Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
File: taxpm1SgKHKkLwwJkmxHBuceMgM.mft (raw, json)
Hash identifier: yjGJpdVLj5mTPVVDdN18dLUw1vDctpTZJFszZ6JLX5Y=
Subject key identifier: DA:8F:D3:85:69:01:EF:CC:82:E1:EF:02:B4:DE:9E:3C:A8:97:D5:04
Authority key identifier: B5:AC:69:9B:54:A0:28:72:A4:2F:0C:09:92:6C:47:06:E7:1E:32:03
Certificate issuer: /CN=b5ac699b54a02872a42f0c09926c4706e71e3203
Certificate serial: 019D38D31806DE47B7D0CC0EAE0FFC5B3D71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
Manifest number: 072E
Signing time: Sun 29 Mar 2026 09:00:51 +0000
Manifest this update: Sun 29 Mar 2026 09:00:51 +0000
Manifest next update: Mon 30 Mar 2026 09:00:51 +0000
Files and hashes: 1: UlU02LC4n2pDDDLWDfGKbBexvUQ.roa (hash: 1DEZfsrrVxXltp/RRFJK80hKK2fgGVXeXhVVxwfDsss=)
2: taxpm1SgKHKkLwwJkmxHBuceMgM.crl (hash: 9p7/zRyl9QVgTuc2FGnEVI71guDqGuxEFU+VFoNRJ3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:18:06:de:47:b7:d0:cc:0e:ae:0f:fc:5b:3d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5ac699b54a02872a42f0c09926c4706e71e3203
Validity
Not Before: Mar 29 09:00:51 2026 GMT
Not After : Mar 30 09:00:51 2026 GMT
Subject: CN=da8fd3856901efcc82e1ef02b4de9e3ca897d504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:47:9a:d9:7b:b6:06:c5:34:10:a1:0d:32:c9:
c1:be:65:d4:97:20:2d:fa:f9:e3:4a:dc:4d:23:d9:
3d:81:54:53:9c:31:31:2a:7e:16:3f:f7:4d:e9:21:
f8:a0:13:fe:c6:13:34:df:76:5d:11:41:36:c6:da:
31:03:de:29:d8:e0:ae:72:12:de:a2:bc:73:5c:ea:
82:5d:39:0f:71:cc:be:0c:e5:d1:cb:21:c2:7b:de:
45:fa:8a:96:26:59:22:32:9d:8b:e8:c0:11:c4:39:
3e:dd:c0:98:2e:94:cf:0e:6e:0f:1f:b3:07:91:36:
19:c3:13:c1:fa:e4:5c:14:86:97:07:f1:f9:f3:34:
1f:61:43:5b:95:8b:83:43:e9:98:ad:79:fa:58:dc:
7d:97:7e:4a:d1:e3:08:98:5a:21:2b:15:38:d3:02:
f5:66:0d:68:7a:03:fc:2f:ca:47:fe:4d:63:fc:9a:
1e:42:ec:86:fd:ed:4b:37:92:5e:d9:38:00:6c:eb:
44:ef:b1:5d:8f:d2:3c:b7:4a:f8:79:d9:e4:1f:a3:
6a:a3:73:d8:df:89:bc:f3:4e:6b:9e:59:2e:67:e6:
d0:22:6a:f3:76:42:7a:62:67:61:10:af:e7:73:77:
2e:d5:27:8b:cb:b8:38:32:cb:e9:71:d9:32:e9:95:
93:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:8F:D3:85:69:01:EF:CC:82:E1:EF:02:B4:DE:9E:3C:A8:97:D5:04
X509v3 Authority Key Identifier:
keyid:B5:AC:69:9B:54:A0:28:72:A4:2F:0C:09:92:6C:47:06:E7:1E:32:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:b1:16:4c:a4:c6:ae:eb:ae:e0:09:8b:de:27:b7:98:f7:b3:
27:92:a2:3a:3c:e5:4d:56:9e:57:5c:ca:7c:22:65:4c:09:b6:
52:74:5d:b4:67:89:d9:16:8a:d1:09:25:5c:ed:36:e2:ad:0a:
de:09:3c:4a:de:52:60:ab:19:ab:bd:57:93:ae:20:42:ac:e6:
9c:dd:fb:34:0c:cb:a5:1d:63:f2:45:db:67:77:c9:e6:e2:6d:
f3:88:0b:29:0a:b9:0a:3c:9c:69:bd:e0:f8:af:58:a2:ea:25:
bf:49:ec:d7:f0:bf:a1:3d:3b:b0:27:e8:9c:97:5f:53:6c:22:
27:7c:fc:8a:0d:0c:43:58:e1:0e:81:f6:4c:0d:76:bc:de:a8:
61:69:4d:fe:c6:c3:42:a4:c0:82:5c:f9:55:72:44:69:d9:93:
4e:2c:90:fd:c5:a3:9a:09:57:bc:14:73:4b:95:e1:40:01:7a:
50:72:4c:55:b2:96:66:2e:e1:ad:51:56:01:40:54:d2:bb:0b:
9b:e2:db:66:45:43:74:f8:ed:2d:e7:2d:fe:b6:fb:3d:7e:b4:
2c:c7:7f:dd:3b:74:8a:c2:59:05:b2:7f:d3:52:e7:ab:b7:82:
df:25:ee:a6:31:8c:a9:52:bd:3d:6a:a4:ab:4f:e4:aa:76:c6:
af:5c:f3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:52 2026 by rpki-client