Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
File: TEDHERwpFqX1ra8eUFCpQMJrI3g.mft (raw, json)
Hash identifier: /AQOJTb0KN5J1Zu1Dd4MKw3/03Tka8y8LB4TOTIola0=
Subject key identifier: FE:6E:26:BE:03:D9:D2:52:C0:CE:A1:74:6D:03:FE:30:C8:0D:B2:92
Authority key identifier: 4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78
Certificate issuer: /CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
Certificate serial: 019D299787114805D90807A752A7E8D3D1CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 10:01:29 +0000
Manifest this update: Thu 26 Mar 2026 10:01:29 +0000
Manifest next update: Fri 27 Mar 2026 10:01:29 +0000
Files and hashes: 1: TEDHERwpFqX1ra8eUFCpQMJrI3g.crl (hash: xbHO80D/XngMjUdthp4bbuMlfEGwWaEqeneUu0cn1Dc=)
2: WWNIYacMJoEIRfEav5J1OWOX504.roa (hash: tPd27yKggwGnWK5YYeEd5gD5neTnZ1BFKcvvTfuouW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:87:11:48:05:d9:08:07:a7:52:a7:e8:d3:d1:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
Validity
Not Before: Mar 26 10:01:29 2026 GMT
Not After : Mar 27 10:01:29 2026 GMT
Subject: CN=fe6e26be03d9d252c0cea1746d03fe30c80db292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:83:20:9b:11:b4:e2:09:be:35:02:af:e6:13:
de:55:81:b4:92:02:c4:36:cb:b2:c4:6e:38:2b:b5:
4c:f7:82:ef:f1:54:f9:f7:20:88:d6:8f:c1:b9:88:
ef:8d:3b:fc:9e:64:0e:df:e4:42:15:de:23:6e:e5:
ee:83:93:19:da:af:54:0d:79:03:60:76:db:b5:ef:
3e:d3:fc:a7:e9:2e:c7:3f:b6:45:66:24:16:d0:e1:
da:9a:70:de:89:0e:59:d8:6f:9d:5c:78:15:95:b7:
70:35:da:3d:b3:72:f9:f0:e7:b5:56:e1:0a:29:ba:
14:5b:88:2d:cb:2e:a8:c4:55:a3:92:76:8a:50:99:
36:c8:82:68:2c:69:2d:36:93:86:bb:87:05:ac:68:
47:70:62:50:0e:ac:5b:2b:85:38:40:4b:ae:13:aa:
ac:56:42:1d:44:a8:44:aa:b5:11:72:b2:14:20:5a:
51:4e:27:26:9b:31:96:b1:a2:04:80:a3:3b:46:2d:
2b:25:5a:b1:8b:cb:58:0f:d9:d0:d3:8a:95:0e:91:
27:95:4c:0e:8e:0b:9d:94:73:f3:45:61:f0:4c:21:
60:15:3b:a6:ef:87:59:b4:12:69:04:31:b5:5c:c5:
7a:07:d2:f4:4d:f5:d2:dd:85:03:8c:c0:7d:2a:27:
87:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6E:26:BE:03:D9:D2:52:C0:CE:A1:74:6D:03:FE:30:C8:0D:B2:92
X509v3 Authority Key Identifier:
keyid:4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:06:25:64:12:a9:1e:1e:d0:cf:4a:96:fa:fa:b7:bc:33:a6:
3f:12:6b:92:c9:d8:ef:a3:d9:75:3f:98:f9:2e:9f:ab:71:37:
18:4b:ff:dd:44:3e:e2:26:1e:57:e6:51:8a:1d:77:20:66:ab:
c8:77:de:0c:33:77:0c:47:8a:1d:f8:89:f4:17:cf:2d:be:0b:
f9:d5:b9:97:a5:21:5c:51:d4:71:25:29:59:d4:0c:f6:7a:e9:
35:4b:ea:31:81:15:d5:af:bd:d1:4f:c1:87:cc:53:61:b2:ea:
7d:42:b1:e0:2a:93:cd:32:d6:24:57:72:aa:6e:e9:05:e4:3b:
40:40:b4:c5:c9:d5:63:0f:ca:e3:c8:ff:79:53:5c:3f:9a:57:
70:a9:be:5b:4f:99:63:f1:9b:78:1e:15:15:e2:9f:65:55:45:
b6:df:7f:f6:98:ef:26:e1:b7:fa:0f:f5:df:33:b4:94:d1:42:
ef:c9:0d:b0:d9:dc:a3:5d:80:e0:29:95:c8:c2:c3:8e:6a:07:
b9:3d:53:8c:87:63:59:48:a7:d0:be:ea:3c:32:88:f4:64:ac:
09:1e:f9:16:7f:d0:be:4f:ea:b7:53:d5:b4:4a:f7:ba:79:1a:
cd:83:5d:d5:ad:bf:3b:f1:ef:2e:c4:bb:04:92:68:1b:28:2c:
f1:eb:c8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:50:08 2026 by rpki-client