
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
File: TEDHERwpFqX1ra8eUFCpQMJrI3g.mft (raw, json)
Hash identifier: WTnCbJH/hFck6YZ2eQvPyoNmODwzp3bn71i0ajvJgCU=
Subject key identifier: 2A:7F:93:0F:F2:B4:78:22:79:4A:FB:94:64:13:02:8F:C1:6F:59:29
Authority key identifier: 4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78
Certificate issuer: /CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
Certificate serial: 019F95807B6417DDFEF180427344F25ADE40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 19:00:52 +0000
Manifest this update: Fri 24 Jul 2026 19:00:52 +0000
Manifest next update: Sat 25 Jul 2026 19:00:52 +0000
Files and hashes: 1: TEDHERwpFqX1ra8eUFCpQMJrI3g.crl (hash: L3KLaqY7RILvZJAT3k2opK4FORzjsXykdJtwvaUUZWI=)
2: WWNIYacMJoEIRfEav5J1OWOX504.roa (hash: tPd27yKggwGnWK5YYeEd5gD5neTnZ1BFKcvvTfuouW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:7b:64:17:dd:fe:f1:80:42:73:44:f2:5a:de:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
Validity
Not Before: Jul 24 19:00:52 2026 GMT
Not After : Jul 25 19:00:52 2026 GMT
Subject: CN=2a7f930ff2b47822794afb946413028fc16f5929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a2:7c:6a:0d:0d:0b:00:33:fc:82:c1:97:91:
e8:b4:8b:e9:c0:02:b6:c6:b0:e7:e8:e4:b6:1f:ff:
72:d0:df:e3:91:db:79:f8:23:48:7c:fd:2c:c2:db:
4d:84:f0:4a:0a:15:19:9d:c4:0f:5a:00:0a:db:4d:
4d:bd:14:5e:16:5b:ab:ee:e7:64:13:03:0c:18:1f:
11:70:78:7f:87:31:fb:eb:f8:d4:85:20:d9:39:24:
e7:03:8a:48:f8:5e:6d:42:49:fe:8f:c2:96:2c:2d:
9e:db:de:49:07:d8:66:af:0a:35:ea:a4:7f:6b:b6:
40:a7:e2:87:ac:0d:8e:f5:21:76:96:6e:5c:bc:f4:
9a:a9:d1:1e:c1:22:34:6c:57:5d:5a:f0:98:67:e2:
e9:95:29:63:88:7f:09:db:58:a7:18:ef:35:ff:44:
bf:1b:1c:10:e7:a5:fd:e9:79:79:64:b7:bd:85:08:
05:42:24:65:3e:cb:b1:e2:c8:75:a1:06:69:ad:e8:
61:15:b1:bd:d3:47:93:05:c9:47:48:ca:f9:0d:fa:
6b:14:f9:51:4b:6b:ad:5f:80:b4:2f:0e:ee:98:71:
f1:35:89:90:5a:8a:de:95:55:8e:f3:c1:95:1e:91:
03:11:95:0f:a7:79:ba:7d:aa:87:e0:85:57:8c:8c:
b3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7F:93:0F:F2:B4:78:22:79:4A:FB:94:64:13:02:8F:C1:6F:59:29
X509v3 Authority Key Identifier:
keyid:4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:00:91:ab:48:41:cf:2c:d1:ca:d4:08:3c:3e:f5:8e:13:5a:
5b:12:42:d2:ef:24:d6:d2:2f:74:4e:0d:fb:f0:c2:a7:cb:4d:
cc:b9:dc:d0:b3:6e:4f:98:7f:0e:0e:08:6e:92:2a:b2:6b:f4:
b4:24:00:82:19:3f:fb:09:d1:2b:95:61:9c:f8:b6:50:64:67:
91:96:5c:78:4c:9c:d9:eb:a5:09:c4:ce:8c:31:e5:7c:98:ba:
d6:de:0e:fd:cf:16:da:19:29:af:d6:0f:fb:d7:83:0d:58:56:
0d:23:36:43:9b:7b:fb:a2:7b:3c:2f:2a:c8:93:30:1e:29:5e:
8b:2b:c6:cc:1f:38:af:b2:72:43:ee:65:ff:55:1c:0d:f1:b6:
a0:ef:79:93:a2:b2:2e:1f:ad:89:a0:4b:4d:41:5a:57:f3:fd:
ed:b9:26:21:23:36:64:0d:c0:62:7c:fd:67:b6:3a:cc:35:f4:
c6:8d:6b:bd:1f:2e:6e:bb:b8:7d:3b:15:26:41:8c:ec:32:7e:
8b:b7:f4:c8:ab:20:2a:14:97:54:41:ad:6a:0a:33:d4:15:d4:
16:32:5b:02:3f:46:ed:d8:ed:92:7d:c1:5a:01:25:a3:0f:ae:
ee:56:bd:6b:1d:13:9c:da:31:26:88:62:76:dc:13:f1:ed:44:
4f:20:a0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:49:26 2026 by rpki-client