Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
File: TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft (raw, json)
Hash identifier: MEdFS0L5oLuuw+1WXoIS7D/zc6wexIyty5roMv72S+4=
Subject key identifier: 99:22:29:1B:CA:AE:70:DA:C1:44:D4:43:75:2F:07:4E:97:91:19:E3
Authority key identifier: 4D:E4:F9:67:71:D9:1F:87:C2:1B:E9:F0:0D:12:03:27:F5:BB:F2:EA
Certificate issuer: /CN=4de4f96771d91f87c21be9f00d120327f5bbf2ea
Certificate serial: 019F92EDBAD702C59034E993BCE30D27FB75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
Manifest number: 18C4
Signing time: Fri 24 Jul 2026 07:01:21 +0000
Manifest this update: Fri 24 Jul 2026 07:01:21 +0000
Manifest next update: Sat 25 Jul 2026 07:01:21 +0000
Files and hashes: 1: 7Azcn7c2MweeaxuWOj7OLj6diFk.roa (hash: 9wrLyTPi+lVBHZ3aYuQBL6m3fTURk0GDh6dTwauLiZs=)
2: TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl (hash: Bg7FgSN43vZCjqvnZlAQ9+CKlQd3jsmhVSJPPncec7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:ba:d7:02:c5:90:34:e9:93:bc:e3:0d:27:fb:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de4f96771d91f87c21be9f00d120327f5bbf2ea
Validity
Not Before: Jul 24 07:01:21 2026 GMT
Not After : Jul 25 07:01:21 2026 GMT
Subject: CN=9922291bcaae70dac144d443752f074e979119e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:47:82:de:36:76:37:8d:72:d5:fd:e9:3e:4e:
5f:8e:d9:03:b3:33:04:d0:5f:76:d0:7b:0e:d8:e6:
b2:20:9c:50:18:97:d4:59:0e:5f:f6:01:da:85:09:
14:8a:d3:50:00:38:93:d8:3b:3f:91:d6:b1:12:a4:
17:61:2a:ac:16:f7:6a:9f:47:75:2d:f1:2b:43:06:
fe:64:23:64:ce:2b:33:90:a1:fb:3a:1a:e2:7e:e4:
2d:51:bc:2f:8c:49:03:d2:47:d8:92:69:9f:e9:51:
c8:e3:01:5d:c7:a3:30:08:ff:91:b4:3f:d5:ba:fd:
ba:52:5e:c7:d5:71:90:3b:0d:42:71:31:2a:9d:aa:
82:9b:7e:f1:d7:5c:89:c5:63:80:1d:df:0d:65:8b:
fc:59:19:2e:c7:28:bd:6d:30:d5:b8:a6:0f:2c:0e:
36:65:e9:18:b3:60:03:ad:c4:88:37:2e:36:91:3a:
a4:91:39:1e:c8:e3:9d:91:5f:3b:10:cd:76:a0:9e:
f4:13:ce:f8:25:d8:cf:98:38:dc:b4:07:76:a4:96:
cd:5c:75:3e:18:fb:88:35:e6:22:e9:de:d3:3c:e0:
ff:86:df:bc:5b:05:50:50:10:02:d3:85:c7:db:ae:
bd:ad:7a:f6:1e:34:55:5c:31:11:2d:f3:32:d5:49:
97:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:22:29:1B:CA:AE:70:DA:C1:44:D4:43:75:2F:07:4E:97:91:19:E3
X509v3 Authority Key Identifier:
keyid:4D:E4:F9:67:71:D9:1F:87:C2:1B:E9:F0:0D:12:03:27:F5:BB:F2:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:06:de:0e:d8:1d:fd:41:34:02:ba:32:2d:bf:8e:39:d0:9e:
a6:f6:1f:7f:da:4e:27:eb:b8:26:4d:0f:86:57:45:25:1f:2d:
78:c4:72:3e:24:b5:d6:b9:c0:4f:59:7b:3f:8c:76:8f:f8:c2:
14:2d:eb:ba:70:d8:bb:a7:4c:97:1a:7f:20:9b:40:47:0c:98:
7a:0b:c9:39:81:78:e6:ca:82:31:90:c4:36:4a:e9:ca:42:39:
90:57:cc:d4:25:e6:6f:96:37:81:66:6e:53:a7:15:45:50:65:
a3:80:2e:23:a5:6a:93:77:b4:05:e4:21:1e:a0:0c:e7:19:62:
a0:31:f6:86:e9:32:e8:eb:7f:1f:e9:4a:91:9d:07:68:49:cd:
aa:8e:df:38:92:bf:3f:32:d1:1e:06:55:a5:e1:b4:72:a5:29:
cb:0d:49:58:48:32:ca:66:c5:0c:ed:d0:70:dc:a1:31:93:1e:
6c:3a:90:d8:c9:df:fe:78:e9:dd:cd:47:de:cb:8b:af:ce:4f:
17:08:b0:7d:45:ff:23:57:8a:b6:55:8a:30:8b:84:65:ba:ea:
31:ce:03:cb:ce:cd:32:ef:23:ac:a4:33:09:92:89:a0:64:2b:
69:76:ad:73:1e:17:ac:98:33:49:c9:28:9a:bc:b9:ae:ac:4b:
d1:ee:df:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:38:36 2026 by rpki-client