Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
File: TaTWGZrsgo9pieLoTOwXdlusXNU.mft (raw, json)
Hash identifier: CFQo2bRSm3Cn6/hIBu0mWAavTJZf83pU8gVgqK5h9U4=
Subject key identifier: DB:81:7B:A7:5D:0F:F4:5B:41:56:29:CE:EB:3A:1C:EA:4A:0C:22:49
Authority key identifier: 4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5
Certificate issuer: /CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
Certificate serial: 019CAAC65834A46C84B6F39813259A95EF96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
Manifest number: 184D
Signing time: Sun 01 Mar 2026 19:00:51 +0000
Manifest this update: Sun 01 Mar 2026 19:00:51 +0000
Manifest next update: Mon 02 Mar 2026 19:00:51 +0000
Files and hashes: 1: TaTWGZrsgo9pieLoTOwXdlusXNU.crl (hash: iUjd0r2enxIlS46LGusG0PyUWjwN9TI4UZdlPcZiQG4=)
2: TgOSFEfASWDSpD8EkyKS9nujPiY.roa (hash: 0PwFXdbWv8R/ss2S++46JT4vsGX/tK0Xl7tQX+Eh9g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:58:34:a4:6c:84:b6:f3:98:13:25:9a:95:ef:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
Validity
Not Before: Mar 1 19:00:51 2026 GMT
Not After : Mar 2 19:00:51 2026 GMT
Subject: CN=db817ba75d0ff45b415629ceeb3a1cea4a0c2249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:05:02:27:b0:ee:15:b9:50:15:bd:1b:ac:a1:
38:37:30:3f:2a:0f:81:10:ae:e3:02:c2:f5:af:65:
9b:b4:8f:66:5a:12:e0:8e:15:a7:e8:e8:6b:da:87:
0c:11:85:f3:27:92:bb:c5:b8:8d:3e:a9:0c:31:f4:
d3:98:05:3e:60:d4:2d:f0:6c:69:8a:05:fa:08:4d:
85:e5:23:d3:da:6a:a3:e0:86:a0:a9:f3:24:3e:8a:
ab:e8:98:bd:65:49:51:9a:89:26:0a:0c:7b:8b:76:
1a:8c:98:ca:8b:31:e1:55:74:b8:cc:d6:c7:e1:c3:
11:ed:56:2e:f7:4f:6a:66:16:0e:5d:7a:98:2e:52:
2e:c0:90:73:f5:0c:43:7c:4a:84:e4:5c:b0:d5:e2:
41:92:80:df:9e:4b:2d:17:65:35:79:54:7d:da:4b:
d5:ee:71:63:62:ea:f8:57:0f:db:cf:60:18:86:c9:
8d:60:a4:e1:7f:48:48:17:e2:d8:d9:d2:27:cd:16:
1a:ff:89:c6:f5:d3:e0:2b:81:6d:73:ea:70:25:d6:
11:5c:82:2d:a3:f7:2f:aa:dd:5e:aa:f2:8e:11:d3:
df:c7:33:16:30:ad:2c:31:fc:f9:f3:1a:c8:73:cd:
21:21:af:05:f7:0f:fe:cf:c4:96:db:32:01:61:a6:
56:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:81:7B:A7:5D:0F:F4:5B:41:56:29:CE:EB:3A:1C:EA:4A:0C:22:49
X509v3 Authority Key Identifier:
keyid:4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:9e:b7:cc:32:3e:16:de:5f:fa:e4:80:d7:01:26:cb:e6:cc:
7e:d8:d5:fa:3b:e6:27:45:df:32:b9:aa:6c:56:24:ef:39:65:
70:1a:88:6d:57:82:a4:cd:5c:57:64:22:e6:d3:5e:4e:f0:03:
77:f2:79:d4:4b:a2:13:dd:1f:06:d3:a7:1f:38:c3:df:14:d1:
56:43:5c:20:b4:fb:30:80:e9:f3:bd:2a:8c:d1:ea:a7:2c:f5:
8f:f6:92:ee:81:9e:0e:e6:84:55:08:a6:f3:ca:e2:9f:2f:47:
95:02:8d:bf:e5:44:8a:f2:04:9b:35:8a:6f:a8:c4:5f:0c:bb:
4b:fd:ca:96:ce:93:ed:ce:47:56:14:38:23:eb:26:b4:08:35:
62:14:8e:c5:6b:d7:58:8b:0d:50:f6:60:0f:d5:6d:b9:01:7c:
1e:ad:4b:d4:c0:2a:cb:68:87:cf:a8:ac:a5:5f:16:87:58:46:
2b:18:e2:5f:1c:76:1d:14:ea:0b:4c:28:61:fc:1e:ab:ab:c6:
70:44:b8:67:17:49:c2:d6:b5:f0:8e:00:73:fe:a2:10:d9:40:
f9:79:50:3c:e6:14:91:f7:87:d0:86:0c:61:55:d7:c2:e5:31:
48:8b:4d:0b:37:8f:52:cb:e0:45:2b:36:af:e5:24:ed:4b:3e:
e2:4f:99:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:50:52 2026 by rpki-client