
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
File: TAf2nWArfrt_YzDXFcnsPlq6MPo.mft (raw, json)
Hash identifier: 1PII6I7TdNNXh5WbGJn10r+p0IgetPdYMJ4Grzaf6Pw=
Subject key identifier: CA:3D:D4:86:A2:2A:FD:16:A1:4B:F1:36:E8:F5:2A:28:52:C4:CB:7E
Authority key identifier: 4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA
Certificate issuer: /CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
Certificate serial: 019EC3DCB3F51CA4D09D518196EF884F82C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
Manifest number: 0D4C
Signing time: Sun 14 Jun 2026 02:01:21 +0000
Manifest this update: Sun 14 Jun 2026 02:01:21 +0000
Manifest next update: Mon 15 Jun 2026 02:01:21 +0000
Files and hashes: 1: 4GpPsuXyTB7mqbStOGGvgQlaA3c.roa (hash: YkMMZt5aZTSuVgtlcIOQUlozXasUkQvk7oFEC+EzncM=)
2: TAf2nWArfrt_YzDXFcnsPlq6MPo.crl (hash: 7Asx+ufLSQ+chahZ1oTxs2sSj7yLPdySvZ69ZakERfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:dc:b3:f5:1c:a4:d0:9d:51:81:96:ef:88:4f:82:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
Validity
Not Before: Jun 14 02:01:21 2026 GMT
Not After : Jun 15 02:01:21 2026 GMT
Subject: CN=ca3dd486a22afd16a14bf136e8f52a2852c4cb7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e8:a5:66:78:85:04:8d:c7:fe:18:d9:a8:08:
f4:73:9b:94:b5:dc:8a:42:8e:dd:7e:50:23:06:34:
25:5d:b8:08:4b:70:3c:0e:21:46:2a:bb:dc:24:a3:
62:fe:08:99:6e:21:df:61:fa:d5:84:5b:e9:83:a3:
e0:3c:46:05:47:ef:ee:43:17:76:3d:aa:c4:d9:91:
d0:5f:a3:9f:35:b8:3f:9c:b8:90:c7:a3:e9:58:dd:
6d:68:08:7e:e4:08:1e:c5:a7:07:cc:4f:34:68:de:
c5:62:0f:bf:e1:71:fc:ad:99:b4:e1:3a:74:5a:cb:
2d:70:1b:39:e5:16:91:ab:37:d4:1d:b1:c5:dd:b8:
c2:e2:43:e4:2c:99:12:fd:21:5c:37:06:9c:b9:ea:
20:4f:93:8a:25:07:22:c3:e3:d5:19:f9:b8:13:d1:
e9:69:b1:47:36:36:20:8e:8a:d7:5f:2a:b8:d6:ba:
fb:fd:e4:b8:5b:b0:4b:c2:b5:7a:b7:86:4f:77:d0:
64:91:3f:4b:08:3c:99:20:06:52:20:dd:7e:06:81:
68:7a:e7:dd:21:df:2c:c5:f5:2d:9c:84:65:62:c5:
d9:f7:37:f6:22:74:19:d8:c3:e1:d5:f5:cd:b0:35:
6e:77:5c:5a:b7:5a:3d:d8:1c:82:48:8a:cc:13:4a:
37:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3D:D4:86:A2:2A:FD:16:A1:4B:F1:36:E8:F5:2A:28:52:C4:CB:7E
X509v3 Authority Key Identifier:
keyid:4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:77:70:a9:a3:c6:39:5c:d3:78:1b:d7:74:6b:91:19:64:ed:
2a:e6:3d:4f:5e:d3:48:3e:4f:35:8c:6c:a0:3b:d5:17:f8:4a:
f0:74:95:92:cd:b9:cd:a9:43:54:8b:3d:ab:60:45:4b:f4:6f:
1a:3a:0d:1d:1d:7e:ff:3e:24:0c:5d:ba:ad:68:9a:fd:63:2d:
21:d1:72:7f:ce:26:04:cf:86:3b:e2:c2:d7:8a:44:f6:e6:da:
8f:67:f1:af:f7:8c:92:ea:b9:d7:7e:fb:37:00:e9:a4:cf:05:
b4:65:3b:ad:de:4d:f7:fe:46:b3:5d:b3:67:ff:51:9e:a3:c9:
e3:46:c9:22:44:79:1b:70:5e:7b:95:e2:2b:2f:70:38:3c:cf:
4b:83:b4:2b:f7:4f:27:29:09:e3:b5:f5:55:d5:78:9b:62:77:
57:80:e2:46:ab:6a:1e:ed:ef:aa:20:73:08:19:1d:f4:5e:df:
b5:8b:55:32:ec:95:68:33:4e:38:09:88:17:1f:00:21:22:93:
75:4b:25:3c:58:a8:cb:f5:56:6e:80:45:74:7f:21:34:e2:6c:
54:4e:35:22:1a:22:bd:fc:16:26:ac:7f:ea:a3:1e:bb:7b:14:
49:88:61:a8:21:15:38:63:3c:42:0d:88:8a:ea:3e:a5:be:8f:
ea:57:64:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:08:57 2026 by rpki-client