Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
File: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft (raw, json)
Hash identifier: h7AGKJnuHoZjoNk2lqDh71tRYZWxNwnu6N9sKqpILyc=
Subject key identifier: D3:4C:A7:73:B1:38:CB:94:12:C8:57:E6:90:19:9A:07:23:18:90:66
Authority key identifier: 4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE
Certificate issuer: /CN=4da3711dc5de45f2f5b47901659e956d938272fe
Certificate serial: 01A0DA5F9E51A4E92D03D865DE6E723A9450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 21:01:34 +0000
Manifest this update: Fri 25 Sep 2026 21:01:34 +0000
Manifest next update: Sat 26 Sep 2026 21:01:34 +0000
Files and hashes: 1: QMeWn3NQA2fbA8c1b6eFvzqzvWg.roa (hash: 8sNKEwPOI3VlePsjcLNbwBz/I6kJ5Yh/1lRoX0WjxkU=)
2: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl (hash: bmw+gYYVOWKqFG5FeEkfnzi3tcyH9UDOwf98ACd7eu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:9e:51:a4:e9:2d:03:d8:65:de:6e:72:3a:94:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da3711dc5de45f2f5b47901659e956d938272fe
Validity
Not Before: Sep 25 21:01:34 2026 GMT
Not After : Sep 26 21:01:34 2026 GMT
Subject: CN=d34ca773b138cb9412c857e690199a0723189066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e1:c1:f3:f4:7a:f3:d5:1c:93:6d:44:71:1a:
25:d1:10:24:7c:94:f6:6f:aa:94:54:c1:8c:6b:53:
94:5d:5b:6e:a4:4a:1e:36:e2:ac:51:b3:b2:45:86:
d6:92:9b:ee:eb:6d:ca:86:43:67:36:5e:16:8e:95:
83:07:9f:bd:a2:06:7e:60:82:92:fe:b9:b9:16:99:
9f:5e:1f:8d:c7:3f:7c:59:2e:48:a2:16:5a:6a:a7:
41:24:5b:2d:19:fe:1b:f4:5a:b2:00:ad:8d:ce:de:
8a:8d:22:d7:ac:9c:d1:b1:67:8d:cf:b1:a4:64:26:
d4:9f:09:38:74:38:5b:2f:9f:1d:fc:b4:d8:cc:91:
2e:90:5a:9b:67:41:b0:0d:87:71:d8:35:39:ed:0b:
95:97:ca:af:d0:6a:3f:5e:93:0d:7a:ed:39:58:36:
33:88:0f:d4:16:88:70:08:75:94:1a:ed:96:76:93:
15:5f:dc:5f:fd:c9:ac:4b:b9:7f:8b:e5:1a:11:35:
99:95:07:f8:6c:5c:62:7c:cf:9a:ee:08:47:d3:56:
e1:58:fc:0d:5f:f1:d5:90:05:83:38:17:84:18:43:
d8:71:0d:41:c4:03:75:9e:cc:36:ed:1f:32:bb:eb:
ed:78:94:10:6e:1c:79:28:10:2f:22:62:b3:3b:ab:
4b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4C:A7:73:B1:38:CB:94:12:C8:57:E6:90:19:9A:07:23:18:90:66
X509v3 Authority Key Identifier:
keyid:4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:90:48:d2:3d:8c:fe:56:ac:37:24:34:13:f2:12:8e:b5:d9:
e1:db:5b:3a:fe:e3:6e:6d:dd:98:14:66:40:74:a4:fb:fc:17:
74:33:1e:63:bd:48:40:4a:22:e8:aa:d1:f8:4a:83:6e:c4:85:
24:ff:a7:8b:98:10:fd:e9:ee:ee:3c:b8:85:a3:ff:e7:a8:b2:
94:81:28:0b:79:be:d5:de:70:68:ea:d3:d4:eb:d9:bf:16:36:
08:fa:c2:22:d1:8d:d1:7b:0e:ad:d0:dc:27:c9:e9:5c:a7:c6:
29:ff:6d:fc:84:53:5d:9b:18:74:52:f8:e0:e9:a2:3b:11:32:
2e:12:b4:8a:0f:41:58:57:bf:21:28:a9:66:4e:a0:a9:ed:c3:
b3:1b:31:f1:6a:d6:a0:d2:6f:bf:a5:4f:f5:cc:b0:22:5b:72:
11:1a:7b:d1:07:de:cc:02:d7:c7:ae:ad:06:f7:0f:ab:d2:13:
f9:06:31:9b:cb:17:2b:47:5e:90:60:22:e9:9f:03:4f:c5:bb:
d9:8c:20:f5:a5:05:16:a8:d0:1a:5f:3d:55:7d:66:39:a2:7d:
90:7d:5f:97:b4:29:89:bc:cf:fd:d5:2f:8b:d7:f3:1a:4f:d9:
26:66:1d:c5:e3:96:e8:68:fc:e3:8e:28:fb:1e:15:4f:13:b4:
ac:b9:b2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:54:15 2026 by rpki-client