Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
File: TaTWGZrsgo9pieLoTOwXdlusXNU.mft (raw, json)
Hash identifier: oohCuiWaHAKGnZgzJlmUaB8/tDQdC6C79++A4DW2o8U=
Subject key identifier: 1A:26:2F:5B:5F:E8:12:6C:A3:AE:9F:AE:AF:EA:B7:7D:94:E3:D5:10
Authority key identifier: 4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5
Certificate issuer: /CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
Certificate serial: 019D265FDCFE148AB62B6B3BFE2EE7F29018
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
Manifest number: 188D
Signing time: Wed 25 Mar 2026 19:01:49 +0000
Manifest this update: Wed 25 Mar 2026 19:01:49 +0000
Manifest next update: Thu 26 Mar 2026 19:01:49 +0000
Files and hashes: 1: TaTWGZrsgo9pieLoTOwXdlusXNU.crl (hash: N/iY/pp9Oy30x5Gwyxe+vDONHeFMX4WWChH8CNIwM2k=)
2: TgOSFEfASWDSpD8EkyKS9nujPiY.roa (hash: 0PwFXdbWv8R/ss2S++46JT4vsGX/tK0Xl7tQX+Eh9g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:dc:fe:14:8a:b6:2b:6b:3b:fe:2e:e7:f2:90:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
Validity
Not Before: Mar 25 19:01:49 2026 GMT
Not After : Mar 26 19:01:49 2026 GMT
Subject: CN=1a262f5b5fe8126ca3ae9faeafeab77d94e3d510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1a:a4:08:2b:0b:56:cb:29:db:a3:16:95:ed:
3b:ee:22:02:53:b5:b9:1c:17:20:e7:f0:9f:7c:ca:
e1:57:4f:b2:87:1e:4d:f3:a2:e8:00:d9:b5:09:00:
67:48:a2:b8:bd:af:c3:cc:fa:03:c1:da:da:22:38:
94:23:5c:c2:6f:00:eb:96:08:7a:c3:a1:58:78:64:
08:ce:dd:b2:e9:d8:9c:88:1a:13:00:e1:03:fc:ed:
19:19:cf:d2:a7:c1:37:ec:65:53:c2:35:43:d7:af:
82:dc:2d:5a:b8:7b:0e:71:d4:cd:a1:f0:b0:b3:a9:
64:2a:f5:bc:94:32:22:c9:40:f9:53:8e:cf:54:49:
ff:1d:dc:fe:aa:a1:0a:b5:0f:5e:c0:91:c1:3c:9d:
de:cd:51:a9:26:c2:67:d6:f0:bf:44:69:25:a0:e6:
e4:12:c4:77:42:09:59:60:c5:cb:e1:fc:9d:a5:38:
c9:69:e4:f5:70:a0:42:53:b1:76:9c:be:b7:24:34:
9e:ca:99:50:25:18:cc:c5:60:dc:b9:7d:08:94:d9:
ec:0e:eb:d8:69:e2:ec:42:93:b6:5e:e7:95:57:a4:
35:54:bf:4f:d5:97:67:22:a3:87:f5:a3:5f:a7:54:
45:14:39:a4:18:d5:17:5d:7c:8a:c4:ad:79:2a:72:
e3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:26:2F:5B:5F:E8:12:6C:A3:AE:9F:AE:AF:EA:B7:7D:94:E3:D5:10
X509v3 Authority Key Identifier:
keyid:4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:2a:20:ca:bd:17:ab:b1:b5:d5:e3:61:f3:c8:58:63:9e:4e:
7c:3a:9c:f2:3b:e9:62:f8:85:24:70:b0:e9:bc:4b:d6:66:d2:
