Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
File: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft (raw, json)
Hash identifier: zs6SvSXCqUSQ4ZTa4oW+87NDAp0OYWvCeVXUAEAYSoM=
Subject key identifier: 96:80:CD:DF:B5:63:AF:3E:77:1D:E4:EA:87:43:9C:CD:CC:25:A6:BF
Authority key identifier: 4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE
Certificate issuer: /CN=4da3711dc5de45f2f5b47901659e956d938272fe
Certificate serial: 019D9818C440653B198479254D89F462863B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 21:00:52 +0000
Manifest this update: Thu 16 Apr 2026 21:00:52 +0000
Manifest next update: Fri 17 Apr 2026 21:00:52 +0000
Files and hashes: 1: QMeWn3NQA2fbA8c1b6eFvzqzvWg.roa (hash: 8sNKEwPOI3VlePsjcLNbwBz/I6kJ5Yh/1lRoX0WjxkU=)
2: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl (hash: 8vS7+MvzCnEz8dd/w3NTN9lnrJjVMrcESrADPL/xkHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:c4:40:65:3b:19:84:79:25:4d:89:f4:62:86:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da3711dc5de45f2f5b47901659e956d938272fe
Validity
Not Before: Apr 16 21:00:52 2026 GMT
Not After : Apr 17 21:00:52 2026 GMT
Subject: CN=9680cddfb563af3e771de4ea87439ccdcc25a6bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9b:d2:e4:19:ba:8f:cd:c5:5b:d5:c7:98:b0:
3d:8e:58:53:1e:15:00:5a:33:3e:d2:dc:b3:b1:c0:
78:83:56:1a:46:83:d6:2e:78:3f:b6:8e:54:79:63:
46:cb:39:ea:8c:88:31:4b:d3:2f:ab:49:04:ae:ba:
be:5e:90:81:6d:88:3e:77:75:de:36:e9:81:44:15:
d4:28:d3:84:e2:15:c8:90:99:f9:22:22:be:d9:b6:
fc:5d:8c:a7:e7:d8:3a:42:ef:13:2f:8d:a6:a4:81:
6f:da:cb:af:80:73:21:e1:ff:4c:30:4c:36:52:ff:
00:82:ea:6d:78:6e:b3:e3:df:ea:14:4b:9e:c5:49:
72:76:c9:75:a2:e8:b0:f1:b1:66:a8:ca:f3:9b:e2:
c3:81:d0:72:03:08:6e:0d:89:98:5c:04:50:d7:b2:
13:f5:fb:3f:26:b9:7f:27:03:07:7c:d7:2a:bb:92:
82:65:8c:9e:fb:4d:a1:4f:e3:3f:61:6f:78:18:e2:
1f:a4:40:fe:74:0d:c7:bd:6e:ea:0f:13:e2:49:58:
96:59:c6:dc:a0:84:b1:5f:74:be:49:6e:0b:59:27:
59:45:ad:44:69:9d:96:ff:4a:64:e1:02:6a:55:85:
5a:43:3d:f2:e4:36:e2:31:c9:83:62:04:ae:dd:57:
19:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:80:CD:DF:B5:63:AF:3E:77:1D:E4:EA:87:43:9C:CD:CC:25:A6:BF
X509v3 Authority Key Identifier:
keyid:4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:8d:af:34:c6:4c:af:5c:12:47:b5:61:f0:4d:5c:42:fa:1b:
dc:c8:fd:3d:53:2e:86:30:b1:05:3f:e3:f4:a4:f0:8a:d1:c4:
27:58:ca:e5:4a:a0:3a:f2:c0:59:80:70:5e:fb:9a:57:d3:9a:
49:32:7a:a0:11:8d:b1:eb:76:82:13:4e:8f:8a:00:24:da:2f:
11:03:21:9c:f5:4f:7f:47:3a:a4:29:2e:ab:a0:67:af:44:c4:
0b:1f:36:34:06:ae:ef:d5:a3:3e:9c:77:e3:fb:e5:2e:c1:fc:
b8:50:c5:35:f3:f1:ae:dd:f9:44:c8:e9:e1:a7:85:ec:36:62:
8b:d4:0d:77:7e:54:8d:ac:31:64:88:30:8e:eb:aa:b5:a5:e6:
99:8a:f9:c9:20:43:fb:83:49:36:39:99:1c:58:e0:04:18:55:
75:9e:f8:46:f9:ed:ba:3e:15:d1:76:bf:9d:a2:8d:cb:f1:50:
92:f8:f6:21:91:46:89:84:b3:96:ad:c7:c7:ab:e1:03:22:0a:
af:1d:b4:e1:a7:06:e4:06:87:08:34:1f:30:17:bd:1e:ad:ac:
2b:32:6b:0a:0e:5b:84:2f:1c:84:ff:1a:3d:6f:8f:02:eb:30:
88:71:65:93:2a:90:40:ef:a9:38:33:e5:02:b8:77:05:11:50:
2e:ea:39:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:08:08 2026 by rpki-client