Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
File: TAf2nWArfrt_YzDXFcnsPlq6MPo.mft (raw, json)
Hash identifier: IdaNlHWpCL8pdHnhN17pHxMaLm3f95Px2yTtU4gJ6bI=
Subject key identifier: A2:CB:C4:2A:DC:FE:3C:93:E3:B4:05:01:AD:DA:26:5A:C6:BC:4E:15
Authority key identifier: 4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA
Certificate issuer: /CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
Certificate serial: 01A184BEA9980373D762D7E0F6B3ED215483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
Manifest number: 0EB9
Signing time: Wed 28 Oct 2026 23:00:49 +0000
Manifest this update: Wed 28 Oct 2026 23:00:49 +0000
Manifest next update: Thu 29 Oct 2026 23:00:49 +0000
Files and hashes: 1: 4GpPsuXyTB7mqbStOGGvgQlaA3c.roa (hash: YkMMZt5aZTSuVgtlcIOQUlozXasUkQvk7oFEC+EzncM=)
2: TAf2nWArfrt_YzDXFcnsPlq6MPo.crl (hash: EPHdGhEQk+GPG9OcaeGrHiGsiSz2/TJvbv9UIn0qj1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:be:a9:98:03:73:d7:62:d7:e0:f6:b3:ed:21:54:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
Validity
Not Before: Oct 28 23:00:49 2026 GMT
Not After : Oct 29 23:00:49 2026 GMT
Subject: CN=a2cbc42adcfe3c93e3b40501adda265ac6bc4e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:71:75:4f:8e:43:78:a3:ad:cd:53:ea:98:bf:
85:7f:13:9c:de:8f:9d:18:04:19:1e:f4:58:41:52:
a5:b3:ac:94:dc:73:95:7b:44:96:5e:f0:a8:c6:89:
aa:5f:a4:7d:74:eb:be:4c:6f:52:46:f2:9d:18:43:
59:6a:eb:a4:92:e3:dc:5c:38:7d:14:6e:d1:8a:13:
8f:f1:9c:c5:69:75:3e:65:30:86:e5:e3:70:cb:8a:
0f:02:48:2d:c2:a6:41:d1:70:04:34:ae:6d:84:5d:
c9:e5:82:4e:1e:06:76:f0:37:a3:f4:76:ed:4e:52:
7e:6e:35:f9:ee:e8:1e:77:b9:67:b3:ed:f6:1f:d9:
b3:73:6e:cd:eb:a0:4c:1e:53:9a:2a:79:ab:3f:15:
d7:0d:2c:27:f2:8a:8a:5c:9f:ed:e2:25:5d:91:93:
f1:3d:e0:fc:b6:10:db:1c:94:a0:bd:72:2d:c4:a9:
51:a3:d5:f1:24:f2:26:c5:62:97:21:b5:78:8c:69:
4b:0f:fb:8b:b1:0e:48:e6:2b:27:9e:c6:0c:41:68:
88:28:95:87:ce:15:12:31:6c:50:e8:6f:3e:09:62:
0e:ef:83:7f:ff:b1:21:64:af:23:e8:94:2e:20:83:
27:3d:6c:89:14:2f:15:d5:ce:72:83:9f:98:8a:15:
6f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CB:C4:2A:DC:FE:3C:93:E3:B4:05:01:AD:DA:26:5A:C6:BC:4E:15
X509v3 Authority Key Identifier:
keyid:4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:87:e8:db:a3:0a:c2:71:cf:8d:15:e5:43:5d:72:e9:23:99:
13:a2:ac:82:b0:06:57:06:13:52:52:4f:5d:95:f2:a5:86:bb:
0e:85:d6:af:87:74:7f:03:5a:dd:d2:63:93:71:a3:77:68:62:
51:d5:46:5f:60:84:ad:63:7d:8c:73:5c:40:2f:8b:e3:85:ee:
5c:bb:3f:20:75:3e:87:ae:c8:48:d1:71:93:9b:b3:a5:dc:b3:
27:87:d2:44:fd:de:f9:03:4e:de:94:ad:39:7e:54:33:a6:6a:
b2:94:de:27:ff:af:89:c1:15:84:01:b4:d6:04:20:71:52:cc:
78:a1:9b:7d:d5:48:f9:bc:53:a9:6f:8f:a9:c6:bc:1a:10:94:
df:03:8d:e2:28:ff:5c:36:6d:0b:39:99:49:85:30:4e:05:c0:
0a:4c:66:6e:b7:80:7a:b1:2a:c9:ce:dc:7e:37:1b:5c:96:39:
72:11:b9:ef:ce:3f:3c:d2:ca:17:ad:70:11:91:a0:47:f6:fd:
77:fd:46:95:3e:b0:ce:9b:b6:dd:e4:f9:6c:51:ef:6e:fe:69:
ea:96:5d:de:7f:d1:0d:35:74:a8:24:96:e6:3b:65:ad:bb:11:
37:e5:1a:b6:b2:c1:58:64:05:de:d9:27:33:17:c0:6c:3b:2b:
b6:db:da:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 10:46:51 2026 by rpki-client