Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
File: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft (raw, json)
Hash identifier: X34JVXOtaW5BLw7NE1p9n5Cd3DlD8pXFAz2D6KdmEyo=
Subject key identifier: E1:2E:BF:7A:2A:85:B9:D9:C4:A3:86:CF:0C:B2:83:B3:33:6D:7A:13
Authority key identifier: 4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE
Certificate issuer: /CN=4da3711dc5de45f2f5b47901659e956d938272fe
Certificate serial: 019F9F9647912012CEF4BE7850462ED5884A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
Manifest number: 19CE
Signing time: Sun 26 Jul 2026 18:00:53 +0000
Manifest this update: Sun 26 Jul 2026 18:00:53 +0000
Manifest next update: Mon 27 Jul 2026 18:00:53 +0000
Files and hashes: 1: QMeWn3NQA2fbA8c1b6eFvzqzvWg.roa (hash: 8sNKEwPOI3VlePsjcLNbwBz/I6kJ5Yh/1lRoX0WjxkU=)
2: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl (hash: 0RCZWi/BdsP9yho69z5tK3/kdIK7QOvuKGZPZRHelRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:96:47:91:20:12:ce:f4:be:78:50:46:2e:d5:88:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da3711dc5de45f2f5b47901659e956d938272fe
Validity
Not Before: Jul 26 18:00:53 2026 GMT
Not After : Jul 27 18:00:53 2026 GMT
Subject: CN=e12ebf7a2a85b9d9c4a386cf0cb283b3336d7a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:66:c4:c8:21:63:4a:b6:03:60:53:5a:4c:c4:
64:8d:ae:10:fc:40:ba:dc:82:fd:9e:80:d2:eb:12:
f4:d0:11:62:02:49:15:07:92:7c:3a:44:f0:57:50:
a2:61:ae:5e:aa:45:ac:94:93:19:e5:0a:43:00:fe:
ba:28:11:35:73:73:5a:9a:c6:f0:fa:03:54:a3:ba:
95:63:a7:64:29:ee:97:eb:2f:4e:d4:f7:71:65:d0:
72:88:d6:47:b2:c9:65:9e:0b:12:99:ae:68:aa:ca:
aa:b9:7b:b1:22:1b:6f:5e:16:7e:c5:1d:e1:3f:64:
46:63:ae:1d:1b:24:d0:58:64:3a:e4:53:5f:97:bd:
ff:97:65:98:d6:57:57:b7:bb:96:30:8a:ec:62:2f:
c9:4d:5b:c6:22:90:b3:b0:cc:90:29:97:8f:78:df:
99:bd:ad:f7:ca:e9:ef:19:d9:b3:b5:f9:a5:52:fd:
62:50:98:f0:a2:33:2b:9b:bf:ea:38:c2:7b:bf:61:
8b:36:70:be:34:33:5d:98:9a:69:30:65:25:ce:a5:
fa:08:47:05:a2:b5:c7:f8:6e:27:e4:d3:25:b4:36:
4c:48:a3:98:08:03:a1:75:42:8e:91:aa:6c:03:d3:
ea:48:4b:f3:fb:e3:a9:33:82:df:1e:7e:9c:9e:81:
cd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2E:BF:7A:2A:85:B9:D9:C4:A3:86:CF:0C:B2:83:B3:33:6D:7A:13
X509v3 Authority Key Identifier:
keyid:4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:1e:84:e0:d8:8a:d1:0c:05:d1:d9:97:eb:a7:27:ad:b3:69:
f7:b3:3c:8a:47:c0:f2:eb:42:f3:ae:4e:79:ae:dd:3f:63:bd:
