Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.mft
File: tr3oeUsKDYj5KWf1CE5MOBmWE6A.mft (raw, json)
Hash identifier: +zqB6rknUJ4bGhZ2uD2572f1113mcdaBIdyFVZJ82EA=
Subject key identifier: 67:1C:B9:47:E1:4D:9B:A4:2E:44:33:6A:49:3A:5B:3D:F5:D6:CF:95
Authority key identifier: B6:BD:E8:79:4B:0A:0D:88:F9:29:67:F5:08:4E:4C:38:19:96:13:A0
Certificate issuer: /CN=b6bde8794b0a0d88f92967f5084e4c38199613a0
Certificate serial: 019E2091A83917F2A734C2DBE66701666A5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tr3oeUsKDYj5KWf1CE5MOBmWE6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.mft
Manifest number: 0190
Signing time: Wed 13 May 2026 09:01:17 +0000
Manifest this update: Wed 13 May 2026 09:01:17 +0000
Manifest next update: Thu 14 May 2026 09:01:17 +0000
Files and hashes: 1: tr3oeUsKDYj5KWf1CE5MOBmWE6A.crl (hash: e+6pk/ixNnbH+2tlCksB9MQ0pJKPSjFJAtlXsERU5JQ=)
2: ukIbrLUvPtIxZ5wtDHPd0BjbBfs.roa (hash: 4R245tMXj5hWTZh+CwuGNWMTCAhfqI5ky1f9sYscEcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tr3oeUsKDYj5KWf1CE5MOBmWE6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 09:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:a8:39:17:f2:a7:34:c2:db:e6:67:01:66:6a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6bde8794b0a0d88f92967f5084e4c38199613a0
Validity
Not Before: May 13 09:01:17 2026 GMT
Not After : May 14 09:01:17 2026 GMT
Subject: CN=671cb947e14d9ba42e44336a493a5b3df5d6cf95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d5:4d:f4:7a:b5:f3:e3:cb:af:61:c9:e5:a3:
cc:76:5b:0d:9e:10:37:5c:fa:9c:00:4d:a9:bf:9c:
d3:07:53:02:a9:42:0c:5e:b0:8c:24:ad:90:07:f0:
4d:41:b8:1d:ac:6d:c4:d0:37:ba:aa:80:e7:b7:0d:
a1:a3:2a:f2:58:96:53:b2:86:d2:85:00:84:ac:69:
7e:f4:f4:67:71:f6:f4:84:49:6c:42:f7:11:f5:00:
31:87:54:27:a0:be:16:fa:ba:a0:f0:75:8e:2d:cf:
a9:df:5d:01:6f:25:88:45:b4:ef:ff:e2:03:ae:78:
1b:a8:3f:32:e1:42:02:e9:9d:ae:2b:39:b9:df:6e:
80:c9:cc:73:1b:fa:7e:d2:20:a8:10:33:31:2d:06:
c3:19:b1:ef:bf:de:a7:27:c0:2b:00:c2:63:74:da:
32:aa:84:a6:0c:b2:c3:09:cb:da:4c:fe:3a:9f:47:
1f:a5:39:93:a0:01:bc:85:80:fd:d4:b9:6b:87:be:
34:a7:7f:bc:fe:58:4e:a2:60:96:20:59:04:36:47:
d6:a2:13:88:d8:52:21:64:a5:2f:b7:75:e3:e8:50:
47:3e:92:4a:7f:a4:85:87:46:5c:c8:11:7a:6d:31:
6e:eb:63:66:42:f4:5a:d1:9c:c5:92:3c:e7:27:2b:
50:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1C:B9:47:E1:4D:9B:A4:2E:44:33:6A:49:3A:5B:3D:F5:D6:CF:95
X509v3 Authority Key Identifier:
keyid:B6:BD:E8:79:4B:0A:0D:88:F9:29:67:F5:08:4E:4C:38:19:96:13:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tr3oeUsKDYj5KWf1CE5MOBmWE6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:db:e8:37:58:a2:05:02:48:c1:58:ca:9f:a2:ff:06:97:0b:
b0:e4:e7:e1:1a:74:d4:e2:97:10:8b:00:04:5a:fa:87:b7:3a:
b2:71:8f:45:82:b9:7a:47:08:25:6c:d5:96:0a:1a:b1:15:58:
ca:6a:95:78:2b:54:4e:57:a1:12:12:e4:c2:00:ec:57:d2:ca:
74:4c:65:e9:24:0b:58:89:7f:88:86:65:25:9f:fa:5b:78:22:
e5:ba:e6:35:59:a0:ca:4b:24:a0:bf:e7:61:3a:16:02:2c:6e:
c9:40:91:5a:40:7c:30:68:07:86:ee:e6:64:e2:06:51:6f:c4:
4b:0a:f6:ad:97:b3:2f:d5:08:88:5d:05:8d:da:e0:38:e0:ac:
af:84:ec:95:d3:58:5c:6d:cf:0f:68:d5:14:f9:17:13:f6:0e:
21:f4:98:38:e3:f3:ef:6f:ca:30:ed:ca:e7:b0:31:0d:9f:f9:
46:1e:4b:78:01:e1:a5:d3:bb:c1:e8:86:22:72:fd:ed:ae:90:
f7:a9:95:2c:0d:93:e4:b4:c1:db:21:a4:82:ce:09:69:23:fe:
8d:78:c2:4c:da:30:86:ff:03:08:fa:d5:07:07:24:f9:5c:c5:
1a:cb:2f:36:c3:8e:2c:d3:b3:a4:2c:c0:2f:5d:78:bf:a3:62:
7a:fb:88:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:54:20 2026 by rpki-client