Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.mft
File: TEYfg3hoy-rKF670hnhPYfSSQ-0.mft (raw, json)
Hash identifier: 1bqfdaj3AkgAIQ7gWs+AVJO2ZpZGp6C5O82T+vMqReo=
Subject key identifier: 8B:2D:6E:19:E2:A5:54:FC:64:50:F3:36:31:88:84:2C:C5:FF:6A:1C
Authority key identifier: 4C:46:1F:83:78:68:CB:EA:CA:17:AE:F4:86:78:4F:61:F4:92:43:ED
Certificate issuer: /CN=4c461f837868cbeaca17aef486784f61f49243ed
Certificate serial: 019D2583FB84B9472E320DCF47AB9C2CE7A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEYfg3hoy-rKF670hnhPYfSSQ-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.mft
Manifest number: 1814
Signing time: Wed 25 Mar 2026 15:01:39 +0000
Manifest this update: Wed 25 Mar 2026 15:01:39 +0000
Manifest next update: Thu 26 Mar 2026 15:01:39 +0000
Files and hashes: 1: TEYfg3hoy-rKF670hnhPYfSSQ-0.crl (hash: QtezmLrcCozFpbKwEwCVMlB9q46qDNaV4Xh8zYh90qU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEYfg3hoy-rKF670hnhPYfSSQ-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:fb:84:b9:47:2e:32:0d:cf:47:ab:9c:2c:e7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c461f837868cbeaca17aef486784f61f49243ed
Validity
Not Before: Mar 25 15:01:39 2026 GMT
Not After : Mar 26 15:01:39 2026 GMT
Subject: CN=8b2d6e19e2a554fc6450f3363188842cc5ff6a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fa:62:46:88:9f:a3:b5:17:23:da:c3:20:ac:
11:8c:13:2a:58:ee:ce:d7:76:8c:c7:d7:03:04:f3:
31:dd:e5:b3:e0:02:1d:7a:22:b4:ac:3e:82:01:31:
e8:6a:a0:7a:6a:33:7a:56:a4:2a:7a:f8:84:88:a9:
f0:ea:99:97:11:7b:e9:0f:20:0e:81:b0:e0:25:ad:
88:f3:46:ca:ac:2b:f9:b6:18:32:dd:00:2a:5d:8d:
ad:79:94:20:f8:06:18:86:85:91:6e:4b:c8:61:9b:
20:39:dc:23:ea:fa:8c:9e:60:35:00:3e:3b:63:d2:
5a:f6:ff:0b:e5:31:a1:e8:82:bf:aa:e2:0a:c5:d0:
81:d9:df:36:04:1c:85:ea:8b:30:86:2b:41:61:19:
fb:4d:89:6d:0a:47:be:42:0d:34:5c:a2:77:3a:c9:
24:9e:ae:58:f2:5f:f2:58:bf:7f:f0:44:40:65:5b:
3d:70:3f:f0:13:b2:ae:72:53:31:ca:4e:9f:62:95:
3f:d5:f2:57:5c:92:8e:61:04:9d:06:66:13:01:c8:
a8:f4:09:6e:16:c1:ed:bc:88:00:d9:82:85:9e:fd:
03:ad:8d:27:59:37:c1:f7:7b:75:f5:ec:43:e1:7d:
9c:61:bb:63:eb:37:57:33:b5:6f:d6:ea:1c:98:df:
96:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2D:6E:19:E2:A5:54:FC:64:50:F3:36:31:88:84:2C:C5:FF:6A:1C
X509v3 Authority Key Identifier:
keyid:4C:46:1F:83:78:68:CB:EA:CA:17:AE:F4:86:78:4F:61:F4:92:43:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEYfg3hoy-rKF670hnhPYfSSQ-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:36:ac:fa:f2:58:a4:70:fd:fd:66:4a:a9:68:d8:36:90:47:
ed:45:d9:ac:e6:0f:ff:5a:90:76:24:2e:eb:ee:67:1b:5c:08:
2f:36:60:21:7b:fb:5b:08:a8:f2:44:a9:eb:e5:72:f7:35:06:
a4:e1:e0:c5:96:4d:f3:d4:59:4a:09:22:e2:61:c9:a1:2f:cf:
55:47:5d:35:c5:c1:e7:60:ec:8d:23:63:f3:6f:b5:5e:13:e8:
21:82:9d:cc:50:a2:5e:b1:64:aa:8d:ac:6a:e9:21:6f:67:1d:
67:2d:d4:1e:7d:58:41:85:7a:16:7a:1d:25:de:33:f5:73:ba:
7b:e9:fd:22:68:2a:f1:61:51:3c:66:73:b8:bd:da:ab:ed:b8:
ed:43:7a:1a:e4:06:d0:ca:ff:58:57:f1:12:9a:54:94:1b:1a:
60:e4:e6:2e:3c:40:87:c0:48:31:00:88:57:36:09:25:c8:41:
7b:b0:0b:2d:67:88:9e:f1:df:79:cc:14:48:59:c2:7a:76:74:
ae:a1:2a:e4:4b:14:f7:6c:b6:c3:9c:3e:8d:67:82:2c:6f:9d:
ab:26:64:06:10:27:a1:46:d8:5f:9a:97:48:aa:58:1e:3a:41:
95:0c:13:1e:58:a5:08:10:48:c3:ee:3e:b6:e8:7b:50:7a:63:
84:01:42:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:17 2026 by rpki-client