Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
File: trJJosVixe29t1BY4mvXcBI-la4.mft (raw, json)
Hash identifier: HOqRQK3cg0RhDlU1PMupWqIL0r/mt26VM5MNAwBi77M=
Subject key identifier: 4E:E5:B3:45:F0:B0:E3:AD:35:96:EA:19:EC:DA:CF:01:6E:94:BE:09
Authority key identifier: B6:B2:49:A2:C5:62:C5:ED:BD:B7:50:58:E2:6B:D7:70:12:3E:95:AE
Certificate issuer: /CN=b6b249a2c562c5edbdb75058e26bd770123e95ae
Certificate serial: 019D2996C2E6CC0A3D3355833CFAA3E26514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
Manifest number: 151A
Signing time: Thu 26 Mar 2026 10:00:39 +0000
Manifest this update: Thu 26 Mar 2026 10:00:39 +0000
Manifest next update: Fri 27 Mar 2026 10:00:39 +0000
Files and hashes: 1: 6RygQ5X9m4wR38_i9WAiO4if2HM.roa (hash: kUWQpysYJq9PoXLRmw04AY/W59nDN80L6l7bNKqqxYU=)
2: trJJosVixe29t1BY4mvXcBI-la4.crl (hash: Re7tsU+mX7NitmVZakDmRuddgNK7gERiuM5LPuLMn64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:c2:e6:cc:0a:3d:33:55:83:3c:fa:a3:e2:65:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6b249a2c562c5edbdb75058e26bd770123e95ae
Validity
Not Before: Mar 26 10:00:39 2026 GMT
Not After : Mar 27 10:00:39 2026 GMT
Subject: CN=4ee5b345f0b0e3ad3596ea19ecdacf016e94be09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:76:b8:08:e1:31:e7:e1:eb:1a:3a:d4:93:9f:
76:d6:d0:a5:5b:5e:05:38:fd:ed:30:5f:46:91:46:
ce:df:5e:11:a4:80:3c:93:5c:62:0f:ef:fe:c9:d7:
0e:e4:f1:ec:1a:e0:90:60:96:ab:89:e5:49:4b:61:
80:ad:86:2e:2e:07:f8:5b:ca:83:7e:39:37:bd:9c:
0d:29:dc:d8:eb:cc:48:4d:74:a0:54:47:0e:e0:45:
a8:0f:f5:dd:67:e3:bb:b5:e4:1c:64:01:28:31:14:
92:7d:4f:7f:01:a7:21:ad:cc:9e:3f:2a:f9:b2:cd:
c1:94:31:ea:81:3b:4d:de:43:85:53:7b:d8:c1:fa:
78:3d:0e:77:c6:22:a6:cb:18:86:6c:c0:cc:ca:a8:
85:0b:8f:0c:8c:06:86:a4:74:04:79:4d:7c:90:20:
67:71:45:51:de:3d:eb:6f:71:09:59:98:a4:70:1f:
6a:62:a9:c5:a3:b5:e9:b2:89:35:1b:61:15:34:6b:
c2:24:73:4a:83:ea:ce:11:df:19:43:10:b1:79:09:
5e:80:03:34:9c:18:81:17:25:d8:ff:7c:85:d2:0a:
9b:4a:be:58:b0:72:20:36:78:8a:3d:07:eb:50:da:
04:3b:33:6d:23:17:58:63:c1:aa:ca:a1:08:d5:ee:
37:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E5:B3:45:F0:B0:E3:AD:35:96:EA:19:EC:DA:CF:01:6E:94:BE:09
X509v3 Authority Key Identifier:
keyid:B6:B2:49:A2:C5:62:C5:ED:BD:B7:50:58:E2:6B:D7:70:12:3E:95:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:55:75:f8:6a:e1:6f:dc:13:03:71:9a:c1:78:68:d5:ed:51:
ab:ee:50:d2:9f:b8:90:8d:dd:12:d6:5e:30:5f:5b:d6:83:b9:
d4:17:d8:1f:33:79:07:3f:34:16:9e:ac:9a:0b:be:c9:66:7a:
14:91:8a:28:c8:6c:fc:c6:55:d4:55:f2:d4:1c:11:e5:42:c5:
80:c7:62:10:35:ea:2f:f1:1d:90:97:b0:66:57:10:fb:2c:24:
28:b1:c6:c0:a3:bc:3d:f8:7e:f8:4b:ce:43:50:41:d1:da:36:
52:1e:b6:8b:56:12:02:d4:c5:91:76:86:57:eb:1c:33:14:b5:
ba:9a:20:ae:a2:29:5f:c4:f4:33:73:5f:5d:bf:fa:bf:76:38:
2d:fd:0d:b3:a8:b7:cd:f8:fb:19:e9:f7:8e:e6:4f:70:96:00:
32:f0:50:ac:b7:95:1e:82:8c:a6:25:30:c6:72:fa:7c:5a:ef:
59:44:93:28:bf:43:bb:0a:a1:47:63:90:34:bf:93:4e:5e:93:
55:76:15:1c:63:47:38:d8:ea:c8:24:2c:6a:e4:ca:5e:62:26:
15:37:ae:0a:26:dc:de:12:e9:6b:49:78:1a:8d:c2:92:c0:a5:
4c:63:7d:33:75:12:53:11:91:6f:b1:ea:aa:04:ec:11:d3:4e:
f8:e8:3b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:54:30 2026 by rpki-client