Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
File: TEDHERwpFqX1ra8eUFCpQMJrI3g.mft (raw, json)
Hash identifier: uC6RaWwbBzU01VA03zZSTBmuZYsHobCUBQIpw/x6EY8=
Subject key identifier: 30:C5:53:D8:3B:7F:0E:90:C6:54:93:53:E1:64:CB:65:3D:A6:9A:6B
Authority key identifier: 4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78
Certificate issuer: /CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
Certificate serial: 01A0CC6C807E58F1B06D0FA230D515B20BBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
Manifest number: 1A68
Signing time: Wed 23 Sep 2026 04:00:57 +0000
Manifest this update: Wed 23 Sep 2026 04:00:57 +0000
Manifest next update: Thu 24 Sep 2026 04:00:57 +0000
Files and hashes: 1: TEDHERwpFqX1ra8eUFCpQMJrI3g.crl (hash: H/B9NFKTZD/mmIa0zXnCJ79WdwoCEDkQnrhXXfH332I=)
2: WWNIYacMJoEIRfEav5J1OWOX504.roa (hash: tPd27yKggwGnWK5YYeEd5gD5neTnZ1BFKcvvTfuouW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6c:80:7e:58:f1:b0:6d:0f:a2:30:d5:15:b2:0b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
Validity
Not Before: Sep 23 04:00:57 2026 GMT
Not After : Sep 24 04:00:57 2026 GMT
Subject: CN=30c553d83b7f0e90c6549353e164cb653da69a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ba:db:90:d9:17:0b:87:3c:b2:ca:a8:6e:33:
34:c6:a3:53:c4:74:78:f1:43:ae:52:d1:9e:b3:db:
3a:af:26:0c:18:8e:f1:c3:d2:df:5a:71:fc:bd:3f:
12:25:ca:22:78:aa:7a:db:90:cb:68:65:fb:8c:bd:
71:8e:c1:91:bf:f3:59:38:6b:3e:ce:83:7a:9a:75:
3d:c1:0e:85:ab:9c:3f:bb:59:4d:05:1c:69:df:05:
c0:47:8c:6e:fd:a5:a8:9b:62:d3:ea:85:ba:e4:cb:
ae:54:bf:52:65:a0:57:b4:20:a5:b0:c1:99:d6:87:
67:b5:b4:62:6d:f2:af:ba:d5:a6:70:1f:7b:cd:52:
d1:ff:2b:25:45:b0:3e:8f:e3:7f:9d:1a:bd:34:de:
8e:e6:41:c8:8d:8f:59:2d:18:c1:06:c3:81:94:47:
1a:56:e2:5b:bf:fd:72:72:64:72:7d:21:30:3f:bb:
a9:ff:d2:18:7f:fd:34:3b:dc:b9:03:ea:83:f7:ad:
4e:a1:85:91:15:5a:52:12:f4:f4:64:5a:53:d5:e1:
85:e3:6f:b3:8e:dc:58:80:c0:a5:a5:93:17:69:e6:
29:2a:5c:a4:12:1f:94:1d:9b:41:b2:c0:a0:65:43:
a9:7d:43:fc:f7:5b:75:82:dd:a9:7e:cb:e4:d2:b4:
f5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C5:53:D8:3B:7F:0E:90:C6:54:93:53:E1:64:CB:65:3D:A6:9A:6B
X509v3 Authority Key Identifier:
keyid:4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:16:43:86:c8:ee:97:c0:01:20:a2:15:0f:8e:f8:b1:d0:62:
9d:ba:4e:0d:6a:c3:0b:f6:64:d8:36:89:d9:f8:8f:d2:d5:4a:
3c:d6:66:38:27:c1:74:3f:77:94:36:fe:dd:90:bf:1f:db:ef:
56:16:4f:07:73:14:10:59:c0:d6:0e:3a:65:15:b0:5a:26:fb:
2d:f5:9e:b3:46:dd:23:02:c4:9e:de:55:85:54:36:9d:42:2d:
6a:21:cf:58:6d:57:99:fb:e5:ff:b8:8b:89:ab:de:7b:f0:22:
53:c4:4f:85:98:bd:c0:41:2c:0e:69:e8:f8:af:39:de:6b:53:
62:e5:51:10:db:1e:04:d5:27:a8:21:4b:e5:fe:35:4c:96:62:
c2:ef:31:65:a1:b5:7b:d6:c8:6a:49:1a:1d:59:25:80:ae:c3:
d1:33:5f:10:48:60:ba:e0:d8:47:ae:dd:21:86:5d:96:bd:21:
42:84:45:51:06:c8:5f:d2:7e:e3:61:73:d0:90:73:85:8c:8c:
9b:1f:09:a6:57:2b:e4:50:19:8a:47:cb:31:21:a3:86:96:5d:
97:26:68:34:bb:10:fd:c5:4f:66:f6:de:81:4f:83:56:a6:6b:
a7:5c:08:aa:56:55:6b:21:85:78:c5:7a:4c:97:47:f3:c7:28:
43:ec:6d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 14:20:45 2026 by rpki-client