Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft
File: TAcbrZKeNisGK4nIf6QbXe2k_8A.mft (raw, json)
Hash identifier: oolmywQyvgJVjfXt76t4v11al6eHe8xIizaBYIgN2Ro=
Subject key identifier: 8C:BF:9E:69:C3:A9:A3:B1:5C:CE:6F:2F:49:62:B2:66:1F:66:EB:FB
Authority key identifier: 4C:07:1B:AD:92:9E:36:2B:06:2B:89:C8:7F:A4:1B:5D:ED:A4:FF:C0
Certificate issuer: /CN=4c071bad929e362b062b89c87fa41b5deda4ffc0
Certificate serial: 019A72264B73ABBAC577FB2E73CD450D058E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft
Manifest number: 1462
Signing time: Tue 11 Nov 2025 09:01:43 +0000
Manifest this update: Tue 11 Nov 2025 09:01:43 +0000
Manifest next update: Wed 12 Nov 2025 09:01:43 +0000
Files and hashes: 1: Q7AhmlPF0P4he1DdnyBzxO1UbNg.roa (hash: taA8dfVnJrloOBeiFJz3Gf4qdbtYPfCeh6aOOG2s/PY=)
2: TAcbrZKeNisGK4nIf6QbXe2k_8A.crl (hash: Jf8JefEfSCw14B2kpbt9fo9YCh1rZKpo71f86sC6Wak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:4b:73:ab:ba:c5:77:fb:2e:73:cd:45:0d:05:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c071bad929e362b062b89c87fa41b5deda4ffc0
Validity
Not Before: Nov 11 09:01:43 2025 GMT
Not After : Nov 12 09:01:43 2025 GMT
Subject: CN=8cbf9e69c3a9a3b15cce6f2f4962b2661f66ebfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ee:47:d6:87:68:a0:5b:1a:54:0a:8b:72:2b:
15:01:c9:20:b2:73:bd:ba:93:ee:16:85:ab:22:e5:
9c:c7:fe:34:74:95:34:ca:f4:f7:f4:6e:52:5f:fd:
75:79:78:d3:e4:70:00:77:cb:97:eb:54:99:12:a4:
01:c5:d6:69:4e:4f:5c:46:dc:7a:b2:48:29:b7:ad:
3a:98:ab:d5:bb:19:92:c0:1a:e4:49:44:a5:6f:8f:
9b:68:52:79:ce:94:5d:eb:23:0d:fa:0d:e3:aa:c2:
f4:ef:f5:1c:da:49:7f:9f:f8:83:71:52:0c:f6:97:
cc:3e:08:39:1a:a8:20:06:a4:66:84:6c:0d:ba:94:
27:ea:de:6b:2e:4b:5f:28:c3:ba:d7:f8:3e:c9:a9:
a9:c6:de:df:71:8e:6a:69:cd:97:c1:74:64:42:84:
a9:93:9c:2a:68:3a:25:47:8b:c0:0b:e5:35:16:e2:
25:34:30:e2:bd:4a:fc:c5:3f:ec:05:c0:f9:07:64:
52:7d:ef:e2:22:92:06:82:ca:a9:33:86:e2:b4:15:
d7:4c:63:22:43:e3:31:0e:34:61:f2:c6:c1:3a:ac:
09:c3:7f:86:36:d3:1f:e3:d2:52:c6:b3:19:25:70:
79:56:c1:b5:30:e8:51:f4:b0:ac:57:91:d8:68:c7:
8c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BF:9E:69:C3:A9:A3:B1:5C:CE:6F:2F:49:62:B2:66:1F:66:EB:FB
X509v3 Authority Key Identifier:
keyid:4C:07:1B:AD:92:9E:36:2B:06:2B:89:C8:7F:A4:1B:5D:ED:A4:FF:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:8b:33:cd:2f:01:e4:98:bb:3c:fa:54:b6:fe:f1:6b:67:0f:
a2:b1:f0:39:1f:d0:87:c2:15:9d:13:5a:d3:57:61:a9:db:fe:
63:d5:04:2b:6b:91:ed:67:44:7f:d3:16:6a:95:df:aa:45:b6:
75:e7:0a:66:b8:34:a4:12:a3:08:32:20:2b:11:3b:37:3f:09:
93:8e:f3:85:aa:67:8d:61:8d:6e:42:b5:56:0e:70:db:c6:bc:
70:da:07:52:d9:2b:24:82:5e:e4:44:2b:d1:20:bb:91:1d:6f:
7d:af:92:68:92:f0:44:06:f0:74:9e:d6:c6:bc:3e:c0:b8:3f:
4b:8b:33:fd:b2:05:b5:26:f3:30:1e:75:15:a8:b2:62:f6:ba:
09:73:3d:ca:ac:a7:46:55:a5:cb:fb:a8:74:9c:70:be:74:3c:
80:fd:85:81:4e:28:ba:fa:36:c5:cd:87:2d:9f:1a:49:a5:d0:
bd:ad:1c:15:be:d1:aa:9f:4c:9d:89:75:75:75:a1:9c:ee:ed:
af:08:87:16:ff:08:0d:fb:50:e4:cf:c7:32:2d:40:f4:1a:19:
98:9b:ba:29:0b:42:2b:15:5d:bc:2a:03:8e:10:84:3c:70:dc:
9f:1c:d9:09:3c:3f:04:f3:3b:dd:51:54:3b:b7:5e:35:23:df:
75:72:86:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:20 2025 by rpki-client