Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
File: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft (raw, json)
Hash identifier: /f0hGcHoui1P2gxd51zgqwvGG6DsGx9gyeIEe6Cnpx4=
Subject key identifier: 23:56:05:7D:86:42:AC:7E:86:F5:B5:05:16:BC:B4:EB:32:CB:01:78
Authority key identifier: 4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE
Certificate issuer: /CN=4da3711dc5de45f2f5b47901659e956d938272fe
Certificate serial: 01A0E4075DD32CFCDFBAB36153D7B69C8F93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
Manifest number: 1A76
Signing time: Sun 27 Sep 2026 18:01:23 +0000
Manifest this update: Sun 27 Sep 2026 18:01:23 +0000
Manifest next update: Mon 28 Sep 2026 18:01:23 +0000
Files and hashes: 1: QMeWn3NQA2fbA8c1b6eFvzqzvWg.roa (hash: 8sNKEwPOI3VlePsjcLNbwBz/I6kJ5Yh/1lRoX0WjxkU=)
2: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl (hash: TWRfcBV8aI/BXQ796rGdzlLiYndZgYsB0L14H0gY0Ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:07:5d:d3:2c:fc:df:ba:b3:61:53:d7:b6:9c:8f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da3711dc5de45f2f5b47901659e956d938272fe
Validity
Not Before: Sep 27 18:01:23 2026 GMT
Not After : Sep 28 18:01:23 2026 GMT
Subject: CN=2356057d8642ac7e86f5b50516bcb4eb32cb0178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:67:d7:49:a7:65:72:0a:db:cf:68:ea:8b:08:
40:a7:b2:62:0a:59:0d:91:f4:80:a3:da:dc:14:29:
2f:0f:17:8f:29:1e:8a:ed:2b:66:d2:56:71:9e:dd:
7f:16:62:29:69:9c:cb:08:a9:3f:0e:f0:79:66:71:
6c:bb:62:35:40:bc:71:1b:0d:43:18:6f:7b:28:01:
6f:85:e9:aa:9b:41:f0:6b:95:b7:b5:89:80:b3:6c:
95:a7:0c:87:50:69:c3:50:3e:2d:7a:cf:85:1e:5a:
57:94:40:8a:4c:3c:59:87:17:e6:15:4e:0a:96:e9:
dc:86:92:75:a1:54:e5:dd:fb:34:4a:c0:4f:e4:56:
aa:0c:91:1b:04:b1:e4:6c:b6:85:b4:3c:a8:33:60:
22:e9:d7:93:f7:6b:f6:73:38:49:22:e5:66:19:7a:
af:a2:09:22:d7:39:ba:88:8c:95:81:ae:d1:19:3d:
72:bb:69:9d:6c:72:8f:31:f4:7d:3e:b0:c6:ba:6a:
3b:61:0e:31:f9:a6:1f:15:07:55:83:4f:68:d1:8e:
50:23:4b:5d:67:7a:52:f4:1f:7d:9c:35:cd:39:13:
08:94:6a:eb:6e:dd:73:be:bd:ef:82:0b:f0:e9:51:
bc:a8:00:ca:32:60:75:64:17:db:a1:20:01:dd:33:
ab:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:56:05:7D:86:42:AC:7E:86:F5:B5:05:16:BC:B4:EB:32:CB:01:78
X509v3 Authority Key Identifier:
keyid:4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:a0:7e:f7:4d:61:3f:be:10:46:12:94:f2:0c:92:84:aa:f7:
f4:d2:21:8e:92:e8:28:ec:57:bd:dd:59:55:3a:74:f3:77:e4:
15:9d:62:78:ef:39:01:47:6e:d9:f5:2d:93:8e:02:58:19:75:
f9:b5:ab:87:23:f0:29:2c:2a:f0:0d:11:1b:12:a4:40:a8:24:
55:0f:ed:6e:d5:50:28:fe:c1:01:f4:57:c4:12:aa:f7:6b:de:
ce:5f:2d:c4:7d:09:fe:d3:ce:81:cb:9e:d7:f1:6b:cc:37:1d:
3c:8c:4b:9a:8a:2e:d2:c9:f9:83:b5:c0:c5:8b:7b:ea:44:77:
d4:d9:8b:ef:41:a3:d5:6f:a9:5e:bc:63:7f:0f:93:86:65:45:
29:38:07:a1:16:fb:7b:9c:5f:e8:d8:da:46:ef:21:38:6f:6c:
02:3a:6b:7f:bd:ae:15:bd:6b:bb:79:22:4f:fb:8e:48:4c:58:
3d:ed:81:1d:2d:e1:fb:4a:33:5a:89:cf:5b:96:1e:6c:a7:fa:
e6:1d:ae:34:90:a8:bb:0c:19:6a:ae:6a:a5:97:39:d4:80:49:
81:bf:ec:4c:82:be:39:68:80:91:2c:1f:28:9f:ed:f0:a8:30:
8c:27:0b:6e:78:d1:6a:e5:f4:59:93:89:5d:b3:a0:d0:eb:b3:
ee:7d:dd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:17:46 2026 by rpki-client