ae:35:6e:29:98:b4:51:70:c3:08:8d:6e:69:94:31:49:41:bc:
0f:56:b2:c7:c3:67:5c:a2:9e:ef:b1:05:6c:60:b4:10:d2:cf:
bb:01:55:85:3a:cf:02:f7:3e:49:77:f6:45:fb:a9:2b:31:aa:
67:58:bb:d4:95:fb:66:be:81:c6:22:ea:19:13:4a:ee:25:b2:
10:95:34:f0:92:e9:a6:22:54:b8:2b:47:5a:20:86:4f:24:b7:
98:cc:02:15:c9:cc:51:f5:65:b6:34:a1:f5:ae:ba:49:e6:20:
70:fe:91:a1:2f:b4:91:e6:db:37:97:d8:6b:f1:43:f3:36:3f:
a6:4b:9c:90:07:8e:7d:9e:c6:c9:ac:be:1e:a3:d5:70:2a:01:
e6:ab:ec:0e:e3:d5:85:86:6c:05:9c:42:30:31:b4:f5:07:8c:
8a:66:6e:79:cc:cf:27:2f:c5:ec:12:cb:79:a5:13:ce:ef:1f:
15:97:e8:8c:f4:f5:63:15:01:24:23:84:06:2c:04:51:2b:ca:
a1:c3:70:27:b7:d9:77:e2:f5:eb:c7:d5:47:1f:1b:05:60:9f:
6d:b4:b5:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+flkeRIBLO9L54UEYu1YhKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYTM3MTFkYzVkZTQ1ZjJmNWI0NzkwMTY1OWU5NTZkOTM4
MjcyZmUwHhcNMjYwNzI2MTgwMDUzWhcNMjYwNzI3MTgwMDUzWjAzMTEwLwYDVQQD
EyhlMTJlYmY3YTJhODViOWQ5YzRhMzg2Y2YwY2IyODNiMzMzNmQ3YTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmbEyCFjSrYDYFNaTMRkja4Q/EC6
3IL9noDS6xL00BFiAkkVB5J8OkTwV1CiYa5eqkWslJMZ5QpDAP66KBE1c3Namsbw
+gNUo7qVY6dkKe6X6y9O1PdxZdByiNZHssllngsSma5oqsqquXuxIhtvXhZ+xR3h
P2RGY64dGyTQWGQ65FNfl73/l2WY1ldXt7uWMIrsYi/JTVvGIpCzsMyQKZePeN+Z
va33yunvGdmztfmlUv1iUJjwojMrm7/qOMJ7v2GLNnC+NDNdmJppMGUlzqX6CEcF
orXH+G4n5NMltDZMSKOYCAOhdUKOkapsA9PqSEvz++OpM4LfHn6cnoHN/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOEuv3oqhbnZxKOGzwyyg7MzbXoTMB8GA1UdIwQY
MBaAFE2jcR3F3kXy9bR5AWWelW2TgnL+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGFOeEhjWGVSZkwxdEhrQlpaNlZiWk9DY3Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9hODMxYzAtNDU3Yy00YmE4LWJlYzct
ZTI1MTEwOWJmZDE5LzEvVGFOeEhjWGVSZkwxdEhrQlpaNlZiWk9DY3Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9hODMxYzAtNDU3Yy00YmE4LWJlYzctZTI1MTEwOWJmZDE5
LzEvVGFOeEhjWGVSZkwxdEhrQlpaNlZiWk9DY3Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACB6E4NiK
0QwF0dmX66cnrbNp97M8ikfA8utC865Oea7dP2O9rjVuKZi0UXDDCI1uaZQxSUG8
D1ayx8NnXKKe77EFbGC0ENLPuwFVhTrPAvc+SXf2RfupKzGqZ1i71JX7Zr6BxiLq
GRNK7iWyEJU08JLppiJUuCtHWiCGTyS3mMwCFcnMUfVltjSh9a66SeYgcP6RoS+0
kebbN5fYa/FD8zY/pkuckAeOfZ7Gyay+HqPVcCoB5qvsDuPVhYZsBZxCMDG09QeM
imZueczPJy/F7BLLeaUTzu8fFZfojPT1YxUBJCOEBiwEUSvKocNwJ7fZd+L168fV
Rx8bBWCfbbS1+g==
-----END CERTIFICATE-----
Generated at Mon Jul 27 00:06:54 2026 by rpki-client