Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
File: TaTWGZrsgo9pieLoTOwXdlusXNU.mft (raw, json)
Hash identifier: 5IOHHe2ecMKVaivb2gfe0YHImNhRAgM9XpRXlaU6dqw=
Subject key identifier: 09:D8:F0:C9:40:1D:0E:3F:3B:0A:12:B7:7D:87:BA:85:2A:2C:4D:F8
Authority key identifier: 4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5
Certificate issuer: /CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
Certificate serial: 01A0C5570C28EB1FEFFB6D9748A1F33CA1D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
Manifest number: 1A6D
Signing time: Mon 21 Sep 2026 19:00:11 +0000
Manifest this update: Mon 21 Sep 2026 19:00:11 +0000
Manifest next update: Tue 22 Sep 2026 19:00:11 +0000
Files and hashes: 1: TaTWGZrsgo9pieLoTOwXdlusXNU.crl (hash: Sdk4ZQufgvTn/8ALndcyCVEO+1Arsnfuv6p8Vzz2+Ik=)
2: TgOSFEfASWDSpD8EkyKS9nujPiY.roa (hash: 0PwFXdbWv8R/ss2S++46JT4vsGX/tK0Xl7tQX+Eh9g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:0c:28:eb:1f:ef:fb:6d:97:48:a1:f3:3c:a1:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
Validity
Not Before: Sep 21 19:00:11 2026 GMT
Not After : Sep 22 19:00:11 2026 GMT
Subject: CN=09d8f0c9401d0e3f3b0a12b77d87ba852a2c4df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:30:b1:c0:38:5c:3f:ed:4d:57:36:05:3b:2d:
f2:bc:b2:c5:33:81:47:9e:49:de:3c:3f:2b:ba:49:
2a:9c:a3:37:46:13:47:be:d2:72:b3:0f:bd:e5:f7:
31:f9:93:c1:d7:38:74:09:c4:dc:e1:b0:e1:1f:7e:
4d:38:d8:27:21:98:8b:17:d3:e6:1b:70:3f:22:87:
d1:e3:72:01:ec:65:4d:b2:28:cd:76:82:93:86:88:
05:5c:c0:8a:02:c2:21:78:aa:55:dd:71:3c:74:0b:
44:97:1e:1b:bc:60:63:26:c3:76:39:e1:f5:9e:0f:
ef:51:3f:b5:d6:7f:00:21:23:1a:8d:5d:24:d4:0f:
fb:9d:7d:ab:ae:97:26:f6:3f:33:b9:00:be:9b:9b:
f5:18:8b:c2:e2:9b:16:d7:49:35:bb:97:fd:67:20:
9d:0a:b6:b8:98:8c:86:5d:19:a1:00:13:21:da:59:
40:3f:54:37:10:8d:71:92:4c:ba:9f:df:a5:a4:a9:
16:05:13:d0:df:d9:0c:e9:9e:37:59:fb:17:1c:76:
80:92:d8:6e:02:0f:59:4b:2f:4f:0f:a8:9d:76:85:
b2:65:2a:61:cf:10:75:96:70:ac:43:0b:77:c8:ff:
8f:e5:cf:95:e5:be:5e:4a:25:03:31:1a:ee:4a:c6:
ce:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D8:F0:C9:40:1D:0E:3F:3B:0A:12:B7:7D:87:BA:85:2A:2C:4D:F8
X509v3 Authority Key Identifier:
keyid:4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:71:f2:b3:64:b2:cc:50:51:83:f5:a9:58:92:c9:8f:bd:a4:
cd:43:b6:39:52:4e:8a:6b:17:94:db:ce:7f:22:00:21:26:68:
9a:7f:b3:31:52:12:ae:ce:95:93:a7:28:ad:b0:ce:5a:0f:51:
fa:de:db:70:dc:57:23:0c:52:8a:21:6c:2e:3e:0f:95:00:17:
24:50:9e:04:c3:4f:c7:50:55:61:c2:72:27:b9:65:66:18:65:
9d:49:95:cf:dc:70:59:b8:e4:a3:16:7a:db:36:55:47:e8:73:
67:11:85:ab:01:f5:03:c2:0f:a6:25:11:9c:8d:75:e2:3f:7d:
ea:e7:f8:48:fd:69:80:82:cd:d7:8c:0d:29:35:41:c8:f1:9e:
fe:c8:f8:b5:1f:c8:f0:18:23:dd:a5:f0:46:63:5b:01:01:85:
05:6e:b8:da:af:d2:1f:43:cf:20:63:8c:8f:9c:0c:55:96:02:
93:4f:27:02:19:e0:4a:b2:fb:d3:20:51:4f:cf:c0:4c:91:07:
f0:91:1c:a4:0a:9d:30:c0:df:9e:d5:c0:2e:52:12:57:e0:4c:
e0:77:29:88:7c:c5:8e:7b:dd:a9:cf:18:ac:ac:d7:4d:8c:00:
78:90:ad:a9:82:ff:d4:92:48:2b:6f:38:3b:76:79:a6:56:58:
1a:f0:00:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:42:21 2026 by rpki-client