Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
File: trJJosVixe29t1BY4mvXcBI-la4.mft (raw, json)
Hash identifier: 4jyDltDi0yaUx+fZ2zGaZDIlCNpCXnADPaBy5Hrmf5U=
Subject key identifier: 2B:2E:AE:E6:86:BD:9C:4F:AF:03:F2:AC:EB:21:79:A5:62:49:C0:65
Authority key identifier: B6:B2:49:A2:C5:62:C5:ED:BD:B7:50:58:E2:6B:D7:70:12:3E:95:AE
Certificate issuer: /CN=b6b249a2c562c5edbdb75058e26bd770123e95ae
Certificate serial: 01A0F4FB0E696F535CC50274816143CBB3AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
Manifest number: 1711
Signing time: Thu 01 Oct 2026 01:01:28 +0000
Manifest this update: Thu 01 Oct 2026 01:01:28 +0000
Manifest next update: Fri 02 Oct 2026 01:01:28 +0000
Files and hashes: 1: 6RygQ5X9m4wR38_i9WAiO4if2HM.roa (hash: kUWQpysYJq9PoXLRmw04AY/W59nDN80L6l7bNKqqxYU=)
2: trJJosVixe29t1BY4mvXcBI-la4.crl (hash: 1DQMhaPv0xtVKYjPqO1gMkClnzuVJOyYmSKM2p+xE9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 01:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f4:fb:0e:69:6f:53:5c:c5:02:74:81:61:43:cb:b3:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6b249a2c562c5edbdb75058e26bd770123e95ae
Validity
Not Before: Oct 1 01:01:28 2026 GMT
Not After : Oct 2 01:01:28 2026 GMT
Subject: CN=2b2eaee686bd9c4faf03f2aceb2179a56249c065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6a:59:00:73:58:98:64:9b:cd:e7:e4:0d:f7:
31:38:9d:ff:98:b4:d4:09:f7:17:7b:56:c1:b5:30:
25:fa:76:d7:a9:bf:8e:d8:9d:14:2c:68:c9:36:6f:
d6:15:4c:eb:9d:c7:17:94:10:eb:ae:4a:be:14:ec:
9e:8b:2b:c1:43:33:94:8b:1c:c9:07:a6:47:46:f0:
90:a7:66:b2:c1:10:c1:de:88:db:0c:1a:bb:6b:3f:
7a:72:5a:1d:be:4b:7d:e2:36:d4:ec:b5:ba:6f:3b:
a5:64:53:a6:87:99:ca:34:d9:c6:d6:ad:14:f3:0d:
16:13:e0:4d:e6:6b:e6:86:25:48:ed:57:c7:34:04:
63:43:a1:14:1e:64:91:64:b6:92:a5:20:83:e9:e4:
a1:a5:a8:7d:60:29:39:53:09:53:47:3b:c5:23:b9:
54:be:59:c5:ff:95:3b:9b:5b:9c:50:f7:76:b2:80:
68:dc:29:8f:92:94:11:b0:f1:0f:b3:19:b6:48:7d:
65:16:24:93:16:12:e4:45:24:9f:be:62:5b:45:6f:
16:84:4e:63:24:9e:bd:6f:77:8b:e0:6d:1e:df:c9:
33:bb:10:9a:a0:bc:ef:2e:64:70:f0:b2:6c:07:db:
99:3b:76:b7:4a:6c:ce:29:25:79:f6:8f:23:1b:4f:
02:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2E:AE:E6:86:BD:9C:4F:AF:03:F2:AC:EB:21:79:A5:62:49:C0:65
X509v3 Authority Key Identifier:
keyid:B6:B2:49:A2:C5:62:C5:ED:BD:B7:50:58:E2:6B:D7:70:12:3E:95:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:60:be:8e:19:43:26:ca:8c:59:d1:65:0a:57:3c:5f:83:1b:
