Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
File: TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft (raw, json)
Hash identifier: rRwPF2TXQJLLOK59oSVwMvEs9+nDCse21Exy4+KDGP8=
Subject key identifier: ED:9A:E4:7A:73:68:D9:45:C9:16:69:6F:EA:C2:7E:D1:F8:16:0F:48
Authority key identifier: 4D:15:27:D1:83:9B:F8:30:36:0D:71:59:01:34:35:4E:6D:90:46:97
Certificate issuer: /CN=4d1527d1839bf830360d71590134354e6d904697
Certificate serial: 019D28F2A420523A4A85A87991E05892E9CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 07:01:23 +0000
Manifest this update: Thu 26 Mar 2026 07:01:23 +0000
Manifest next update: Fri 27 Mar 2026 07:01:23 +0000
Files and hashes: 1: 5IRwRfh8Fym_BtVi99L5BSoQylk.roa (hash: zVO1DYlBvdQtHAVcl2WpceQxT4SVa8kf2zP0TMDOH1A=)
2: TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl (hash: ni8DwCJ0ZSIBnIyTQTShURTnN/ysjakaovsUCme/IAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:a4:20:52:3a:4a:85:a8:79:91:e0:58:92:e9:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d1527d1839bf830360d71590134354e6d904697
Validity
Not Before: Mar 26 07:01:23 2026 GMT
Not After : Mar 27 07:01:23 2026 GMT
Subject: CN=ed9ae47a7368d945c916696feac27ed1f8160f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1f:68:8f:a6:cf:82:ad:f1:60:64:0c:cc:1a:
03:79:53:0b:3f:33:88:35:3f:4d:be:33:d0:84:4d:
7a:2c:4e:fc:c4:c4:e5:f2:1e:f6:74:d2:e8:58:51:
a4:47:b0:29:48:83:01:82:e9:bc:b8:ba:91:7d:b8:
7f:dc:76:3a:60:93:b3:52:4f:70:88:fa:51:2d:52:
de:ca:82:92:fa:d9:d4:26:8a:11:7a:3b:f5:92:0f:
ad:bb:6b:43:f4:37:42:cd:31:e8:a6:ce:4a:a3:01:
63:de:8d:18:bc:45:44:5a:87:f6:88:e9:86:a0:15:
c2:7a:31:2a:ed:6e:8b:5a:36:51:96:5f:97:09:af:
a7:ea:43:1f:a0:b9:12:17:92:06:83:dd:e3:42:c4:
07:8e:e5:29:52:8f:1e:21:90:c9:41:ae:0c:ac:31:
9a:1e:6e:cd:b9:ad:54:03:e0:b3:6c:61:bf:9c:d5:
76:41:d4:50:1e:a0:73:fd:3a:b7:38:2d:ae:64:b2:
bc:9f:58:b7:4e:fb:f0:25:70:7e:94:56:be:28:2f:
d7:ff:ad:b4:66:c3:4a:b1:e4:97:e3:62:66:3e:21:
b1:a3:ba:57:1e:98:d9:10:ff:4b:b6:39:4e:31:f4:
48:87:d9:d8:59:8b:2a:57:bb:e2:ee:ea:e1:05:5f:
9d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9A:E4:7A:73:68:D9:45:C9:16:69:6F:EA:C2:7E:D1:F8:16:0F:48
X509v3 Authority Key Identifier:
keyid:4D:15:27:D1:83:9B:F8:30:36:0D:71:59:01:34:35:4E:6D:90:46:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:e7:c3:4a:90:eb:8f:09:ae:94:27:a1:47:c0:8d:38:b4:f1:
