
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.mft
File: TeHTcc2fJqEftklGZ0wxl198Lt8.mft (raw, json)
Hash identifier: lhWmN7E8dNwNsYrbUzwf/v4tw5gVDhqVE1XQGik1lpQ=
Subject key identifier: 05:98:F7:AF:33:AB:F6:D8:CF:F2:F7:46:03:0F:E6:DF:66:40:36:94
Authority key identifier: 4D:E1:D3:71:CD:9F:26:A1:1F:B6:49:46:67:4C:31:97:5F:7C:2E:DF
Certificate issuer: /CN=4de1d371cd9f26a11fb64946674c31975f7c2edf
Certificate serial: 019D28169D4E2EC7679E40CD0F32275784D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeHTcc2fJqEftklGZ0wxl198Lt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 03:01:03 +0000
Manifest this update: Thu 26 Mar 2026 03:01:03 +0000
Manifest next update: Fri 27 Mar 2026 03:01:03 +0000
Files and hashes: 1: TeHTcc2fJqEftklGZ0wxl198Lt8.crl (hash: WjesvSMBvyNVBD51liCrfBfCjM3KbY3Gi956RM8PPEs=)
2: kaSyniqYasueS7oYVxIylvVfl10.roa (hash: 5pRT38fJuSZmqHDoSajFywjw8KAYcFC3TRSNOKLIxFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TeHTcc2fJqEftklGZ0wxl198Lt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:9d:4e:2e:c7:67:9e:40:cd:0f:32:27:57:84:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de1d371cd9f26a11fb64946674c31975f7c2edf
Validity
Not Before: Mar 26 03:01:03 2026 GMT
Not After : Mar 27 03:01:03 2026 GMT
Subject: CN=0598f7af33abf6d8cff2f746030fe6df66403694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6d:96:16:8d:f0:91:7b:56:42:b2:48:17:b8:
7f:d0:18:fb:13:97:79:32:b6:8f:d8:f5:f1:63:4a:
16:28:10:16:f1:a3:84:ba:a7:9a:d8:07:0b:27:15:
40:c2:53:75:2b:5d:ce:94:26:01:c4:18:7d:de:3d:
fe:cd:c9:ae:54:db:4a:6f:44:20:03:6c:25:35:ab:
fb:7e:4e:62:49:5d:78:ea:56:07:98:14:60:f4:9c:
91:4e:63:5e:0e:28:a1:dd:51:e2:83:f5:09:d2:2a:
ed:99:e9:64:7b:52:3d:e4:01:76:05:f5:53:17:02:
b6:7f:b7:22:9f:af:28:51:a8:11:52:a3:e9:a2:e9:
0f:d8:69:ff:b7:1c:77:8c:60:5a:c9:58:71:16:9b:
94:f5:6c:89:b3:61:2a:c8:68:92:87:52:93:ff:6e:
24:1b:c9:1d:21:99:18:39:eb:fe:a2:c6:7a:7d:2f:
95:fb:f7:f9:19:1b:2c:a9:c9:c7:55:e0:3b:3c:0a:
02:28:43:1c:a2:7e:4b:2c:b4:37:22:e7:26:76:61:
13:e7:99:0c:ba:35:e9:c6:ca:49:52:1f:fc:9e:49:
a0:41:1e:04:60:42:51:a3:d7:28:2d:8a:56:54:e1:
8c:b0:b0:52:8f:b9:8d:83:7e:0b:3f:e4:41:62:aa:
e8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:98:F7:AF:33:AB:F6:D8:CF:F2:F7:46:03:0F:E6:DF:66:40:36:94
X509v3 Authority Key Identifier:
keyid:4D:E1:D3:71:CD:9F:26:A1:1F:B6:49:46:67:4C:31:97:5F:7C:2E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeHTcc2fJqEftklGZ0wxl198Lt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:82:ac:5a:58:37:ef:8e:35:11:83:e4:1c:97:00:e1:42:d0:
f1:68:71:ef:fd:f2:e2:31:ae:6f:15:7b:3c:89:d9:ff:77:53:
21:39:b5:49:ab:eb:34:4f:c4:66:a4:91:13:f0:e8:41:d0:7c:
87:e9:e2:44:3f:74:25:22:c5:ae:93:db:67:b3:f1:91:5a:11:
4e:d8:ac:63:3c:28:d3:27:22:46:7d:c8:24:ab:cc:3d:43:89:
09:09:58:43:c4:f2:6b:a0:46:e5:1e:be:0d:c7:88:0d:b6:7a:
c0:9b:9e:b8:47:aa:41:43:1c:6f:b1:ee:4a:ae:7e:5e:4c:5e:
e6:6b:53:85:21:f4:64:de:45:ea:74:35:ae:a6:ae:0a:0c:a0:
aa:b1:61:22:5c:29:17:81:c6:77:4c:76:0c:dd:64:ef:52:47:
10:5e:2c:29:c9:c6:09:32:e4:0b:0d:c9:f5:14:c7:9b:80:c3:
2e:b4:68:79:8c:26:52:37:51:52:33:8e:4a:b0:5a:f9:78:dd:
94:50:51:41:dd:42:e3:4e:c9:9d:df:5a:dd:b6:2a:f8:aa:18:
46:5a:97:32:b1:8b:05:5e:68:c5:cb:de:ec:7a:8e:d1:24:54:
02:3c:cf:c9:45:97:ad:7a:b1:de:2c:c6:b1:92:c4:3d:2d:54:
69:9c:0c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:29 2026 by rpki-client