Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
File: TAf2nWArfrt_YzDXFcnsPlq6MPo.mft (raw, json)
Hash identifier: IArbNxG9me5y0AMondcXJcEqYQiCCYWGP+wAfVnw3EU=
Subject key identifier: 5B:0B:CA:9C:82:41:52:61:66:CA:7D:FF:D6:D7:5F:B5:70:38:3C:4C
Authority key identifier: 4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA
Certificate issuer: /CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
Certificate serial: 01A14315D3319B178938597ADBA6C3BCC493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
Manifest number: 0E97
Signing time: Fri 16 Oct 2026 05:01:05 +0000
Manifest this update: Fri 16 Oct 2026 05:01:05 +0000
Manifest next update: Sat 17 Oct 2026 05:01:05 +0000
Files and hashes: 1: 4GpPsuXyTB7mqbStOGGvgQlaA3c.roa (hash: YkMMZt5aZTSuVgtlcIOQUlozXasUkQvk7oFEC+EzncM=)
2: TAf2nWArfrt_YzDXFcnsPlq6MPo.crl (hash: Iovceg7+2hYNZZ24wRfnsaD6La31sNicy4C8TvWXnSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:15:d3:31:9b:17:89:38:59:7a:db:a6:c3:bc:c4:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
Validity
Not Before: Oct 16 05:01:05 2026 GMT
Not After : Oct 17 05:01:05 2026 GMT
Subject: CN=5b0bca9c8241526166ca7dffd6d75fb570383c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:17:88:93:65:da:b6:60:e4:ea:f9:be:47:fb:
08:76:d3:5b:11:97:3c:07:f5:bd:5b:ff:c1:4c:cc:
0f:fa:d1:79:d1:f5:db:11:63:f5:ef:ff:3c:0a:4d:
56:5b:28:c0:ad:c3:78:a4:73:71:f5:ec:b7:5a:83:
2c:0b:a4:3b:a4:33:22:1e:f0:31:48:30:1b:f9:38:
00:01:e9:19:ac:ab:12:b1:4b:e7:fe:08:b2:26:16:
d2:6c:58:0d:27:d4:93:3a:bc:90:28:1c:0f:35:94:
2e:25:0e:44:1a:95:b0:a6:19:0a:82:72:53:0d:fb:
20:2d:f3:b9:46:4c:d3:6d:3b:ba:df:60:b4:9a:a6:
e9:f3:20:ba:58:18:27:b0:3d:c6:05:96:e4:61:9f:
8d:9c:54:5e:98:2a:b5:aa:d3:21:d3:6c:eb:5c:f3:
e0:58:b7:b0:00:14:3d:cc:35:7e:19:33:6e:46:c8:
72:5b:88:64:fa:86:04:30:d1:0b:a2:27:13:bd:1d:
49:1e:2a:5c:60:ba:a9:59:94:ab:e8:09:13:3b:30:
05:bd:3b:e8:ca:0a:44:3c:50:79:e8:da:47:58:ad:
ce:76:70:46:64:ce:72:b5:d5:9e:8f:f4:a4:4f:17:
99:5b:cb:db:05:9f:73:2a:7b:6d:40:f8:3c:fc:19:
d0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0B:CA:9C:82:41:52:61:66:CA:7D:FF:D6:D7:5F:B5:70:38:3C:4C
X509v3 Authority Key Identifier:
keyid:4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:8e:c5:57:1d:cc:f4:90:35:0f:74:26:57:de:61:c5:f2:84:
32:af:4a:52:02:f2:99:1f:88:52:f9:2c:48:af:8d:b9:e8:dd:
