Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft
File: TE38e6TewmWW3IrCMFqR7Y6SnGk.mft (raw, json)
Hash identifier: TyTdfiPr/WMYqJaE0H/eIlGE+vCMLu5jYGcfwEh+v0U=
Subject key identifier: AC:4A:BA:ED:90:F7:A4:30:6D:B4:2E:A0:1B:53:05:4C:E4:48:FC:86
Authority key identifier: 4C:4D:FC:7B:A4:DE:C2:65:96:DC:8A:C2:30:5A:91:ED:8E:92:9C:69
Certificate issuer: /CN=4c4dfc7ba4dec26596dc8ac2305a91ed8e929c69
Certificate serial: 019D2AE01A58AF607D45F46666A1171478F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TE38e6TewmWW3IrCMFqR7Y6SnGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft
Manifest number: 12BA
Signing time: Thu 26 Mar 2026 16:00:22 +0000
Manifest this update: Thu 26 Mar 2026 16:00:22 +0000
Manifest next update: Fri 27 Mar 2026 16:00:22 +0000
Files and hashes: 1: TE38e6TewmWW3IrCMFqR7Y6SnGk.crl (hash: LxCC+pJyxoUjetO0DIpgWFE6wKOB6QIqwABq+BX7sAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TE38e6TewmWW3IrCMFqR7Y6SnGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:1a:58:af:60:7d:45:f4:66:66:a1:17:14:78:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4dfc7ba4dec26596dc8ac2305a91ed8e929c69
Validity
Not Before: Mar 26 16:00:22 2026 GMT
Not After : Mar 27 16:00:22 2026 GMT
Subject: CN=ac4abaed90f7a4306db42ea01b53054ce448fc86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d4:6d:98:47:03:81:67:4a:7b:79:8a:31:07:
a7:a9:81:ba:d5:43:6e:01:2b:7d:36:ab:04:58:cc:
23:6c:93:0e:3b:f2:8e:f7:d3:e8:cc:a3:31:a2:49:
34:fa:95:9b:94:17:ad:d7:c1:5d:0f:fa:cf:90:db:
48:3b:3f:80:82:b8:25:af:b9:a8:0f:da:05:e1:73:
3e:16:3e:a9:66:d6:aa:df:8c:19:fa:6c:7c:4d:80:
70:45:d6:a8:36:31:b4:5f:92:bc:c4:45:f6:ee:17:
70:28:6b:7d:ba:4b:d1:84:9f:50:4f:61:28:fc:93:
cb:d7:a8:dc:c6:f7:23:72:e9:bf:03:5c:03:b4:b5:
7c:7c:c1:ef:73:e8:cd:02:71:e2:3a:bf:3b:3e:a6:
eb:78:6d:58:e8:2a:f6:1e:da:d6:85:ee:76:bf:ee:
8c:c1:55:62:51:55:54:1b:24:21:d2:6b:5b:86:44:
e7:67:33:e9:d5:f4:14:96:d4:40:6c:15:52:74:cd:
f2:83:2a:e2:31:54:f5:42:ab:67:d1:4d:76:c1:41:
74:f2:0b:d6:8c:63:2b:66:72:08:6b:ab:38:38:a0:
28:be:1e:86:ee:2c:7c:46:44:3d:63:a6:d0:d2:30:
82:41:d9:2f:28:fb:2c:0f:1d:a5:aa:af:2b:9f:63:
15:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4A:BA:ED:90:F7:A4:30:6D:B4:2E:A0:1B:53:05:4C:E4:48:FC:86
X509v3 Authority Key Identifier:
keyid:4C:4D:FC:7B:A4:DE:C2:65:96:DC:8A:C2:30:5A:91:ED:8E:92:9C:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TE38e6TewmWW3IrCMFqR7Y6SnGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e7:78:82:da:d2:f2:98:d5:97:1f:f6:3e:4b:97:43:30:8f:
9e:f8:83:09:f0:d9:1d:9f:4c:12:30:36:fd:4d:42:e3:14:5e:
a5:72:c1:be:d8:e3:80:cd:fe:33:b6:d0:b9:b0:33:75:2a:4b:
4c:6a:a0:70:61:e6:bc:7d:fd:a2:29:7f:12:9b:e7:44:5c:1f:
22:3b:47:f9:e3:36:cd:b4:48:4a:e7:89:a8:8a:ac:a5:ea:d5:
fe:6c:97:e1:6c:28:12:91:03:43:5e:57:96:dc:4b:1e:0e:22:
18:dd:50:52:69:8e:93:24:6b:95:2d:c9:dd:31:b0:d6:44:31:
42:06:5d:3e:97:ad:cf:54:5e:cc:3d:b2:98:ae:9c:02:7e:93:
4b:d3:6e:f6:f7:aa:aa:3b:66:dd:bf:1d:c3:6f:c3:f8:c0:8f:
83:bb:cd:d9:44:43:0f:57:00:93:f0:fe:47:05:f9:b4:06:fa:
07:de:b0:8c:3d:c2:e1:24:ac:5d:1e:70:52:ce:f0:e9:9f:e5:
a9:61:b4:a4:89:82:5c:d8:ff:c0:4a:68:64:10:4c:6b:0a:f9:
02:b1:b1:0a:2c:ef:5e:e2:24:d2:d0:c6:16:25:06:86:a8:84:
cb:fd:ce:4f:8d:83:70:3b:3c:c5:ef:9a:95:07:bf:25:09:44:
39:d3:bb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:16:56 2026 by rpki-client