9AeAGDxkoX6FaIE63BKOGbSDksnCaF8sXa9xgjPs8mLqpUnhFEc81hdrWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWVGXRN6VqcGSTMjRIfVdEIqqbMMB8GA1UdIwQY
MBaAFE0TEogVEDV0QXynpwQS2jqzuEURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFJNU2lCVVFOWFJCZktlbkJCTGFPck80UlJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9mYWZmYzItOTUxNy00ZDE4LTg5OTMt
ZjU1ZWE0OGNlNzVhLzEvVFJNU2lCVVFOWFJCZktlbkJCTGFPck80UlJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9mYWZmYzItOTUxNy00ZDE4LTg5OTMtZjU1ZWE0OGNlNzVh
LzEvVFJNU2lCVVFOWFJCZktlbkJCTGFPck80UlJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbcltqoZW
tTooKeYHVkYe7n7VHEX23BjlnLQLj3W63Mq6Umkcb1xCdTmXYus4HHA3c1FAj9Xl
1BOQPXzmznyS/20IEpE3rIvmK0Y9ETSr4dSamJFr4AT1J2iFnnM8/eK/uxHzji6a
sr4PEaHhbv/QdQNyKjpe7cldA2wEGdtUf7itkm+68HDERsT5C5FscNLr8Vt7i4Yb
DDinMkUHc52B29i7sJd8iPB7owFzE/pI0gYL+8i7oxFLzxyJlT7nlEdsyXkLSt1d
PYHX4EZHu/d3wnFxbCihltSrdBmcPs4CukrcMKr7Vj3BCEn/LZULHKKlGZCd6Iyo
jw/VSobJNhrYmA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:25:56 2026 by rpki-client