Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
File: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft (raw, json)
Hash identifier: fA4Ksy9NsFSvLRdmOq37fBNTdxTV8YTe8giNRb/XTCs=
Subject key identifier: 12:8A:9C:AA:9A:73:96:E2:5A:6C:B6:59:94:ED:76:28:0A:C2:08:79
Authority key identifier: 4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE
Certificate issuer: /CN=4da3711dc5de45f2f5b47901659e956d938272fe
Certificate serial: 01A08B31C89DE5217BE088790893340F495B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 12:01:30 +0000
Manifest this update: Thu 10 Sep 2026 12:01:30 +0000
Manifest next update: Fri 11 Sep 2026 12:01:30 +0000
Files and hashes: 1: QMeWn3NQA2fbA8c1b6eFvzqzvWg.roa (hash: 8sNKEwPOI3VlePsjcLNbwBz/I6kJ5Yh/1lRoX0WjxkU=)
2: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl (hash: p3zELDFoaxCXfnH69xkltUYWeWXXRRPrkZHHzsw28eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:c8:9d:e5:21:7b:e0:88:79:08:93:34:0f:49:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da3711dc5de45f2f5b47901659e956d938272fe
Validity
Not Before: Sep 10 12:01:30 2026 GMT
Not After : Sep 11 12:01:30 2026 GMT
Subject: CN=128a9caa9a7396e25a6cb65994ed76280ac20879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:aa:aa:8a:25:2a:4e:7f:af:6c:52:86:c0:c6:
03:c7:94:0f:cd:f9:62:bb:c4:9f:d9:94:f4:84:ec:
c0:7d:cd:6b:1b:93:9c:e4:d7:f0:67:f9:4b:3f:a2:
84:89:90:ab:04:64:d3:2e:18:1b:32:f5:1e:d1:c6:
6f:ff:e9:48:76:67:44:31:5e:55:52:d7:d2:4c:47:
02:5f:cb:f4:03:54:f8:28:72:f3:65:22:75:2f:ac:
f7:e3:59:e7:f7:5f:a6:5c:ca:05:6b:59:25:3e:78:
b7:d0:63:c3:f5:10:84:b2:0e:bc:fe:ce:93:42:24:
f6:cc:de:0d:27:13:b1:7b:15:9a:0a:9e:21:f2:8c:
04:92:59:b5:af:f4:03:ae:0c:46:96:24:22:87:c6:
11:73:a6:ac:84:cd:12:bb:9c:ab:98:09:e9:a7:27:
eb:7d:00:50:dd:1b:ba:5f:ec:cc:78:4d:49:83:64:
e7:da:a1:07:de:27:07:f8:29:68:0b:1d:f4:c3:9b:
00:0f:7c:ba:64:76:f1:82:7d:22:47:64:bf:14:2d:
70:e4:98:6b:ca:33:8e:87:45:73:39:81:52:c6:76:
66:cc:c6:4d:e6:6a:a3:aa:30:4d:c2:4d:59:06:6a:
93:da:54:89:05:3c:88:a4:fa:67:62:73:e6:a0:ab:
4d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8A:9C:AA:9A:73:96:E2:5A:6C:B6:59:94:ED:76:28:0A:C2:08:79
X509v3 Authority Key Identifier:
keyid:4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:8f:06:16:13:77:6f:7f:e9:8e:da:b8:c1:a5:d4:1a:91:25:
98:90:3c:05:d3:29:0c:59:58:ed:c9:73:7c:7c:76:5b:f1:88:
8a:b7:62:4f:80:ab:53:b2:b8:25:47:cf:ca:1d:e7:fb:73:67:
dd:57:9a:8e:c3:ce:ad:5e:ef:0c:30:85:05:e2:7a:9d:4a:46:
1c:28:23:5a:fb:aa:cd:0c:20:16:d1:e9:7e:5d:78:75:0c:4a:
a6:a4:85:07:ba:0f:86:1f:23:47:0d:c4:74:3b:8b:86:e0:ce:
0d:15:0a:d0:8f:5a:fa:25:02:bd:8a:c6:91:72:c4:4e:ab:45:
d4:a0:36:42:c6:80:e3:a3:5b:01:60:e2:a1:15:fa:9e:96:33:
31:a0:77:70:83:94:eb:31:3f:23:3f:33:54:fd:a5:0e:ad:35:
ce:82:ac:e8:2f:bb:e9:05:d2:6a:53:bc:1c:a1:82:44:06:5f:
a8:4a:eb:33:e3:92:f0:2c:d0:b8:9c:0c:f3:ee:ac:60:db:3e:
6e:4a:85:2b:14:59:7e:7f:93:24:e3:20:b0:0c:8a:a4:4d:2b:
1c:b0:6a:70:e1:7c:be:88:2b:0e:fd:11:55:53:7d:07:09:25:
ca:7f:ec:9b:dd:79:69:44:e9:de:a0:4b:b0:87:2c:c1:a5:8d:
bf:6f:ba:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:12:22 2026 by rpki-client