5c:ad:52:ad:be:4e:5a:75:74:93:79:42:ac:8f:1d:28:92:e4:
ad:a1:62:21:13:42:bb:7f:44:7a:55:2d:c1:7c:b1:95:72:47:
d4:76:b8:55:c9:6f:07:1f:58:df:55:cb:94:e9:e1:8a:f7:22:
ec:29:d6:07:6c:02:38:56:85:10:85:5d:f6:9d:1a:ec:f0:eb:
a4:81:ab:e7:2a:49:23:68:65:d9:37:ce:ff:ad:09:59:12:7e:
40:61:e7:87:2f:4a:43:0d:2e:2b:26:5c:57:e8:b6:43:5f:2d:
c7:d9:52:a5:a8:64:6f:6e:34:86:40:19:30:95:8d:b8:93:a9:
01:38:ae:39:b1:bb:46:0a:6f:d1:2a:bd:87:c6:e8:77:fb:f0:
2f:9c:90:96:25:32:77:b0:ff:1f:e5:65:04:f3:7d:7c:c8:56:
14:eb:d5:39:72:4c:4f:6c:12:03:1d:f5:e5:71:f1:11:88:f5:
59:34:de:a4:14:52:3b:dc:63:09:cb:63:e3:74:2b:6f:87:24:
d5:cd:d3:f7:0b:62:17:18:54:2d:e6:a8:cf:b8:ca:f9:b2:8d:
51:c4:af:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX9z+FIq2K2s7/i7n8pAYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYTRkNjE5OWFlYzgyOGY2OTg5ZTJlODRjZWMxNzc2NWJh
YzVjZDUwHhcNMjYwMzI1MTkwMTQ5WhcNMjYwMzI2MTkwMTQ5WjAzMTEwLwYDVQQD
EygxYTI2MmY1YjVmZTgxMjZjYTNhZTlmYWVhZmVhYjc3ZDk0ZTNkNTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBqkCCsLVssp26MWle077iICU7W5
HBcg5/CffMrhV0+yhx5N86LoANm1CQBnSKK4va/DzPoDwdraIjiUI1zCbwDrlgh6
w6FYeGQIzt2y6diciBoTAOED/O0ZGc/Sp8E37GVTwjVD16+C3C1auHsOcdTNofCw
s6lkKvW8lDIiyUD5U47PVEn/Hdz+qqEKtQ9ewJHBPJ3ezVGpJsJn1vC/RGkloObk
EsR3QglZYMXL4fydpTjJaeT1cKBCU7F2nL63JDSeyplQJRjMxWDcuX0IlNnsDuvY
aeLsQpO2XueVV6Q1VL9P1ZdnIqOH9aNfp1RFFDmkGNUXXXyKxK15KnLjawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBomL1tf6BJso66frq/qt32U49UQMB8GA1UdIwQY
MBaAFE2k1hma7IKPaYni6EzsF3ZbrFzVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGFUV0dacnNnbzlwaWVMb1RPd1hkbHVzWE5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yYzg0ODItNTMzMS00ZTU3LTk5NzQt
NDA4MzdkNDg0NzNkLzEvVGFUV0dacnNnbzlwaWVMb1RPd1hkbHVzWE5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8yYzg0ODItNTMzMS00ZTU3LTk5NzQtNDA4MzdkNDg0NzNk
LzEvVGFUV0dacnNnbzlwaWVMb1RPd1hkbHVzWE5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACSogyr0X
q7G11eNh88hYY55OfDqc8jvpYviFJHCw6bxL1mbSXK1Srb5OWnV0k3lCrI8dKJLk
raFiIRNCu39EelUtwXyxlXJH1Ha4VclvBx9Y31XLlOnhivci7CnWB2wCOFaFEIVd
9p0a7PDrpIGr5ypJI2hl2TfO/60JWRJ+QGHnhy9KQw0uKyZcV+i2Q18tx9lSpahk
b240hkAZMJWNuJOpATiuObG7Rgpv0Sq9h8bod/vwL5yQliUyd7D/H+VlBPN9fMhW
FOvVOXJMT2wSAx315XHxEYj1WTTepBRSO9xjCctj43Qrb4ck1c3T9wtiFxhULeao
z7jK+bKNUcSvHA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:58 2026 by rpki-client