Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
File: TAf2nWArfrt_YzDXFcnsPlq6MPo.mft (raw, json)
Hash identifier: v0KHYrxm9WiFT8/cMp2SUjU4bpbDSQ6IOsSc8+ESvuw=
Subject key identifier: 6A:AF:D6:D3:5B:97:83:AC:B0:5E:FA:AA:BB:E5:FD:4A:19:66:1C:13
Authority key identifier: 4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA
Certificate issuer: /CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
Certificate serial: 019CAAFD8C6EE92F63AA331399C0E3D04E68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
Manifest number: 0C36
Signing time: Sun 01 Mar 2026 20:01:08 +0000
Manifest this update: Sun 01 Mar 2026 20:01:08 +0000
Manifest next update: Mon 02 Mar 2026 20:01:08 +0000
Files and hashes: 1: 4GpPsuXyTB7mqbStOGGvgQlaA3c.roa (hash: YkMMZt5aZTSuVgtlcIOQUlozXasUkQvk7oFEC+EzncM=)
2: TAf2nWArfrt_YzDXFcnsPlq6MPo.crl (hash: m4Ar7wpd6GOfEThYfOFq/ACtkUliK/ib2nKqOiP+hno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:8c:6e:e9:2f:63:aa:33:13:99:c0:e3:d0:4e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
Validity
Not Before: Mar 1 20:01:08 2026 GMT
Not After : Mar 2 20:01:08 2026 GMT
Subject: CN=6aafd6d35b9783acb05efaaabbe5fd4a19661c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a0:23:1b:9b:b6:e9:d6:d1:e9:e0:be:c8:75:
4e:39:98:be:e5:9c:8b:2a:00:bf:51:56:22:69:ad:
c6:77:40:c7:e4:c0:55:e6:87:1f:59:78:18:7d:0a:
95:7e:a2:97:0c:4a:50:11:4a:83:27:ad:c1:66:a2:
d9:83:8e:c1:9b:7f:6d:a4:df:6d:ab:21:cd:57:51:
a9:9f:f6:58:ae:5a:cf:14:52:52:6b:07:ca:46:c2:
40:27:24:2b:17:1f:fd:e7:30:a9:20:04:70:c5:7f:
e8:33:27:e6:7a:45:29:85:25:48:c3:20:60:c0:bc:
37:ef:4e:31:ef:80:d5:4a:ed:36:59:6f:69:b9:67:
00:de:71:3d:6b:bb:a0:4c:45:1d:a6:f2:a5:c3:eb:
e3:d6:a9:cf:de:7f:0f:c1:c0:63:f8:5e:31:09:84:
8d:a0:e8:e8:cd:74:c4:e6:ae:b5:9d:f8:f2:43:f6:
03:03:72:4b:29:ef:2f:66:45:bc:88:86:bf:75:8b:
e6:d5:bc:52:b7:36:33:a1:34:f0:5f:53:82:73:94:
2a:c4:43:e5:4e:ca:74:f5:79:5c:fc:cf:ce:18:5b:
8b:cb:fd:c3:cc:0c:8b:50:d4:5a:2a:69:21:9b:d3:
92:3c:b6:98:ae:fc:48:d0:41:5c:2f:91:2c:3b:90:
a4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AF:D6:D3:5B:97:83:AC:B0:5E:FA:AA:BB:E5:FD:4A:19:66:1C:13
X509v3 Authority Key Identifier:
keyid:4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:df:66:c1:40:cd:45:82:80:eb:a0:bb:68:79:de:b3:c7:1c:
87:5d:3f:fe:cb:4f:5c:27:33:00:7c:06:9f:00:a7:98:5e:6e:
81:32:d1:78:e3:bc:8e:5c:39:de:ff:d4:73:04:be:6f:e2:d0:
01:a3:e6:13:29:ee:29:87:76:f0:fb:cf:e9:20:76:39:eb:a2:
8c:05:f3:d7:79:a9:fe:ae:dd:c5:e8:b4:e4:29:92:35:62:e8:
8f:5f:58:03:52:f5:fa:88:a2:ea:09:99:b2:43:1b:e1:36:3a:
75:d6:70:64:be:aa:0f:f5:38:ef:07:7e:90:04:b1:60:95:d7:
de:76:ee:af:48:aa:c1:68:a8:65:fb:ae:b5:48:3c:a9:4e:d9:
49:0b:9b:a4:08:d9:07:1b:69:17:30:59:bd:63:d1:d5:8f:ee:
2a:3f:a3:14:c7:1d:b6:f1:e0:78:f8:2d:d5:99:1e:ee:53:8d:
52:98:f5:d5:64:c3:7d:d5:bd:5f:39:1a:e2:ad:ea:d3:ae:e2:
f2:ba:44:1d:ac:bf:2c:01:bd:c8:3f:eb:56:83:82:eb:a0:2e:
10:ac:db:51:f5:09:17:cc:8b:18:15:eb:ad:19:00:90:7b:5b:
f0:34:d7:27:e3:7b:3c:e4:b7:86:dd:14:c4:90:9f:6b:e6:9d:
94:e3:5b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:46 2026 by rpki-client