59:04:af:93:71:79:26:dd:66:96:29:88:8e:46:44:12:29:0e:
bb:47:30:0d:2c:3c:fa:2b:de:a7:65:df:57:ea:1c:14:07:e8:
3a:a5:61:ac:b5:b9:7c:48:c2:e4:60:eb:fb:89:b6:ec:82:a7:
a5:1d:51:2e:91:45:fe:de:cd:9e:a1:eb:21:c0:98:b3:59:51:
ae:18:ee:27:f2:1d:3c:54:29:4a:55:09:50:b5:71:90:e9:e6:
b1:b7:18:68:30:e3:e5:c8:93:6c:3b:f8:1b:cd:72:fd:4e:2d:
ac:ef:a7:6d:cb:57:31:51:4a:06:87:d8:20:ca:b1:6c:6a:b5:
76:c0:66:af:c9:5d:f8:46:0e:7a:2b:a1:f9:49:53:89:e2:dd:
06:19:59:61:0c:fd:6c:52:42:d7:f1:9d:84:f3:e1:dc:0c:7b:
d4:ea:07:1f:e9:c2:33:3c:cc:dd:00:b5:96:98:b3:0d:32:65:
59:5a:27:47:20:1d:92:11:34:31:af:f7:93:d9:f0:ef:22:8f:
3d:a0:9e:3c:96:a1:f7:ce:95:26:95:b4:7a:17:76:da:29:3e:
90:ec:cc:59:d2:65:7f:e6:ba:2f:94:7b:42:25:0a:31:7d:4f:
45:df:7f:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8qQgUjpKhah5keBYkunLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMTUyN2QxODM5YmY4MzAzNjBkNzE1OTAxMzQzNTRlNmQ5
MDQ2OTcwHhcNMjYwMzI2MDcwMTIzWhcNMjYwMzI3MDcwMTIzWjAzMTEwLwYDVQQD
EyhlZDlhZTQ3YTczNjhkOTQ1YzkxNjY5NmZlYWMyN2VkMWY4MTYwZjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAth9oj6bPgq3xYGQMzBoDeVMLPzOI
NT9NvjPQhE16LE78xMTl8h72dNLoWFGkR7ApSIMBgum8uLqRfbh/3HY6YJOzUk9w
iPpRLVLeyoKS+tnUJooRejv1kg+tu2tD9DdCzTHops5KowFj3o0YvEVEWof2iOmG
oBXCejEq7W6LWjZRll+XCa+n6kMfoLkSF5IGg93jQsQHjuUpUo8eIZDJQa4MrDGa
Hm7Nua1UA+CzbGG/nNV2QdRQHqBz/Tq3OC2uZLK8n1i3TvvwJXB+lFa+KC/X/620
ZsNKseSX42JmPiGxo7pXHpjZEP9LtjlOMfRIh9nYWYsqV7vi7urhBV+d9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2a5HpzaNlFyRZpb+rCftH4Fg9IMB8GA1UdIwQY
MBaAFE0VJ9GDm/gwNg1xWQE0NU5tkEaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFJVbjBZT2ItREEyRFhGWkFUUTFUbTJRUnBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8zMDlkMzYtYzQyMC00MzIxLTk1NDAt
ZjNkZjY3M2VhNThjLzEvVFJVbjBZT2ItREEyRFhGWkFUUTFUbTJRUnBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8zMDlkMzYtYzQyMC00MzIxLTk1NDAtZjNkZjY3M2VhNThj
LzEvVFJVbjBZT2ItREEyRFhGWkFUUTFUbTJRUnBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARufDSpDr
jwmulCehR8CNOLTxWQSvk3F5Jt1mlimIjkZEEikOu0cwDSw8+ivep2XfV+ocFAfo
OqVhrLW5fEjC5GDr+4m27IKnpR1RLpFF/t7NnqHrIcCYs1lRrhjuJ/IdPFQpSlUJ
ULVxkOnmsbcYaDDj5ciTbDv4G81y/U4trO+nbctXMVFKBofYIMqxbGq1dsBmr8ld
+EYOeiuh+UlTieLdBhlZYQz9bFJC1/GdhPPh3Ax71OoHH+nCMzzM3QC1lpizDTJl
WVonRyAdkhE0Ma/3k9nw7yKPPaCePJah986VJpW0ehd22ik+kOzMWdJlf+a6L5R7
QiUKMX1PRd9/cA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:10:40 2026 by rpki-client