Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
File: TaTWGZrsgo9pieLoTOwXdlusXNU.mft (raw, json)
Hash identifier: gafHmTYUacrIYk1BXiFpNaUQlUBvOqHX/y5CLt5NOV0=
Subject key identifier: 4E:E0:9E:D7:B3:98:BC:4E:F4:69:DF:95:BF:F7:33:14:C4:E0:26:6E
Authority key identifier: 4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5
Certificate issuer: /CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
Certificate serial: 019FAF4019220EDC7A472842111D0277D491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
Manifest number: 19DD
Signing time: Wed 29 Jul 2026 19:00:41 +0000
Manifest this update: Wed 29 Jul 2026 19:00:41 +0000
Manifest next update: Thu 30 Jul 2026 19:00:41 +0000
Files and hashes: 1: TaTWGZrsgo9pieLoTOwXdlusXNU.crl (hash: J3uTpHQpU7IhMbGMZYU0i3VcuKVdHioY3Wrlb7vqA1g=)
2: TgOSFEfASWDSpD8EkyKS9nujPiY.roa (hash: 0PwFXdbWv8R/ss2S++46JT4vsGX/tK0Xl7tQX+Eh9g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:af:40:19:22:0e:dc:7a:47:28:42:11:1d:02:77:d4:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
Validity
Not Before: Jul 29 19:00:41 2026 GMT
Not After : Jul 30 19:00:41 2026 GMT
Subject: CN=4ee09ed7b398bc4ef469df95bff73314c4e0266e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c4:1b:86:8d:85:b3:dd:6e:d6:71:92:b0:9e:
1f:37:10:46:52:9d:42:4b:cd:50:56:f4:87:f1:a9:
f4:7d:3f:cb:9b:72:24:5f:0f:6a:2b:36:57:f4:db:
cd:95:c2:0f:54:a3:db:85:13:af:c5:83:40:df:86:
fa:32:5a:bf:92:99:63:0b:d6:10:97:62:dc:af:5b:
67:0c:a3:2e:8c:a9:d4:35:5d:28:c4:b4:bc:dc:ee:
22:f3:3c:24:7c:dc:f3:cd:31:70:89:3f:14:59:56:
e1:26:04:a8:c4:7f:3c:ca:75:d7:18:e6:84:f1:e3:
80:b5:36:39:35:4c:bd:51:ff:85:e4:58:99:15:57:
00:2e:b4:91:8d:b9:aa:7d:c2:87:b9:84:a8:b8:11:
6a:b1:25:4f:6f:7f:b9:0a:63:16:2e:8f:ce:90:04:
99:69:81:eb:ef:0a:e4:f7:e2:47:bf:5a:45:bd:d2:
d2:79:a9:b8:f1:74:98:fd:1f:e6:60:a5:c0:79:ee:
8a:ee:ff:2c:3e:75:30:97:dc:94:05:5f:0d:5e:98:
be:d2:04:dc:5d:95:1a:79:3c:08:28:f4:9e:94:d3:
22:61:1e:42:2d:e5:82:93:95:c2:b2:96:3e:ae:50:
11:b5:e4:64:dc:0d:61:a0:66:a3:3a:e2:98:55:54:
e4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E0:9E:D7:B3:98:BC:4E:F4:69:DF:95:BF:F7:33:14:C4:E0:26:6E
X509v3 Authority Key Identifier:
keyid:4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:55:c8:35:85:00:bc:cd:32:db:54:bf:cc:44:de:c3:ae:f0:
6c:dd:a3:08:b8:45:5e:8b:cf:a6:1d:f7:cd:73:6e:d2:38:f8:
