Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
File: TAf2nWArfrt_YzDXFcnsPlq6MPo.mft (raw, json)
Hash identifier: M8Hf4kckSng5QcE7oB/PhTLK0xcihecTWi8FROxIHGg=
Subject key identifier: 43:52:F3:75:58:01:0D:07:53:59:3B:67:5B:AE:21:77:75:F3:52:12
Authority key identifier: 4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA
Certificate issuer: /CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
Certificate serial: 019F86E90A238E6B849C4DB34B5F8733B587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
Manifest number: 0DB1
Signing time: Tue 21 Jul 2026 23:00:47 +0000
Manifest this update: Tue 21 Jul 2026 23:00:47 +0000
Manifest next update: Wed 22 Jul 2026 23:00:47 +0000
Files and hashes: 1: 4GpPsuXyTB7mqbStOGGvgQlaA3c.roa (hash: YkMMZt5aZTSuVgtlcIOQUlozXasUkQvk7oFEC+EzncM=)
2: TAf2nWArfrt_YzDXFcnsPlq6MPo.crl (hash: lLrp0rAeUzPS9eJEAqvGHmy1sMLna0P6KRSu6d/gb68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:e9:0a:23:8e:6b:84:9c:4d:b3:4b:5f:87:33:b5:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
Validity
Not Before: Jul 21 23:00:47 2026 GMT
Not After : Jul 22 23:00:47 2026 GMT
Subject: CN=4352f37558010d0753593b675bae217775f35212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:21:90:44:c9:3d:d8:61:03:de:5d:31:b5:15:
44:9d:a7:fc:47:e4:8e:d8:ca:22:06:cc:d2:6f:d7:
de:cb:98:db:58:1e:16:8f:43:3a:03:d0:02:db:78:
07:4e:83:99:f8:f3:54:b5:b6:ef:b9:8f:4d:ea:c7:
fd:1d:7a:94:18:d2:9c:5c:4f:0b:87:8b:b1:9d:0c:
81:0b:cb:d3:5c:37:cb:03:ea:2a:8c:39:59:ec:26:
88:d6:79:bb:48:dd:1c:98:ee:ec:d3:bc:fa:af:b6:
a5:4b:8b:44:8e:55:d5:b3:60:07:a3:02:32:2c:6a:
eb:c5:9b:c0:28:1f:1a:47:65:7b:60:d1:e7:8b:20:
d3:4f:f6:96:c6:f2:f1:4f:93:ee:d8:b0:10:bf:ff:
f9:5e:f3:0f:cf:1c:0b:aa:33:98:50:94:9e:26:d7:
6f:3b:a5:0d:ff:39:10:00:0c:43:b5:db:76:7f:c2:
83:07:1c:58:3b:1c:fc:71:9b:ec:3b:ab:ac:21:4d:
24:02:53:a0:4c:47:82:c3:5d:b8:c2:af:13:97:8b:
c9:bd:bf:9f:c3:2f:ba:cd:e3:39:90:57:79:3c:09:
a0:07:5b:fe:5b:72:28:e2:1d:4e:33:44:9e:fd:1d:
3c:89:26:b6:37:18:5f:b0:0c:23:bd:2a:ce:b8:95:
80:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:52:F3:75:58:01:0D:07:53:59:3B:67:5B:AE:21:77:75:F3:52:12
X509v3 Authority Key Identifier:
keyid:4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:2d:ba:ae:f1:91:26:9f:e4:1d:a7:b1:be:eb:6e:86:08:d3:
68:90:a3:c5:b5:33:72:27:ff:25:13:42:07:fc:c9:fd:a7:3d:
40:d6:6f:74:74:0d:8e:cb:b2:9d:7b:0a:6c:cc:30:c8:63:7b:
9b:ae:1d:0d:2a:6d:7b:1f:77:fe:9d:c3:69:87:93:23:a9:49:
00:c9:77:15:05:32:c2:ed:eb:49:13:84:c9:99:07:5a:b8:88:
8b:50:a3:41:16:31:ab:5a:90:3d:22:c5:ce:6f:62:6b:a3:7b:
39:a1:43:2e:ec:04:23:52:54:6a:cd:4f:4c:aa:c0:7d:2f:b8:
b7:a4:97:b8:2a:3a:76:5c:8e:e3:62:f8:ff:47:b4:37:7b:ee:
7b:27:b9:ad:da:98:47:bc:da:35:ed:3f:a5:f3:d6:f8:b0:01:
e8:0a:38:a7:6f:2f:b4:d4:c8:d0:3d:a5:a4:ed:90:7e:23:d8:
f0:75:92:d8:c9:e2:9f:cf:d9:1a:30:e6:bb:88:1a:99:0c:3e:
6d:82:ab:da:64:fd:0d:c3:62:92:5c:13:34:fc:5f:a6:bf:fd:
6e:42:da:c9:77:be:e5:59:19:ed:3f:5b:2e:9f:8d:70:be:4f:
c2:66:bd:0b:20:17:a8:fd:41:49:5b:11:00:64:a6:31:45:6b:
9e:f3:01:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:02:56 2026 by rpki-client