1a:aa:6c:d5:37:44:54:ef:41:39:b6:1a:6d:33:ce:d4:90:4b:
8a:94:c7:2b:c9:50:48:de:4e:dc:13:c6:2f:26:ff:7f:d5:d0:
27:52:2c:a4:48:f7:5b:cc:b8:47:34:4c:93:87:9d:e4:d8:f5:
bf:f9:0a:24:85:e1:52:56:0d:95:14:43:95:dc:01:a2:09:6f:
f4:8a:67:25:90:13:76:87:eb:46:7f:e6:4f:8c:dc:fc:c2:e8:
03:23:06:18:b9:54:9d:94:60:63:62:ec:16:64:8c:c7:b7:39:
b4:ab:8c:29:8e:d1:61:a4:ef:a7:a0:94:dd:fb:60:9c:d3:d1:
4a:64:26:22:c8:80:ff:d1:b8:b1:fb:52:5f:96:b5:bc:83:ab:
51:5a:11:2e:52:6c:28:b6:f6:da:ff:3d:76:d0:7c:3b:c4:7a:
fa:dd:e4:de:59:8a:ed:28:6c:7e:00:94:3e:b8:3a:1c:ff:2b:
04:34:2d:7e:61:c1:be:b2:8f:71:d5:65:04:b9:6d:63:27:fd:
72:b3:fb:63:4a:59:de:e8:27:22:54:76:27:85:06:07:5c:1b:
0e:ab:c0:a7:ab:3c:59:fe:d3:4a:e1:2d:85:bc:1c:c7:04:2a:
d0:c1:2d:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD0+w5pb1NcxQJ0gWFDy7OvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2YjI0OWEyYzU2MmM1ZWRiZGI3NTA1OGUyNmJkNzcwMTIz
ZTk1YWUwHhcNMjYxMDAxMDEwMTI4WhcNMjYxMDAyMDEwMTI4WjAzMTEwLwYDVQQD
EygyYjJlYWVlNjg2YmQ5YzRmYWYwM2YyYWNlYjIxNzlhNTYyNDljMDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmpZAHNYmGSbzefkDfcxOJ3/mLTU
CfcXe1bBtTAl+nbXqb+O2J0ULGjJNm/WFUzrnccXlBDrrkq+FOyeiyvBQzOUixzJ
B6ZHRvCQp2aywRDB3ojbDBq7az96clodvkt94jbU7LW6bzulZFOmh5nKNNnG1q0U
8w0WE+BN5mvmhiVI7VfHNARjQ6EUHmSRZLaSpSCD6eShpah9YCk5UwlTRzvFI7lU
vlnF/5U7m1ucUPd2soBo3CmPkpQRsPEPsxm2SH1lFiSTFhLkRSSfvmJbRW8WhE5j
JJ69b3eL4G0e38kzuxCaoLzvLmRw8LJsB9uZO3a3SmzOKSV59o8jG08COwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCsuruaGvZxPrwPyrOsheaViScBlMB8GA1UdIwQY
MBaAFLaySaLFYsXtvbdQWOJr13ASPpWuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHJKSm9zVml4ZTI5dDFCWTRtdlhjQkktbGE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80NTViMjYtNmFhMS00MzVmLWJkNDUt
OWNlMzFjMjczMTA4LzEvdHJKSm9zVml4ZTI5dDFCWTRtdlhjQkktbGE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC80NTViMjYtNmFhMS00MzVmLWJkNDUtOWNlMzFjMjczMTA4
LzEvdHJKSm9zVml4ZTI5dDFCWTRtdlhjQkktbGE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWC+jhlD
JsqMWdFlClc8X4MbGqps1TdEVO9BObYabTPO1JBLipTHK8lQSN5O3BPGLyb/f9XQ
J1IspEj3W8y4RzRMk4ed5Nj1v/kKJIXhUlYNlRRDldwBoglv9IpnJZATdofrRn/m
T4zc/MLoAyMGGLlUnZRgY2LsFmSMx7c5tKuMKY7RYaTvp6CU3ftgnNPRSmQmIsiA
/9G4sftSX5a1vIOrUVoRLlJsKLb22v89dtB8O8R6+t3k3lmK7ShsfgCUPrg6HP8r
BDQtfmHBvrKPcdVlBLltYyf9crP7Y0pZ3ugnIlR2J4UGB1wbDqvAp6s8Wf7TSuEt
hbwcxwQq0MEtiw==
-----END CERTIFICATE-----
Generated at Thu Oct 1 11:07:26 2026 by rpki-client