Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
File: TAf2nWArfrt_YzDXFcnsPlq6MPo.mft (raw, json)
Hash identifier: Tvwjc3Czqt+6K3btPLENTbMkiLQ8OH5eBV5lOuJK1Hs=
Subject key identifier: 62:5C:9E:3E:C7:0A:84:66:CB:0C:93:E8:21:B2:CF:80:EA:34:AE:BF
Authority key identifier: 4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA
Certificate issuer: /CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
Certificate serial: 019D9886D3C4461B469070B0CCE80491CC2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
Manifest number: 0CB1
Signing time: Thu 16 Apr 2026 23:01:05 +0000
Manifest this update: Thu 16 Apr 2026 23:01:05 +0000
Manifest next update: Fri 17 Apr 2026 23:01:05 +0000
Files and hashes: 1: 4GpPsuXyTB7mqbStOGGvgQlaA3c.roa (hash: YkMMZt5aZTSuVgtlcIOQUlozXasUkQvk7oFEC+EzncM=)
2: TAf2nWArfrt_YzDXFcnsPlq6MPo.crl (hash: v4qErfZlabvYnFE52iZaExtk0aPdFNjDOetrSW5dq58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:d3:c4:46:1b:46:90:70:b0:cc:e8:04:91:cc:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
Validity
Not Before: Apr 16 23:01:05 2026 GMT
Not After : Apr 17 23:01:05 2026 GMT
Subject: CN=625c9e3ec70a8466cb0c93e821b2cf80ea34aebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ea:69:47:ba:5e:5c:15:c9:9e:9f:70:27:5e:
9e:c0:35:3e:53:7e:2a:1c:71:61:d9:c0:85:88:7a:
ed:ad:b0:3e:3c:6d:a5:48:ad:a3:f2:ab:71:5b:5b:
7c:97:23:97:43:83:91:a6:0c:e0:28:ed:cb:a9:0e:
11:79:20:1a:49:ef:4f:d6:f4:68:d4:a2:6a:9d:c6:
95:fd:7d:3e:44:38:0c:0a:81:ef:ec:4c:3d:41:93:
b5:d4:9e:e8:b1:ce:a3:a1:0b:5d:0e:1d:47:50:71:
12:0b:cc:83:99:e6:e9:ad:b5:0a:de:8f:3f:70:d7:
12:17:80:d7:8e:a4:45:2e:60:c3:91:6f:ef:50:9e:
02:88:e8:9c:00:4a:e2:d6:78:80:77:dc:13:1d:a5:
26:90:19:15:d3:e7:f0:68:e3:54:89:a8:1e:6d:d9:
07:36:b6:cd:67:61:5a:a6:54:8e:4a:43:61:4a:ce:
20:8f:f1:69:b5:b4:c2:62:c4:8c:92:27:b8:ed:af:
1a:c4:1c:1e:f9:2c:b6:e2:b6:ff:20:cb:fc:e3:2d:
b9:da:dd:9f:d6:7d:00:b6:f5:d2:b9:9a:52:e0:e9:
20:5b:45:6b:61:8a:b2:ea:65:e3:25:11:32:24:d7:
11:e3:36:f6:a0:b8:a8:f3:ea:6c:1f:7e:62:d0:bf:
03:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5C:9E:3E:C7:0A:84:66:CB:0C:93:E8:21:B2:CF:80:EA:34:AE:BF
X509v3 Authority Key Identifier:
keyid:4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ee:95:7f:95:00:64:dd:0b:97:ac:42:31:05:a1:8c:76:4a:
80:5a:8a:f2:8f:c1:59:9c:c8:76:7e:c6:f4:e9:6a:26:e3:78:
90:8e:82:f0:6b:93:5b:d8:47:08:c9:82:7a:01:63:35:e3:f4:
97:14:5e:8c:ca:a6:00:9c:31:2f:5d:91:60:be:e0:5b:10:2c:
ce:8e:f3:a2:4f:5c:25:45:4a:1b:49:11:8f:f4:86:df:6e:19:
dd:c3:60:57:c0:d8:d8:6f:aa:00:87:5b:8f:ac:ca:5b:ad:13:
c7:ea:8d:a7:1a:df:ee:99:46:85:82:0b:cd:fe:f0:b4:95:84:
a4:29:be:0b:7d:97:5d:9d:16:f4:ab:6e:f3:7e:b6:85:bc:b4:
c8:4f:f8:1c:4f:4f:92:55:b7:1c:69:90:45:36:15:ef:66:e7:
9a:d7:70:31:10:5c:fb:fb:81:3c:b6:e3:b0:ce:bc:14:5e:93:
40:eb:3b:35:87:b0:50:ab:d7:60:34:fc:68:2c:28:5f:af:f7:
b7:9d:d4:14:e8:77:ee:22:19:7d:5e:79:99:f0:03:05:08:ac:
6c:63:5e:91:95:d8:69:d3:d9:fe:5f:ec:ab:a4:05:1c:eb:ed:
ab:29:27:ea:96:a8:b6:88:ae:5f:ee:a7:5b:98:80:6a:42:e3:
92:83:2b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:54:09 2026 by rpki-client