30:5a:4c:56:b6:9b:ab:ba:1e:c8:45:b6:84:42:44:67:ce:7c:
fd:6b:65:43:91:56:f4:87:89:c6:83:0e:76:65:c6:c4:db:6f:
d5:56:56:7d:d2:7f:af:e4:ff:ae:fc:20:93:69:59:ee:38:4f:
45:8f:fa:48:18:6e:7b:1f:98:76:df:10:9b:0a:df:21:b6:b5:
2f:0d:9d:ce:f0:12:95:bc:17:88:eb:48:0c:df:74:a6:c7:e8:
da:98:ca:89:19:9d:36:33:a8:24:b7:3b:ca:99:ad:68:76:a3:
e0:e2:36:ca:d3:1b:99:3d:01:32:44:68:33:dc:96:e4:a3:f4:
59:2d:05:f8:1c:14:7c:41:1e:2d:aa:cf:fd:6d:0a:cd:44:8d:
2e:4e:25:73:9e:26:de:f4:67:0c:be:43:c9:1e:2c:4e:b9:bb:
9c:97:11:8c:11:85:df:7d:10:d7:1a:1d:8b:fe:a3:24:7b:7c:
6f:90:e0:28:20:41:5f:51:a4:f5:8c:c8:a8:0b:52:90:01:bf:
6a:f5:e9:02:1e:f4:a9:db:8f:a2:06:2e:79:5d:c0:a0:81:24:
1c:55:5c:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFDFdMxmxeJOFl626bDvMSTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMDdmNjlkNjAyYjdlYmI3ZjYzMzBkNzE1YzllYzNlNWFi
YTMwZmEwHhcNMjYxMDE2MDUwMTA1WhcNMjYxMDE3MDUwMTA1WjAzMTEwLwYDVQQD
Eyg1YjBiY2E5YzgyNDE1MjYxNjZjYTdkZmZkNmQ3NWZiNTcwMzgzYzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BeIk2XatmDk6vm+R/sIdtNbEZc8
B/W9W//BTMwP+tF50fXbEWP17/88Ck1WWyjArcN4pHNx9ey3WoMsC6Q7pDMiHvAx
SDAb+TgAAekZrKsSsUvn/giyJhbSbFgNJ9STOryQKBwPNZQuJQ5EGpWwphkKgnJT
DfsgLfO5RkzTbTu632C0mqbp8yC6WBgnsD3GBZbkYZ+NnFRemCq1qtMh02zrXPPg
WLewABQ9zDV+GTNuRshyW4hk+oYEMNELoicTvR1JHipcYLqpWZSr6AkTOzAFvTvo
ygpEPFB56NpHWK3OdnBGZM5ytdWej/SkTxeZW8vbBZ9zKnttQPg8/BnQ5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFsLypyCQVJhZsp9/9bXX7VwODxMMB8GA1UdIwQY
MBaAFEwH9p1gK367f2Mw1xXJ7D5aujD6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEFmMm5XQXJmcnRfWXpEWEZjbnNQbHE2TVBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9lZTcxYzYtMWJhZS00ODU4LWFmM2Et
YmMyODlkYzE3ZDIwLzEvVEFmMm5XQXJmcnRfWXpEWEZjbnNQbHE2TVBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9lZTcxYzYtMWJhZS00ODU4LWFmM2EtYmMyODlkYzE3ZDIw
LzEvVEFmMm5XQXJmcnRfWXpEWEZjbnNQbHE2TVBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuY7FVx3M
9JA1D3QmV95hxfKEMq9KUgLymR+IUvksSK+NuejdMFpMVrabq7oeyEW2hEJEZ858
/WtlQ5FW9IeJxoMOdmXGxNtv1VZWfdJ/r+T/rvwgk2lZ7jhPRY/6SBhuex+Ydt8Q
mwrfIba1Lw2dzvASlbwXiOtIDN90psfo2pjKiRmdNjOoJLc7ypmtaHaj4OI2ytMb
mT0BMkRoM9yW5KP0WS0F+BwUfEEeLarP/W0KzUSNLk4lc54m3vRnDL5DyR4sTrm7
nJcRjBGF330Q1xodi/6jJHt8b5DgKCBBX1Gk9YzIqAtSkAG/avXpAh70qduPogYu
eV3AoIEkHFVchA==
-----END CERTIFICATE-----
Generated at Fri Oct 16 16:39:44 2026 by rpki-client