Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
File: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft (raw, json)
Hash identifier: xsHcKxjHGLXZoMS6+WnClB3TOqsAp6cFLK6OAkm7/sY=
Subject key identifier: 4C:09:D5:73:00:80:42:BE:29:F5:0C:D5:F0:36:D7:D2:7E:93:BC:FC
Authority key identifier: 4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE
Certificate issuer: /CN=4da3711dc5de45f2f5b47901659e956d938272fe
Certificate serial: 019D281686F959DEC45F028A09A8554FC1E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 03:00:58 +0000
Manifest this update: Thu 26 Mar 2026 03:00:58 +0000
Manifest next update: Fri 27 Mar 2026 03:00:58 +0000
Files and hashes: 1: QMeWn3NQA2fbA8c1b6eFvzqzvWg.roa (hash: 8sNKEwPOI3VlePsjcLNbwBz/I6kJ5Yh/1lRoX0WjxkU=)
2: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl (hash: 8C2OuMH78MXBoyaStcClNNIy3zY5k3KXUwrdFJ1hk4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:86:f9:59:de:c4:5f:02:8a:09:a8:55:4f:c1:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da3711dc5de45f2f5b47901659e956d938272fe
Validity
Not Before: Mar 26 03:00:58 2026 GMT
Not After : Mar 27 03:00:58 2026 GMT
Subject: CN=4c09d573008042be29f50cd5f036d7d27e93bcfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a0:34:ff:35:4e:ea:a1:84:e3:b5:3f:d1:d6:
81:6f:41:b0:87:0e:bb:13:e9:a4:a8:47:d1:11:23:
5f:73:5b:63:39:34:85:c9:1a:81:5d:c0:15:63:89:
e2:a4:e6:67:5b:4f:12:28:14:86:c8:26:24:fe:e2:
e4:d0:68:8f:50:a3:7f:50:e6:ab:9c:9e:ec:d1:f4:
e4:c4:84:f7:2f:4f:2a:ee:72:f8:71:4e:14:8c:91:
a1:e9:87:15:92:f9:7c:8b:08:b4:d1:8d:35:c3:00:
e0:97:51:62:4d:ab:e5:a0:aa:6c:27:6b:eb:f5:8c:
9b:67:09:2b:b7:53:17:7b:65:9c:07:d0:d3:27:2e:
3d:ba:57:37:c8:ff:f9:49:6f:01:54:a5:89:68:d0:
40:e6:61:61:4d:56:f8:a0:24:65:fc:b0:63:4c:aa:
82:bb:80:b1:fc:bd:e3:1e:90:7f:cc:2e:52:3f:8e:
57:9b:f6:c8:92:ce:25:af:7d:33:0f:c9:69:2c:61:
03:a7:66:53:ab:60:7b:2d:a8:59:58:96:ba:07:59:
79:9b:1e:3a:49:f4:5f:a0:82:1c:5f:c4:fb:9c:ab:
b1:63:c5:db:d0:ce:6e:d1:8f:9c:72:14:51:01:f0:
a2:15:16:a0:9a:c3:1c:60:01:a0:3e:1d:26:41:14:
5b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:09:D5:73:00:80:42:BE:29:F5:0C:D5:F0:36:D7:D2:7E:93:BC:FC
X509v3 Authority Key Identifier:
keyid:4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:2b:2e:95:0f:e5:25:48:82:9c:8d:5e:8d:83:2b:8c:14:8b:
3f:36:db:33:c6:bf:61:88:82:8e:44:6e:14:c9:7a:4b:2d:e1:
a4:66:77:6e:3a:09:0a:1d:82:d0:c8:c3:74:91:32:38:5b:72:
1f:fe:4f:28:63:4a:a9:c4:0d:2e:4e:8a:f2:70:54:a9:32:00:
ed:ba:85:ac:d4:ce:8b:df:9e:63:02:cc:38:25:84:28:8d:57:
19:4b:db:86:ef:3d:1f:4e:35:dd:8e:86:b1:b9:a0:c9:68:cd:
b5:02:d0:c3:5c:e8:d8:01:32:b1:5d:c2:79:d3:e6:cd:c3:89:
ee:ad:37:36:2f:31:43:ad:0b:c7:30:64:51:ed:21:1a:7a:a1:
da:90:81:6f:15:7a:5c:fb:bf:fe:77:5d:bd:fd:dd:11:41:c0:
44:02:e2:68:5a:c3:67:50:41:4d:8e:aa:d1:a9:d4:03:dc:41:
2f:61:dd:75:b2:4b:c5:f0:f0:3c:97:f8:14:b7:2a:c9:f9:21:
4b:76:35:26:fd:63:13:96:7e:4f:4f:ea:55:08:d9:02:9c:d0:
75:55:f7:65:f6:7f:a7:55:92:29:c9:1e:13:a3:28:15:83:d7:
64:80:17:67:9c:b1:ea:45:dc:34:e2:a2:56:41:96:e5:05:43:
9e:5f:fd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:55:43 2026 by rpki-client