Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft
File: tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft (raw, json)
Hash identifier: S3Cv/xnF6j5kYDMSW1BsfPa/jBHfplISxNp1KqhkVhY=
Subject key identifier: 90:BB:66:D5:A7:30:7F:31:33:A8:D0:56:A8:A2:15:65:34:A0:58:59
Authority key identifier: B5:16:7E:7E:E3:78:38:F0:75:1C:49:C5:E5:F3:EC:00:00:64:AE:95
Certificate issuer: /CN=b5167e7ee37838f0751c49c5e5f3ec000064ae95
Certificate serial: 019D284D9BE3F6840BD386E588F0656444CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRZ-fuN4OPB1HEnF5fPsAABkrpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft
Manifest number: 13D6
Signing time: Thu 26 Mar 2026 04:01:07 +0000
Manifest this update: Thu 26 Mar 2026 04:01:07 +0000
Manifest next update: Fri 27 Mar 2026 04:01:07 +0000
Files and hashes: 1: 3skp7tFRxOzO2Ar-xxZ_-GZkGJA.roa (hash: lluuIQVo59lCKGnliYFSmI59l+40e8vpyBl7Esorldo=)
2: tRZ-fuN4OPB1HEnF5fPsAABkrpU.crl (hash: 5vP3cgYTUI0jBEyanIqAy+DiLq0AqeHAD2wjh+//dB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRZ-fuN4OPB1HEnF5fPsAABkrpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:9b:e3:f6:84:0b:d3:86:e5:88:f0:65:64:44:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5167e7ee37838f0751c49c5e5f3ec000064ae95
Validity
Not Before: Mar 26 04:01:07 2026 GMT
Not After : Mar 27 04:01:07 2026 GMT
Subject: CN=90bb66d5a7307f3133a8d056a8a2156534a05859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:21:35:53:7c:56:d8:d6:23:05:42:eb:48:a7:
ce:ac:e3:80:17:1a:4a:6e:63:27:b9:ea:02:54:40:
d6:9c:52:75:64:46:3f:10:12:ab:80:07:8c:c7:e8:
5a:e1:e9:58:e0:da:f4:22:cb:81:60:6e:a7:0e:4b:
1c:f4:da:e9:b9:be:63:cf:80:dc:5f:d4:96:78:8b:
fc:6f:51:20:92:0d:78:28:5a:a1:0c:f3:2f:c0:4f:
99:6b:1d:48:cf:d9:41:ca:17:f2:aa:2d:70:fc:da:
df:89:8b:65:e7:ca:a6:32:ae:fb:2d:27:de:fa:00:
97:ee:44:88:2e:44:58:f9:12:56:b8:52:ee:32:0a:
f6:1e:46:fc:31:85:a4:6a:fb:55:35:5b:7e:86:e3:
bd:f1:b5:36:00:8f:fb:28:58:10:94:86:bf:9e:49:
e9:05:62:d1:3c:90:05:b9:02:88:68:ad:78:51:53:
4a:12:a2:fd:1b:ad:6a:b3:f7:0c:09:75:94:c0:2e:
1a:72:e6:de:fe:d2:a3:0f:7a:b9:9e:18:08:d3:65:
ad:ff:72:08:13:a1:1d:3a:20:17:e0:1c:62:4a:fb:
95:2c:39:3f:b0:a9:1e:cd:19:16:57:54:56:f8:c6:
9e:f7:7c:d3:83:67:83:6d:3f:ea:ba:48:68:65:cc:
33:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BB:66:D5:A7:30:7F:31:33:A8:D0:56:A8:A2:15:65:34:A0:58:59
X509v3 Authority Key Identifier:
keyid:B5:16:7E:7E:E3:78:38:F0:75:1C:49:C5:E5:F3:EC:00:00:64:AE:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRZ-fuN4OPB1HEnF5fPsAABkrpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:54:d0:22:f7:4f:fa:5d:3b:13:4b:5a:a9:88:e0:b6:ed:0e:
93:c8:42:d4:56:c4:f0:7f:57:d7:13:c5:6b:27:8a:d8:be:c7:
68:24:0f:76:2d:ca:57:a8:e6:05:e3:51:22:f1:16:42:92:52:
a1:e8:65:15:53:47:17:d5:26:be:60:36:ef:e5:27:b6:c7:e9:
fa:e5:d8:c2:c0:f0:2c:5c:ec:4e:03:45:ba:ec:52:c6:e0:55:
ae:f1:45:6b:93:3c:6c:fc:69:85:06:d2:d8:59:88:35:22:fa:
ec:1d:ff:db:06:22:68:6d:cb:7c:05:9d:a7:54:81:33:72:bc:
3c:47:3e:28:66:9d:95:e7:24:12:54:7b:35:f7:30:f3:67:7e:
59:44:57:a2:9e:d9:da:85:e1:c9:64:98:88:c0:c1:8c:90:63:
99:d2:19:60:7e:09:b1:cc:b9:e4:2b:57:86:0c:56:92:40:5a:
04:08:e6:76:b3:66:72:b4:6c:e5:27:39:eb:0e:64:69:c2:80:
17:ed:f0:0a:b9:fc:4e:52:d9:99:ec:bf:3b:13:08:82:df:3e:
ee:ed:af:2e:eb:da:51:a2:63:58:3c:c3:21:8f:2c:0a:8d:52:
1c:db:b4:4e:ca:59:f0:8b:77:86:fd:ff:67:ec:d6:51:f9:1e:
e3:e6:5e:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTZvj9oQL04bliPBlZETMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MTY3ZTdlZTM3ODM4ZjA3NTFjNDljNWU1ZjNlYzAwMDA2
NGFlOTUwHhcNMjYwMzI2MDQwMTA3WhcNMjYwMzI3MDQwMTA3WjAzMTEwLwYDVQQD
Eyg5MGJiNjZkNWE3MzA3ZjMxMzNhOGQwNTZhOGEyMTU2NTM0YTA1ODU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CE1U3xW2NYjBULrSKfOrOOAFxpK
bmMnueoCVEDWnFJ1ZEY/EBKrgAeMx+ha4elY4Nr0IsuBYG6nDksc9Nrpub5jz4Dc
X9SWeIv8b1Egkg14KFqhDPMvwE+Zax1Iz9lByhfyqi1w/NrfiYtl58qmMq77LSfe
+gCX7kSILkRY+RJWuFLuMgr2Hkb8MYWkavtVNVt+huO98bU2AI/7KFgQlIa/nknp
BWLRPJAFuQKIaK14UVNKEqL9G61qs/cMCXWUwC4acube/tKjD3q5nhgI02Wt/3II
E6EdOiAX4BxiSvuVLDk/sKkezRkWV1RW+Mae93zTg2eDbT/qukhoZcwzSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJC7ZtWnMH8xM6jQVqiiFWU0oFhZMB8GA1UdIwQY
MBaAFLUWfn7jeDjwdRxJxeXz7AAAZK6VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFJaLWZ1TjRPUEIxSEVuRjVmUHNBQUJrcnBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9jN2RjMzQtNDRkYi00YzA2LThhMzIt
ZTIyYWVkMWYwOGVjLzEvdFJaLWZ1TjRPUEIxSEVuRjVmUHNBQUJrcnBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9jN2RjMzQtNDRkYi00YzA2LThhMzItZTIyYWVkMWYwOGVj
LzEvdFJaLWZ1TjRPUEIxSEVuRjVmUHNBQUJrcnBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlVTQIvdP
+l07E0taqYjgtu0Ok8hC1FbE8H9X1xPFayeK2L7HaCQPdi3KV6jmBeNRIvEWQpJS
oehlFVNHF9UmvmA27+Untsfp+uXYwsDwLFzsTgNFuuxSxuBVrvFFa5M8bPxphQbS
2FmINSL67B3/2wYiaG3LfAWdp1SBM3K8PEc+KGadleckElR7Nfcw82d+WURXop7Z
2oXhyWSYiMDBjJBjmdIZYH4Jscy55CtXhgxWkkBaBAjmdrNmcrRs5Sc56w5kacKA
F+3wCrn8TlLZmey/OxMIgt8+7u2vLuvaUaJjWDzDIY8sCo1SHNu0TspZ8It3hv3/
Z+zWUfke4+Ze+w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:15:49 2026 by rpki-client