Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
File: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft (raw, json)
Hash identifier: KIhTjxh0a9ddG5NobhoRA+EcDXcxtSLEd/J+4oF4P28=
Subject key identifier: 8D:DD:95:A2:24:D8:89:84:FC:5A:EC:5E:4A:54:68:E5:41:B9:ED:0D
Authority key identifier: 4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE
Certificate issuer: /CN=4da3711dc5de45f2f5b47901659e956d938272fe
Certificate serial: 019CAC7DF07B8154A2866C228FC1BDAFC42B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 03:01:00 +0000
Manifest this update: Mon 02 Mar 2026 03:01:00 +0000
Manifest next update: Tue 03 Mar 2026 03:01:00 +0000
Files and hashes: 1: QMeWn3NQA2fbA8c1b6eFvzqzvWg.roa (hash: 8sNKEwPOI3VlePsjcLNbwBz/I6kJ5Yh/1lRoX0WjxkU=)
2: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl (hash: vkj1hAXakralaFQic1f2ipbtLVV0fyichG+wJmtiFyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:f0:7b:81:54:a2:86:6c:22:8f:c1:bd:af:c4:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da3711dc5de45f2f5b47901659e956d938272fe
Validity
Not Before: Mar 2 03:01:00 2026 GMT
Not After : Mar 3 03:01:00 2026 GMT
Subject: CN=8ddd95a224d88984fc5aec5e4a5468e541b9ed0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4d:ed:a9:c8:5c:27:11:48:b5:f4:83:4f:a8:
02:56:3f:38:93:8a:1f:cd:63:7c:e6:22:57:f8:2c:
68:54:03:1c:97:fd:84:16:fb:aa:33:ba:d3:c0:ef:
03:70:63:44:bd:87:a3:b5:82:b9:a7:fa:db:72:6d:
33:5c:94:b7:9f:67:c7:e7:5c:b9:64:c5:51:b0:a5:
9b:8e:52:0a:54:bc:87:cd:76:d2:91:ca:9e:2e:df:
ec:46:b4:2a:1d:0b:eb:c1:37:84:55:f5:f8:d5:9e:
e4:6b:ec:1a:fd:c4:22:96:f4:7d:b6:d6:f9:ac:17:
a6:eb:39:ac:9a:ca:b9:1d:b3:a0:0b:b0:53:77:d4:
fb:ba:eb:89:1f:d3:b1:d1:85:c0:c0:9f:c9:cc:81:
60:87:c3:8c:02:2f:21:fa:e9:e6:ac:4b:35:7e:a2:
b0:a2:46:bb:2b:2d:74:5f:ee:0d:11:45:20:f8:8e:
20:6c:3a:55:91:75:cd:7c:a2:ce:70:4e:5a:2d:a1:
14:92:a3:e1:2b:68:49:1d:2a:75:f0:df:40:68:5b:
21:1d:e0:13:11:6c:19:e9:e8:35:cd:40:23:f1:ec:
aa:5d:4c:21:01:5a:5b:62:8b:4c:11:06:53:7c:93:
b5:2a:f9:6e:0a:83:08:ac:ed:7c:fa:48:68:52:63:
05:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:DD:95:A2:24:D8:89:84:FC:5A:EC:5E:4A:54:68:E5:41:B9:ED:0D
X509v3 Authority Key Identifier:
keyid:4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:60:df:0c:cd:46:ff:57:84:58:8a:fd:46:df:fe:d7:f7:9f:
ab:02:c4:b6:f8:54:4a:aa:de:82:b6:3a:83:ae:c7:3e:a4:a5:
56:50:83:c3:af:14:3e:a5:70:02:d8:6a:6c:19:13:02:50:d7:
d4:9f:b4:b3:61:6d:34:f9:dc:a4:1e:b7:28:be:c1:7b:e1:5e:
02:ac:d0:bf:18:3f:4e:b5:39:95:c0:02:7c:cf:86:0a:18:6b:
25:9d:88:54:c8:6d:37:9d:85:ad:6f:fc:78:3e:e6:18:4b:e6:
d2:a1:a3:28:8b:d0:88:f5:44:0e:21:e0:36:b3:0e:c5:a7:db:
11:0e:69:ec:35:b1:d9:bf:7f:2f:a6:bc:cb:d9:e0:0e:6d:f6:
31:d8:2c:04:26:fd:86:2d:c7:49:83:44:aa:9d:33:51:5e:d4:
49:3f:aa:5e:a4:f6:c4:e5:79:97:f8:0b:f7:7c:f2:ff:b8:2f:
bb:60:7e:1d:59:74:99:b2:fa:c3:d3:cd:88:ee:35:b1:87:42:
71:0b:81:7e:d8:bd:b6:97:bb:b1:d6:0d:a7:1c:b3:ea:08:24:
d1:fc:7d:8a:80:54:96:a3:25:50:d7:f3:ac:d6:15:f1:df:a7:
8d:b9:c4:0f:da:2c:57:75:0b:0d:0d:30:dc:9e:bb:c1:c1:72:
e3:7f:98:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:39:12 2026 by rpki-client