Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
File: TAf2nWArfrt_YzDXFcnsPlq6MPo.mft (raw, json)
Hash identifier: xD16vW/oK2eRpDoGeozZNT8RBivCiYVF9UimGgadR2E=
Subject key identifier: 5D:FB:D8:F9:FE:DE:5D:4A:57:77:FF:3D:D8:A1:9D:BA:99:A4:94:E8
Authority key identifier: 4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA
Certificate issuer: /CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
Certificate serial: 019CC2298DF77E18ACDA9D4D1FDABB3169DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
Manifest number: 0C42
Signing time: Fri 06 Mar 2026 08:00:28 +0000
Manifest this update: Fri 06 Mar 2026 08:00:28 +0000
Manifest next update: Sat 07 Mar 2026 08:00:28 +0000
Files and hashes: 1: 4GpPsuXyTB7mqbStOGGvgQlaA3c.roa (hash: YkMMZt5aZTSuVgtlcIOQUlozXasUkQvk7oFEC+EzncM=)
2: TAf2nWArfrt_YzDXFcnsPlq6MPo.crl (hash: bWVpy0WMYnUPi4vwRq9r5/17TVi+/y4zUSu+YMjVWyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c2:29:8d:f7:7e:18:ac:da:9d:4d:1f:da:bb:31:69:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
Validity
Not Before: Mar 6 08:00:28 2026 GMT
Not After : Mar 7 08:00:28 2026 GMT
Subject: CN=5dfbd8f9fede5d4a5777ff3dd8a19dba99a494e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:68:75:85:89:0a:7d:57:85:a4:2f:90:09:2b:
58:90:e7:53:44:0f:fe:81:ff:19:80:64:67:ae:89:
19:43:71:7d:ae:c7:f5:e0:33:38:4a:eb:09:2d:ab:
2c:f9:c6:08:94:9e:af:fb:9d:35:ac:b4:92:25:63:
1c:c5:74:c4:c6:9a:af:2c:e8:6f:41:4d:36:16:25:
a3:66:b2:a4:e2:a1:19:40:0f:c1:14:ef:11:9f:3e:
5e:92:ef:1c:5b:96:aa:47:44:e8:c2:b7:37:6f:13:
8c:c7:5a:b0:00:20:05:44:e8:10:e1:8a:3c:91:84:
2f:62:d0:b0:d0:b3:d1:02:c0:96:a1:e6:b0:07:32:
1f:97:0b:b9:08:ec:47:aa:b1:55:4e:c8:17:22:11:
e4:29:56:79:ce:de:1c:51:08:e9:86:52:8e:9b:08:
3f:d4:4e:7b:55:ca:c2:7b:f6:a5:ac:bd:c1:94:4d:
bf:a0:d8:c1:1a:3c:d6:22:d4:80:18:d2:78:fe:89:
35:fe:87:bb:b1:d3:44:0c:ea:7d:71:76:41:bd:15:
14:5c:6d:36:4a:0c:b1:b2:9b:d6:f8:eb:85:3b:01:
a8:0d:2d:8b:db:bc:74:8f:5e:d0:1f:96:a9:30:5f:
81:f2:42:9e:2b:ee:21:24:ae:39:58:20:e3:e8:77:
be:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FB:D8:F9:FE:DE:5D:4A:57:77:FF:3D:D8:A1:9D:BA:99:A4:94:E8
X509v3 Authority Key Identifier:
keyid:4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a3:63:51:ce:47:2b:df:f6:46:d0:3c:ed:31:23:6b:78:85:
57:79:63:66:ad:22:99:21:a0:dd:ff:08:0b:07:70:e8:d0:b4:
3a:9b:4f:26:0e:eb:a6:dd:c4:ea:40:0e:be:7c:9a:a6:d0:5b:
dd:ac:87:e7:e6:70:95:c4:7c:a5:73:80:e8:b8:59:83:8a:2a:
7d:cf:d8:c0:58:b5:14:80:26:6d:10:69:21:fa:ad:15:05:32:
dc:77:8e:b3:1d:13:9b:7d:cb:3c:84:6b:29:49:da:ef:b4:78:
36:11:a0:79:65:20:fb:dd:9d:4a:10:71:31:e6:7f:54:17:a4:
32:a0:0b:76:12:cd:30:0c:47:34:dc:eb:2f:50:41:a7:43:44:
8f:4e:aa:08:e3:9e:59:d0:46:e3:7f:1a:40:a1:14:7f:6f:14:
65:e8:fd:1d:a2:a0:f4:a2:b2:5f:14:1d:9b:66:f8:83:12:a3:
be:3a:e6:40:62:39:4e:04:70:24:1b:c9:55:51:2e:bc:e9:b8:
ca:75:d4:80:e2:b5:da:61:c5:33:50:bc:de:2f:9e:60:6e:89:
97:39:2e:c4:6d:f8:ca:e8:9d:13:c5:96:25:57:af:74:67:52:
0b:ad:cf:5d:6b:95:05:14:a2:f2:19:11:39:c1:ba:23:1f:e3:
87:a6:d3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 17:16:19 2026 by rpki-client