Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
File: taxpm1SgKHKkLwwJkmxHBuceMgM.mft (raw, json)
Hash identifier: BlVWqVqi561g6u/BUetEpf42QTQf56Ropi7Y3cpXqt8=
Subject key identifier: D9:2A:5F:4C:1C:28:8A:0D:5F:03:40:28:92:A3:E2:A8:74:F3:6C:68
Authority key identifier: B5:AC:69:9B:54:A0:28:72:A4:2F:0C:09:92:6C:47:06:E7:1E:32:03
Certificate issuer: /CN=b5ac699b54a02872a42f0c09926c4706e71e3203
Certificate serial: 019D2583E9DDFD7BFD58DB4EC78AD2B30628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
Manifest number: 0724
Signing time: Wed 25 Mar 2026 15:01:35 +0000
Manifest this update: Wed 25 Mar 2026 15:01:35 +0000
Manifest next update: Thu 26 Mar 2026 15:01:35 +0000
Files and hashes: 1: UlU02LC4n2pDDDLWDfGKbBexvUQ.roa (hash: 1DEZfsrrVxXltp/RRFJK80hKK2fgGVXeXhVVxwfDsss=)
2: taxpm1SgKHKkLwwJkmxHBuceMgM.crl (hash: thh9zBVzLeYQO+ZtEhJndI+2USoFDVonP69GL8mZFFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:e9:dd:fd:7b:fd:58:db:4e:c7:8a:d2:b3:06:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5ac699b54a02872a42f0c09926c4706e71e3203
Validity
Not Before: Mar 25 15:01:35 2026 GMT
Not After : Mar 26 15:01:35 2026 GMT
Subject: CN=d92a5f4c1c288a0d5f03402892a3e2a874f36c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:77:d5:57:71:8d:61:5d:f0:74:9c:4e:18:f0:
dc:e3:3f:e2:87:eb:5e:8b:e6:22:72:9e:50:53:6f:
90:0d:c0:11:9d:36:db:bf:3b:5e:b1:9b:26:53:e0:
67:71:53:07:4e:35:57:0b:04:e0:b2:04:67:3b:b4:
35:92:82:9f:85:58:ab:21:b4:45:ff:2f:db:42:ad:
14:6b:26:a0:fd:42:9e:29:5d:50:15:46:89:14:1d:
3a:fc:f7:1d:3a:4b:b7:07:f1:2a:20:cc:e3:e1:d9:
1c:62:e0:bc:31:7a:23:a1:a0:45:d7:ad:c0:9a:e6:
09:d7:18:d1:4c:25:e0:4b:30:67:e2:f6:cc:19:6b:
2f:fc:4a:8c:46:cd:02:c7:4a:d0:77:a4:84:f6:ff:
f9:3d:8b:58:d3:a6:1a:91:0b:4d:a3:74:9d:ab:ee:
e4:cd:c2:0e:ce:4f:73:c6:32:8f:93:1f:30:f9:b5:
fc:5d:9b:14:60:38:ac:1a:08:3a:b6:da:28:97:e7:
96:7f:ea:d3:58:ea:33:d8:22:62:6c:9c:e3:ea:74:
ad:50:9d:15:87:fb:de:4b:04:54:ab:95:1b:7c:df:
92:b6:d8:14:0c:1d:25:94:f6:4c:d0:52:be:69:54:
de:0e:0a:c0:73:0c:6d:82:ab:d3:be:9d:be:ef:17:
23:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2A:5F:4C:1C:28:8A:0D:5F:03:40:28:92:A3:E2:A8:74:F3:6C:68
X509v3 Authority Key Identifier:
keyid:B5:AC:69:9B:54:A0:28:72:A4:2F:0C:09:92:6C:47:06:E7:1E:32:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f8:8d:59:06:0e:22:93:01:c9:33:8b:7a:6e:74:65:e4:ca:
