Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft
File: TAcbrZKeNisGK4nIf6QbXe2k_8A.mft (raw, json)
Hash identifier: nws7Ki22xbM/IUiB+iurGAJtV3qrINIZg3T4dq4SxMs=
Subject key identifier: D9:9B:2D:1F:84:B8:96:E4:E6:FF:78:E0:64:56:CF:4E:A3:E9:8F:77
Authority key identifier: 4C:07:1B:AD:92:9E:36:2B:06:2B:89:C8:7F:A4:1B:5D:ED:A4:FF:C0
Certificate issuer: /CN=4c071bad929e362b062b89c87fa41b5deda4ffc0
Certificate serial: 019A4D73D6AE52A970FF06B52C897A406EED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft
Manifest number: 144F
Signing time: Tue 04 Nov 2025 06:00:28 +0000
Manifest this update: Tue 04 Nov 2025 06:00:28 +0000
Manifest next update: Wed 05 Nov 2025 06:00:28 +0000
Files and hashes: 1: Q7AhmlPF0P4he1DdnyBzxO1UbNg.roa (hash: taA8dfVnJrloOBeiFJz3Gf4qdbtYPfCeh6aOOG2s/PY=)
2: TAcbrZKeNisGK4nIf6QbXe2k_8A.crl (hash: 6TvA/Ik8P52cQFmEdb8c4rApOKbWAiKDlVKuqhGcBMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:d6:ae:52:a9:70:ff:06:b5:2c:89:7a:40:6e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c071bad929e362b062b89c87fa41b5deda4ffc0
Validity
Not Before: Nov 4 06:00:28 2025 GMT
Not After : Nov 5 06:00:28 2025 GMT
Subject: CN=d99b2d1f84b896e4e6ff78e06456cf4ea3e98f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3d:84:1a:9c:96:28:ad:46:dc:0a:e3:2b:39:
ef:e5:7e:57:aa:78:35:54:da:01:ea:f3:51:72:87:
5b:8e:81:5f:f5:eb:ff:2d:57:25:b2:c9:9b:44:af:
d9:05:15:21:ec:50:04:26:7f:5e:e7:d8:0a:f3:95:
9b:d2:c7:56:b6:68:2f:cc:32:66:08:75:d9:16:1e:
40:d8:31:13:3b:06:46:4f:d9:36:c1:15:15:ce:e0:
3b:6e:54:70:a5:e2:2d:b2:8d:fb:84:c2:fe:be:16:
38:47:8e:d4:e3:90:70:6b:02:8b:dd:e9:97:e4:d7:
1b:28:c4:37:72:52:e7:04:ad:72:da:68:0a:69:88:
35:b3:5f:53:1f:30:2e:ac:43:b1:7f:bd:0b:1a:16:
ea:88:a7:90:c4:56:02:76:ee:ad:8d:63:52:12:5f:
24:3a:64:5c:05:3e:14:d8:fe:c8:de:9d:33:73:80:
6a:e4:f1:e9:70:90:b7:82:e3:02:ba:38:7d:7c:e9:
3a:46:85:09:60:d2:49:ec:03:7e:49:55:26:82:12:
0d:ae:8b:1a:d9:91:d1:68:33:0b:a3:4f:4d:a9:b2:
f6:89:1b:8d:ec:37:54:8c:7f:ab:78:0b:7c:3c:51:
6d:71:94:90:61:52:7f:de:4e:5c:33:17:2a:73:ba:
c9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9B:2D:1F:84:B8:96:E4:E6:FF:78:E0:64:56:CF:4E:A3:E9:8F:77
X509v3 Authority Key Identifier:
keyid:4C:07:1B:AD:92:9E:36:2B:06:2B:89:C8:7F:A4:1B:5D:ED:A4:FF:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:45:7c:f2:66:9e:8a:c2:61:0a:bc:b2:ff:f3:98:9f:b8:8a:
c0:8e:8e:3a:81:81:e7:ba:a0:44:07:e9:7e:e3:e8:51:9a:78:
ef:9a:a3:e8:72:83:b0:d8:b3:50:60:d7:8e:f0:b9:35:15:4c:
94:32:6d:13:f3:49:73:33:72:38:b5:95:12:92:e7:30:68:19:
00:1b:d9:90:2a:ad:25:4b:21:d8:c1:c7:c8:05:c8:9b:59:0c:
9a:ff:17:7b:00:ef:69:d0:b3:1f:3e:f1:6b:6f:ed:f7:b0:97:
cb:17:0d:5f:02:83:c1:0c:5f:d5:36:6d:c3:0a:a4:50:d7:6b:
1b:c7:a3:bc:a9:a9:02:f9:1b:03:9a:c4:87:e8:10:c4:d7:d7:
dd:55:c9:44:86:25:2a:84:fb:12:5e:3b:04:4f:1b:ff:07:2c:
4e:f0:95:15:2d:de:59:6f:2e:be:ff:f5:1a:23:3e:ad:4e:db:
ad:74:a6:09:e2:6f:69:85:41:58:01:e5:f3:29:a8:78:cc:c3:
77:05:b4:0d:b1:e4:de:c8:09:59:ec:05:0c:bd:50:08:7b:b4:
cf:f8:90:68:d6:17:99:78:ff:c6:5c:f4:8a:40:a7:ef:14:96:
a5:cd:33:92:1c:61:b5:42:02:38:47:36:75:e8:09:63:3d:d9:
0a:88:f9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:28:23 2025 by rpki-client