Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
File: TaTWGZrsgo9pieLoTOwXdlusXNU.mft (raw, json)
Hash identifier: 5rLvbJQ+z/+/GQCuTtG9ROv4JWZUXTZftjFbtDAiC/w=
Subject key identifier: 85:51:0E:B9:42:7A:AB:EB:76:CA:17:6D:EF:C3:86:FF:D1:B5:3A:43
Authority key identifier: 4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5
Certificate issuer: /CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
Certificate serial: 01A06E70A95719D8F87904E9427F57B120FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
Manifest number: 1A40
Signing time: Fri 04 Sep 2026 22:01:12 +0000
Manifest this update: Fri 04 Sep 2026 22:01:12 +0000
Manifest next update: Sat 05 Sep 2026 22:01:12 +0000
Files and hashes: 1: TaTWGZrsgo9pieLoTOwXdlusXNU.crl (hash: IGv2X+yTOyWVr3lNGQZfc1Himhy3gS9isrc4S/iWKik=)
2: TgOSFEfASWDSpD8EkyKS9nujPiY.roa (hash: 0PwFXdbWv8R/ss2S++46JT4vsGX/tK0Xl7tQX+Eh9g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:70:a9:57:19:d8:f8:79:04:e9:42:7f:57:b1:20:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
Validity
Not Before: Sep 4 22:01:12 2026 GMT
Not After : Sep 5 22:01:12 2026 GMT
Subject: CN=85510eb9427aabeb76ca176defc386ffd1b53a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4b:e2:49:14:7b:28:9a:7c:77:e6:5a:20:0a:
bd:7e:b9:83:7c:45:1b:f4:0b:0b:9b:d9:01:e1:9b:
60:88:5c:05:50:eb:58:b8:12:03:1e:5f:44:9c:39:
55:f2:a4:8a:f3:a1:45:86:65:be:38:38:7d:8c:ef:
e1:33:4f:00:c2:cc:da:94:3e:93:5d:0a:68:60:57:
93:10:37:31:2c:31:89:6f:e9:24:8c:e9:d0:68:a5:
9a:f8:1f:3e:31:aa:aa:ef:ce:c0:8f:07:99:8e:91:
10:e6:c2:fd:62:51:9d:04:ee:7d:24:b8:10:d2:1f:
4b:5a:28:ef:c3:18:48:a0:ec:fc:63:61:2e:03:2e:
bd:ac:3f:b1:a7:3a:db:77:c1:1b:dc:9f:7d:49:fb:
94:2e:6e:02:11:97:fa:87:65:5f:c9:3a:25:2c:97:
37:2c:b1:66:2d:bb:ce:fa:39:dc:94:4b:e2:d7:79:
a7:7b:65:fa:df:1a:4b:1e:66:b5:97:9b:59:8b:fc:
79:9f:5b:11:aa:52:cd:2f:01:a1:3b:49:e3:f8:1f:
3e:05:71:3a:c4:3c:a1:a5:82:a1:3f:de:27:cc:fd:
7c:c6:69:6b:21:e6:71:d4:2a:7a:cf:1a:43:00:22:
17:19:86:be:ef:47:9a:24:8d:72:b7:0b:04:c8:45:
3b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:51:0E:B9:42:7A:AB:EB:76:CA:17:6D:EF:C3:86:FF:D1:B5:3A:43
X509v3 Authority Key Identifier:
keyid:4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c0:b4:30:c3:ce:82:c0:b4:cd:44:2a:80:22:a6:ef:95:48:
95:76:53:b1:2f:25:f8:51:f3:6e:a4:be:05:ad:be:0a:e7:99:
31:d5:b3:29:6c:e0:a1:62:d0:48:ab:63:e8:1e:59:8f:67:cc:
f6:e2:ef:71:d7:84:f8:81:7c:f5:d2:33:1a:45:e0:a1:7d:81:
50:b6:7e:b5:70:6c:8a:09:c1:fe:48:f4:a4:2b:e9:3e:0b:8e:
f5:10:7c:e0:a9:18:de:01:10:26:df:a8:b0:fc:01:8f:f0:18:
e8:c0:77:15:5a:60:be:45:ca:dc:65:de:d2:04:39:c4:6c:a3:
dd:e2:ef:c7:4f:8f:5b:e5:d8:dc:cb:75:8e:10:a7:17:28:06:
00:f4:c3:52:03:77:71:13:87:22:ea:d9:08:8a:0e:0c:f7:95:
d3:0d:03:1c:ce:53:5e:4b:5d:ec:f9:06:06:41:0a:87:e5:50:
25:cd:17:a5:0c:4c:93:b6:08:c9:7b:fe:83:a3:7e:8f:0b:80:
5a:ae:36:fb:2f:f3:72:1e:93:70:9c:41:66:c8:57:fa:32:a6:
d7:db:ba:70:30:ea:17:9c:0f:85:38:8b:a0:8f:51:b4:2b:3f:
89:d5:4b:9c:64:f0:41:47:e7:2a:6a:72:c9:49:c3:75:fe:c7:
0b:62:51:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:29:41 2026 by rpki-client