51:21:b5:fc:32:d9:14:68:de:63:8e:e7:05:6c:79:c1:e4:99:
2b:c3:c1:46:43:b6:aa:ed:f9:49:b3:9b:17:15:cd:9b:0a:ef:
95:ec:1c:89:73:8b:31:25:35:5a:99:63:12:f8:a0:f7:ab:0e:
08:43:fa:2c:75:30:e2:cf:ed:30:66:ef:43:b6:8b:7f:ad:b4:
3b:55:8b:2f:6d:c4:5a:3c:3a:27:db:fa:93:ed:54:7a:0f:74:
b4:92:4a:7e:0e:e4:88:0a:0f:08:04:a6:5d:c3:7f:34:82:e9:
ca:df:4e:e7:fc:d7:b6:26:bd:f1:cc:7e:af:a3:a4:6b:84:b7:
8e:d9:67:dc:d5:63:13:fc:25:0e:03:71:e5:8b:28:e3:06:ab:
28:ee:6b:51:48:9f:43:09:80:fe:f9:16:3a:8d:c9:55:bb:c9:
31:92:f9:49:3b:cc:63:93:24:68:36:81:7a:fa:47:57:cc:f9:
95:0f:dc:71:eb:b0:cf:62:c0:d0:ba:19:41:bf:99:14:ea:61:
7d:f8:dc:e8:48:05:4f:bf:d7:07:39:72:09:8b:cd:0a:f5:63:
e4:c7:31:0c:21:d4:36:9b:25:bd:7b:30:73:81:b9:c7:e4:83:
1a:51:e5:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg+nd/Xv9WNtOx4rSswYoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YWM2OTliNTRhMDI4NzJhNDJmMGMwOTkyNmM0NzA2ZTcx
ZTMyMDMwHhcNMjYwMzI1MTUwMTM1WhcNMjYwMzI2MTUwMTM1WjAzMTEwLwYDVQQD
EyhkOTJhNWY0YzFjMjg4YTBkNWYwMzQwMjg5MmEzZTJhODc0ZjM2YzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXfVV3GNYV3wdJxOGPDc4z/ih+te
i+Yicp5QU2+QDcARnTbbvztesZsmU+BncVMHTjVXCwTgsgRnO7Q1koKfhVirIbRF
/y/bQq0Uayag/UKeKV1QFUaJFB06/PcdOku3B/EqIMzj4dkcYuC8MXojoaBF163A
muYJ1xjRTCXgSzBn4vbMGWsv/EqMRs0Cx0rQd6SE9v/5PYtY06YakQtNo3Sdq+7k
zcIOzk9zxjKPkx8w+bX8XZsUYDisGgg6ttool+eWf+rTWOoz2CJibJzj6nStUJ0V
h/veSwRUq5UbfN+SttgUDB0llPZM0FK+aVTeDgrAcwxtgqvTvp2+7xcjDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNkqX0wcKIoNXwNAKJKj4qh082xoMB8GA1UdIwQY
MBaAFLWsaZtUoChypC8MCZJsRwbnHjIDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGF4cG0xU2dLSEtrTHd3SmtteEhCdWNlTWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi85YjFmODYtMGYzMC00YmI5LTgzMDkt
OTgzN2JjMjJjNzA1LzEvdGF4cG0xU2dLSEtrTHd3SmtteEhCdWNlTWdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi85YjFmODYtMGYzMC00YmI5LTgzMDktOTgzN2JjMjJjNzA1
LzEvdGF4cG0xU2dLSEtrTHd3SmtteEhCdWNlTWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkfiNWQYO
IpMByTOLem50ZeTKUSG1/DLZFGjeY47nBWx5weSZK8PBRkO2qu35SbObFxXNmwrv
lewciXOLMSU1WpljEvig96sOCEP6LHUw4s/tMGbvQ7aLf620O1WLL23EWjw6J9v6
k+1Ueg90tJJKfg7kiAoPCASmXcN/NILpyt9O5/zXtia98cx+r6Oka4S3jtln3NVj
E/wlDgNx5Yso4warKO5rUUifQwmA/vkWOo3JVbvJMZL5STvMY5MkaDaBevpHV8z5
lQ/cceuwz2LA0LoZQb+ZFOphffjc6EgFT7/XBzlyCYvNCvVj5McxDCHUNpslvXsw
c4G5x+SDGlHljQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:40 2026 by rpki-client