Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
File: TaTWGZrsgo9pieLoTOwXdlusXNU.mft (raw, json)
Hash identifier: PMU3PbcR36re2EQL0u50uzwPIxh4FukmwvqCFpZK7fI=
Subject key identifier: F7:80:5B:F1:C8:17:25:D6:00:29:07:7F:B4:F0:DE:D3:CC:11:2F:B0
Authority key identifier: 4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5
Certificate issuer: /CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
Certificate serial: 01A0F1C2D3F5C9D22F5CA5126D4BC6211527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
Manifest number: 1A84
Signing time: Wed 30 Sep 2026 10:01:12 +0000
Manifest this update: Wed 30 Sep 2026 10:01:12 +0000
Manifest next update: Thu 01 Oct 2026 10:01:12 +0000
Files and hashes: 1: TaTWGZrsgo9pieLoTOwXdlusXNU.crl (hash: P5GaxbOaFIajbZ/BgpegShitAugUi407owVg2cRfw5s=)
2: TgOSFEfASWDSpD8EkyKS9nujPiY.roa (hash: 0PwFXdbWv8R/ss2S++46JT4vsGX/tK0Xl7tQX+Eh9g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 09:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:c2:d3:f5:c9:d2:2f:5c:a5:12:6d:4b:c6:21:15:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
Validity
Not Before: Sep 30 10:01:12 2026 GMT
Not After : Oct 1 10:01:12 2026 GMT
Subject: CN=f7805bf1c81725d60029077fb4f0ded3cc112fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:56:69:c5:11:50:dd:c6:a7:9c:e1:be:b2:1a:
0b:40:e5:92:1b:83:86:f1:b0:7c:9a:f6:8f:6b:82:
9d:03:74:c4:6b:b7:fa:9a:c1:14:65:55:54:36:49:
7e:a5:16:bf:92:82:f1:1f:9a:b9:2f:ec:8e:f9:f6:
9c:58:da:49:4d:a5:c0:9b:7e:ef:0f:ba:e0:ec:44:
72:b5:5d:1a:5f:41:ae:31:1d:e8:a5:e3:d3:e1:d1:
91:0c:d8:4e:25:37:96:30:23:00:a8:30:fa:b1:48:
ee:d1:ee:01:2f:a0:db:2d:af:62:5b:4d:de:03:64:
b5:1b:af:33:f9:09:53:5f:d2:13:a7:e2:90:90:e0:
e3:73:7c:e6:f9:ba:e2:4d:0e:22:7c:35:f4:d3:5b:
a6:5b:4f:31:af:12:e2:c8:2e:c8:6f:09:1b:66:33:
ab:15:3d:54:3b:47:fa:f7:8e:ac:f5:35:f8:50:80:
20:c7:58:0f:38:3a:da:11:23:63:64:15:93:6c:e3:
f5:df:97:30:00:84:ec:af:c1:ea:c8:8d:8e:b0:0b:
fe:91:6b:67:8f:c9:35:48:f5:51:45:44:ba:2c:cd:
6d:69:08:c2:ec:0e:ac:ac:c2:5a:4f:e3:36:1e:13:
d1:83:ee:f2:3f:ea:86:6e:e5:a9:71:cf:3b:e8:39:
e9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:80:5B:F1:C8:17:25:D6:00:29:07:7F:B4:F0:DE:D3:CC:11:2F:B0
X509v3 Authority Key Identifier:
keyid:4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:7a:e5:7d:03:46:b2:81:d8:13:0f:e7:19:81:a6:e5:ad:a6:
f8:f2:90:98:8e:ec:aa:23:36:bc:42:8f:57:aa:d2:6c:c6:01:
06:92:91:99:18:a7:af:e8:2d:03:f1:51:0c:7f:f1:cc:15:af:
82:b1:9d:e6:6e:d3:7f:13:5a:bf:be:eb:7d:23:fc:c4:a6:b6:
6a:58:6e:ac:1e:59:a5:96:4c:c8:75:ce:a9:94:af:8c:eb:0d:
9e:f4:09:1d:b4:7e:4b:7a:f5:c1:7e:48:37:f0:83:07:2a:44:
88:21:28:9a:19:5e:c1:50:b7:29:29:30:41:0d:26:15:8b:43:
ee:4e:8d:5c:a4:c2:ef:84:ec:04:87:e7:e1:18:58:c9:32:20:
d1:bb:16:3a:0e:01:f4:dc:aa:a8:89:f3:b0:e7:73:5e:40:87:
80:7b:fb:a6:69:cc:b8:3c:6b:70:3b:17:53:df:30:26:8e:a2:
a6:10:bb:0e:23:4a:bd:61:b6:40:b4:03:60:02:ee:6e:12:55:
1b:09:7d:f5:9a:bb:d6:35:60:93:3d:8c:fc:e9:20:6a:44:49:
f5:16:97:89:60:da:21:df:4b:0d:0c:a0:a2:93:0b:ce:87:68:
d7:a9:e8:a6:f5:16:b8:83:ab:d0:5c:eb:e2:e7:b9:34:d0:ae:
0a:04:71:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 17:08:15 2026 by rpki-client