Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
File: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft (raw, json)
Hash identifier: EhA73ZF6CkI0dEbEMspbHqVCROGgO84CI9sYLuykyaU=
Subject key identifier: 91:97:B3:1B:6C:0B:7B:C9:E3:3D:DA:41:B8:AC:4F:76:6A:D8:12:A5
Authority key identifier: 4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE
Certificate issuer: /CN=4da3711dc5de45f2f5b47901659e956d938272fe
Certificate serial: 01A18C0A4E0BEC20D43A14E088C9F3B0DD21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
Manifest number: 1ACD
Signing time: Fri 30 Oct 2026 09:00:47 +0000
Manifest this update: Fri 30 Oct 2026 09:00:47 +0000
Manifest next update: Sat 31 Oct 2026 09:00:47 +0000
Files and hashes: 1: QMeWn3NQA2fbA8c1b6eFvzqzvWg.roa (hash: 8sNKEwPOI3VlePsjcLNbwBz/I6kJ5Yh/1lRoX0WjxkU=)
2: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl (hash: 5HWvaQBes++Xu3r6d7EoWoVdQ53kI0OGcgow4vElEiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:0a:4e:0b:ec:20:d4:3a:14:e0:88:c9:f3:b0:dd:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da3711dc5de45f2f5b47901659e956d938272fe
Validity
Not Before: Oct 30 09:00:47 2026 GMT
Not After : Oct 31 09:00:47 2026 GMT
Subject: CN=9197b31b6c0b7bc9e33dda41b8ac4f766ad812a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6d:a3:ab:ee:97:3c:50:7e:e0:35:74:3e:fb:
0c:b3:e0:e8:3a:93:30:6a:75:7f:34:e9:47:8b:6a:
12:db:f7:3d:f9:61:e3:fc:2b:b9:22:ed:84:bf:de:
2c:d8:61:c1:5b:22:a5:06:69:4a:a9:7d:24:df:56:
dc:be:b9:d2:eb:3b:79:48:76:0d:10:99:50:60:b7:
4b:6b:55:9e:71:ef:82:66:75:88:89:ac:3d:da:d2:
27:68:a8:35:57:77:01:4e:84:6c:ca:1e:fe:a3:53:
d7:a2:d8:77:2e:ca:d6:bb:9d:eb:8e:c9:02:0e:81:
69:b3:ca:b2:d0:73:34:90:b3:d6:f9:24:a7:30:13:
eb:3c:9b:32:3b:a4:87:e7:24:c9:4d:b3:97:a6:1e:
a6:5b:b8:a5:2b:6f:42:8b:c0:b6:fa:d3:0d:60:dd:
ed:4a:4e:57:95:c4:ac:94:5f:30:db:61:b6:84:a4:
9e:73:85:a4:af:fb:8d:f5:0c:cc:af:65:43:9e:d0:
95:d9:0f:45:23:fd:03:60:01:8b:97:13:90:35:af:
72:97:ba:57:36:58:e6:28:84:0d:1e:bb:ac:c9:cc:
bb:de:1d:1e:82:69:e6:5a:e7:ad:8f:86:d7:b5:fe:
49:a5:8a:d1:b0:0e:49:7d:ef:81:3e:0b:11:a7:f6:
e7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:97:B3:1B:6C:0B:7B:C9:E3:3D:DA:41:B8:AC:4F:76:6A:D8:12:A5
X509v3 Authority Key Identifier:
keyid:4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:47:90:f9:4a:fb:39:87:66:41:7a:4b:76:a3:f7:15:39:58:
92:03:bf:91:5d:fe:95:59:d2:7c:26:84:87:8e:b5:55:c0:4b:
bb:be:bb:89:91:91:1a:90:0c:12:00:79:7d:99:0a:f5:df:99:
4a:6e:fc:3e:ef:2f:c8:89:39:d3:b6:3e:a1:c6:8d:66:0e:97:
81:f4:02:d8:2f:29:53:86:b7:cf:fb:23:3c:42:a1:f1:99:0b:
70:4d:3f:5c:f9:78:a7:38:ca:47:f8:30:18:27:ed:47:06:7c:
77:8d:fe:b2:68:6e:34:f0:29:7a:a8:d5:85:1d:b5:c3:74:79:
46:90:a8:f8:18:72:78:59:92:8f:15:65:1c:42:bf:be:89:78:
75:f3:92:a9:73:45:2b:66:ce:36:e6:fb:38:a2:54:60:64:5c:
88:76:a5:e8:c1:ab:c9:0a:49:4c:4a:ab:90:80:0c:c6:a6:5e:
2a:1a:19:8a:0c:39:be:5b:3a:e8:c9:fc:99:f2:37:67:e8:a4:
13:db:c2:df:fa:8e:03:12:cb:80:02:cb:98:53:a1:bb:3e:94:
42:b0:97:3b:a2:81:cd:06:22:33:c5:41:90:22:5c:a8:24:78:
b7:e5:6e:69:4b:b6:d0:7c:91:94:be:5e:af:30:59:0d:37:ea:
0d:30:d6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 16:22:34 2026 by rpki-client