Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
File: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft (raw, json)
Hash identifier: jntNEbfS4/C/J8xKy28cUoVNK7yFaQ0biJDg6JYjP4o=
Subject key identifier: AC:1D:48:6D:30:91:3B:4D:A5:3D:4F:89:AD:12:8F:77:A3:79:B4:F7
Authority key identifier: 4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE
Certificate issuer: /CN=4da3711dc5de45f2f5b47901659e956d938272fe
Certificate serial: 019FAD1AF0AB29112DFD46306631DFFD51BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 09:00:51 +0000
Manifest this update: Wed 29 Jul 2026 09:00:51 +0000
Manifest next update: Thu 30 Jul 2026 09:00:51 +0000
Files and hashes: 1: QMeWn3NQA2fbA8c1b6eFvzqzvWg.roa (hash: 8sNKEwPOI3VlePsjcLNbwBz/I6kJ5Yh/1lRoX0WjxkU=)
2: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl (hash: 3r3Al77h0R4c2Sghsz3YKYZqMZRwcmnETjPFcx6+nXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:f0:ab:29:11:2d:fd:46:30:66:31:df:fd:51:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da3711dc5de45f2f5b47901659e956d938272fe
Validity
Not Before: Jul 29 09:00:51 2026 GMT
Not After : Jul 30 09:00:51 2026 GMT
Subject: CN=ac1d486d30913b4da53d4f89ad128f77a379b4f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:71:93:85:5e:fc:a5:b5:cb:d9:cf:21:b1:cc:
4f:01:7f:9e:ac:73:51:4a:67:d9:ee:14:82:53:a8:
4f:6d:6e:e0:b5:14:84:d6:4f:6d:94:48:10:80:29:
7e:c6:99:8d:b3:d1:44:e7:1b:40:2a:77:8e:5a:74:
f3:22:da:89:64:c3:a0:a0:54:38:87:af:ab:28:3d:
af:d5:97:3e:b7:f4:e0:8e:5d:04:29:69:cc:0c:a3:
67:4c:11:e4:66:ab:f5:a6:be:7f:af:c9:de:d2:e5:
c0:f9:c7:c2:b9:58:c9:0e:70:ef:00:2c:bd:45:e0:
5a:d6:b0:04:de:39:ba:b7:b7:75:14:f7:cd:83:93:
43:51:57:3c:ed:b7:e6:f3:04:bf:8b:a8:7f:50:e1:
e5:ec:e9:66:b8:d3:68:39:68:92:91:84:86:d3:e7:
d2:86:36:fc:d5:c9:98:c5:93:a0:3e:e2:74:a2:29:
af:9c:72:a4:dd:11:75:69:94:3a:0c:7b:24:64:9e:
bd:38:e7:15:99:cf:0c:d9:55:99:25:36:49:9b:6f:
5e:33:5a:c9:dc:77:61:63:f0:3f:f5:6e:8b:1c:a3:
2f:c8:b3:0f:6b:78:72:54:9e:4d:51:11:84:42:c8:
be:26:76:79:53:54:83:f3:26:ed:e0:b2:cc:76:78:
88:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1D:48:6D:30:91:3B:4D:A5:3D:4F:89:AD:12:8F:77:A3:79:B4:F7
X509v3 Authority Key Identifier:
keyid:4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:30:9f:ba:4c:3e:01:ac:89:56:60:72:64:11:16:92:ed:36:
00:8d:2f:a9:05:ca:88:8b:62:a6:f6:36:1a:ab:f4:17:df:95:
dc:c1:df:62:e1:8c:e9:0d:88:fa:d7:de:b9:68:ce:15:2c:e5:
8a:38:1b:d0:4f:0f:d5:1b:38:7f:19:53:c3:eb:30:81:94:72:
dd:e0:08:6e:54:3c:27:d0:5d:d9:75:95:da:20:93:4c:3b:10:
12:75:53:67:11:e6:b1:99:32:f0:05:45:4b:97:3d:64:6c:f5:
f1:a8:d7:e4:74:26:a8:17:64:06:81:a2:ad:e1:ad:09:4b:3d:
5f:eb:47:5b:04:16:3c:35:23:90:97:85:0c:c9:b7:e6:c5:19:
cc:24:86:56:be:f8:89:56:37:76:80:99:2c:67:40:fb:c1:0a:
8a:f1:ef:3a:3e:44:23:67:9e:d3:9c:4d:b5:f7:89:c7:a2:f9:
d1:b2:d6:f2:aa:be:d3:ff:79:03:a7:a5:6a:d2:86:64:96:73:
84:cf:ac:88:d3:97:1e:c7:19:21:62:15:e5:80:83:6a:1d:4b:
dd:dc:b3:a6:32:d5:dd:0f:b0:0a:b3:e3:7a:50:81:8e:85:8c:
d7:5c:b9:1b:3b:50:87:3b:a4:43:8a:01:43:87:38:3a:07:a5:
21:1d:93:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:03:39 2026 by rpki-client