17:8d:48:1d:03:8c:d1:14:98:05:bd:25:c0:f2:59:96:ca:1d:
6d:66:70:7f:ce:ab:5c:51:64:8a:b7:f9:1a:0b:37:db:01:12:
3b:90:ea:4b:81:5a:0d:ee:95:94:f5:be:2f:ca:6f:70:ae:bf:
d8:ce:e4:3d:4e:06:78:c1:b4:bb:2f:94:dc:3c:ec:aa:22:26:
e6:0c:0a:a8:bf:40:6d:e5:50:77:6d:df:e6:4c:81:38:a6:31:
f7:90:a2:be:b4:80:d1:db:dd:48:52:4d:dc:30:b8:86:72:84:
24:ea:2e:8e:56:4e:b5:1a:8d:44:52:3e:3d:60:59:53:64:ba:
b2:8d:57:dc:91:60:80:69:42:c0:8e:2b:b7:9a:c6:26:48:7b:
6c:2c:7a:08:ac:73:f4:a5:97:e2:88:db:4d:49:b6:ba:94:9c:
63:50:ff:6d:b7:72:0b:4e:00:02:ac:9e:43:44:2c:a6:f1:12:
e1:01:f0:4e:1e:22:2d:83:ff:17:67:2a:22:29:30:c4:02:b8:
06:0a:77:48:b0:e2:64:26:fa:6e:6f:40:59:d0:c9:8d:6d:65:
99:af:0b:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+vQBkiDtx6RyhCER0Cd9SRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYTRkNjE5OWFlYzgyOGY2OTg5ZTJlODRjZWMxNzc2NWJh
YzVjZDUwHhcNMjYwNzI5MTkwMDQxWhcNMjYwNzMwMTkwMDQxWjAzMTEwLwYDVQQD
Eyg0ZWUwOWVkN2IzOThiYzRlZjQ2OWRmOTViZmY3MzMxNGM0ZTAyNjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMQbho2Fs91u1nGSsJ4fNxBGUp1C
S81QVvSH8an0fT/Lm3IkXw9qKzZX9NvNlcIPVKPbhROvxYNA34b6Mlq/kpljC9YQ
l2Lcr1tnDKMujKnUNV0oxLS83O4i8zwkfNzzzTFwiT8UWVbhJgSoxH88ynXXGOaE
8eOAtTY5NUy9Uf+F5FiZFVcALrSRjbmqfcKHuYSouBFqsSVPb3+5CmMWLo/OkASZ
aYHr7wrk9+JHv1pFvdLSeam48XSY/R/mYKXAee6K7v8sPnUwl9yUBV8NXpi+0gTc
XZUaeTwIKPSelNMiYR5CLeWCk5XCspY+rlARteRk3A1hoGajOuKYVVTkswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7gntezmLxO9Gnflb/3MxTE4CZuMB8GA1UdIwQY
MBaAFE2k1hma7IKPaYni6EzsF3ZbrFzVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGFUV0dacnNnbzlwaWVMb1RPd1hkbHVzWE5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yYzg0ODItNTMzMS00ZTU3LTk5NzQt
NDA4MzdkNDg0NzNkLzEvVGFUV0dacnNnbzlwaWVMb1RPd1hkbHVzWE5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8yYzg0ODItNTMzMS00ZTU3LTk5NzQtNDA4MzdkNDg0NzNk
LzEvVGFUV0dacnNnbzlwaWVMb1RPd1hkbHVzWE5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhVXINYUA
vM0y21S/zETew67wbN2jCLhFXovPph33zXNu0jj4F41IHQOM0RSYBb0lwPJZlsod
bWZwf86rXFFkirf5Ggs32wESO5DqS4FaDe6VlPW+L8pvcK6/2M7kPU4GeMG0uy+U
3DzsqiIm5gwKqL9AbeVQd23f5kyBOKYx95CivrSA0dvdSFJN3DC4hnKEJOoujlZO
tRqNRFI+PWBZU2S6so1X3JFggGlCwI4rt5rGJkh7bCx6CKxz9KWX4ojbTUm2upSc
Y1D/bbdyC04AAqyeQ0QspvES4QHwTh4iLYP/F2cqIikwxAK4Bgp3SLDiZCb6bm9A
WdDJjW1lma8LEw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 20:11:41 2026 by rpki-client