Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
File: TAf2nWArfrt_YzDXFcnsPlq6MPo.mft (raw, json)
Hash identifier: Em1L4Ohbew32OvcVIIx8oqmtvd+JIu9N0OsgFOQ1Qtw=
Subject key identifier: 32:C9:6A:B2:8E:00:7E:4C:20:45:2B:5A:63:5C:C7:1B:B0:00:DF:A8
Authority key identifier: 4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA
Certificate issuer: /CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
Certificate serial: 019D2696058373F140A68A2BAF85F2BD5DCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
Manifest number: 0C76
Signing time: Wed 25 Mar 2026 20:00:59 +0000
Manifest this update: Wed 25 Mar 2026 20:00:59 +0000
Manifest next update: Thu 26 Mar 2026 20:00:59 +0000
Files and hashes: 1: 4GpPsuXyTB7mqbStOGGvgQlaA3c.roa (hash: YkMMZt5aZTSuVgtlcIOQUlozXasUkQvk7oFEC+EzncM=)
2: TAf2nWArfrt_YzDXFcnsPlq6MPo.crl (hash: WSgluknXnPe0OM9VhzrWlTrWCodlgXEukVlbNL5sBQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:05:83:73:f1:40:a6:8a:2b:af:85:f2:bd:5d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
Validity
Not Before: Mar 25 20:00:59 2026 GMT
Not After : Mar 26 20:00:59 2026 GMT
Subject: CN=32c96ab28e007e4c20452b5a635cc71bb000dfa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b4:d9:fc:32:e1:28:7b:7d:c7:dd:e1:8c:7b:
27:15:ca:d8:11:3c:d5:1a:07:d3:1f:32:47:5d:e9:
e9:0f:dd:b3:94:9e:99:28:da:3d:36:32:c4:96:f0:
4b:12:d2:80:56:3b:ec:45:80:89:dc:87:af:f1:39:
ed:09:bd:6e:61:19:7a:67:ae:1b:e2:c2:82:f0:2d:
56:dd:3b:8d:61:04:ff:0a:e3:2e:f7:b7:bd:b3:6d:
43:97:58:6b:0c:35:49:c2:07:fc:b2:d3:9f:0c:29:
4e:25:48:5f:3b:ea:b8:71:d1:f4:f5:32:e7:a8:ec:
de:1a:29:ab:26:33:d7:da:ff:a9:2c:07:78:13:ee:
96:9d:b8:47:8b:f4:34:26:a2:60:0b:59:58:d1:4d:
6f:85:dd:be:d2:75:4e:03:70:1a:6c:21:bf:e6:2b:
9a:aa:04:27:58:94:b0:a0:26:a3:58:ed:ad:0e:5f:
31:05:38:63:0b:f1:f4:28:a0:75:3e:1d:82:66:98:
d1:d3:bb:b3:f0:07:23:b6:b5:6c:ae:e0:94:97:38:
b6:fd:ce:1e:71:ee:7c:8a:f6:9d:90:e1:ac:b1:95:
50:d0:b5:ed:a8:7f:e1:29:be:f2:80:e8:b8:1b:50:
2f:20:01:33:c4:74:1b:7e:0c:95:80:5f:b6:68:8b:
d0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C9:6A:B2:8E:00:7E:4C:20:45:2B:5A:63:5C:C7:1B:B0:00:DF:A8
X509v3 Authority Key Identifier:
keyid:4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:cb:33:b6:e1:a3:03:08:93:b2:20:ba:0f:57:47:f7:a8:30:
24:4a:c8:ca:a7:2d:68:0a:9f:7b:f9:bf:72:93:fd:08:e2:e3:
51:19:c8:5b:c9:bf:46:80:32:06:b9:fa:ef:f3:db:11:d4:64:
4e:08:03:ca:07:53:e7:8c:ab:05:4a:2d:41:ab:3c:69:48:6c:
09:76:bb:f8:1f:51:89:4f:2e:e2:ab:f0:97:cd:18:3f:a9:75:
c7:b1:f9:74:a4:b1:75:d3:7e:d8:df:dd:43:71:96:14:49:75:
71:95:dc:08:c5:51:87:2d:7e:e3:95:11:37:60:c4:5a:29:73:
ff:2e:bd:08:d0:e5:9c:e6:5a:40:90:11:27:8f:cc:99:bc:1c:
ef:e6:c5:5c:e5:de:d7:c8:79:f3:12:d9:73:14:6f:22:b9:fc:
20:6b:f2:68:b3:93:83:0a:a5:98:21:c9:82:b8:a8:72:3a:81:
8b:9f:6e:73:0e:1b:e6:96:9d:6c:6b:9f:7b:be:39:f8:2d:c9:
cd:e0:ce:44:1a:dc:c3:e8:fb:b6:ba:df:66:c5:28:59:dc:36:
82:07:0a:f9:e5:c6:ed:55:22:59:16:96:9c:c4:b4:a0:aa:e0:
41:f8:7f:89:c8:35:e2:6d:3f:3d:94:80:85:94:88:7e:54:7b:
6f:c3:84:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:40 2026 by rpki-client