Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
File: TeLcLByThHv5efmwEO3EzahJ9Pg.mft (raw, json)
Hash identifier: r2bsw3+XbQpOsgryBC3DQwnZSa03opzDnIzVNeFQV4M=
Subject key identifier: 56:5F:41:A8:3E:BF:CC:E8:D8:FE:87:84:6B:A9:6D:BC:21:AA:81:DA
Authority key identifier: 4D:E2:DC:2C:1C:93:84:7B:F9:79:F9:B0:10:ED:C4:CD:A8:49:F4:F8
Certificate issuer: /CN=4de2dc2c1c93847bf979f9b010edc4cda849f4f8
Certificate serial: 019F935BB61A3725BE69D28E02459A81860E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeLcLByThHv5efmwEO3EzahJ9Pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 09:01:28 +0000
Manifest this update: Fri 24 Jul 2026 09:01:28 +0000
Manifest next update: Sat 25 Jul 2026 09:01:28 +0000
Files and hashes: 1: TeLcLByThHv5efmwEO3EzahJ9Pg.crl (hash: DqpFvwCMlEQDjnNsJa5RGA/6357yr+gUpLJvKyw40w8=)
2: _HIuZzar-n1-NtnPT4ILWhx5JcQ.roa (hash: YlonPhrB8pJKsMOBqBGjR8HF+guVCdo8Qc+kWpMQAYM=)
3: ubV6uNRnShbftmmplfcQEtQdgrg.roa (hash: paxG2DKZBg85lHU32fSEBTfDsuTkXdTNcpFoow17lSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TeLcLByThHv5efmwEO3EzahJ9Pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:b6:1a:37:25:be:69:d2:8e:02:45:9a:81:86:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de2dc2c1c93847bf979f9b010edc4cda849f4f8
Validity
Not Before: Jul 24 09:01:28 2026 GMT
Not After : Jul 25 09:01:28 2026 GMT
Subject: CN=565f41a83ebfcce8d8fe87846ba96dbc21aa81da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c0:77:95:43:6a:c1:a7:13:71:89:46:5b:5b:
b2:06:ab:89:cc:2d:87:e2:62:83:41:05:47:4b:c1:
3a:54:b5:a1:bc:43:b8:e8:05:df:d5:30:18:9c:e7:
71:42:74:94:73:18:62:2d:3a:0e:13:81:53:22:9a:
96:10:7e:80:19:28:a3:67:8b:c2:f6:f5:5c:b2:a2:
b8:37:4b:6a:2c:8d:6a:54:56:9e:0c:21:05:12:4a:
0a:6d:03:6f:2f:4b:8a:30:84:61:73:59:d9:41:08:
47:43:17:0d:d2:21:9b:de:d2:ce:33:45:53:3e:3d:
ab:c1:39:f6:f8:7d:0e:f1:7d:c2:77:4c:fd:5d:d4:
9b:dc:0e:fe:71:ce:00:3c:10:37:d4:c4:94:9f:55:
3d:ee:c0:15:ec:72:b2:35:9e:c4:c2:77:64:f0:4c:
9a:11:44:f6:25:be:03:50:ff:70:b0:64:e2:23:41:
f7:46:27:00:ea:46:4e:38:d2:f8:45:72:b8:c6:21:
9e:c7:e3:1c:09:43:d8:5d:80:2c:ea:b7:02:11:0b:
32:88:95:d8:ee:f2:e1:63:dd:7b:13:cd:11:24:96:
ff:75:2f:83:3c:1a:26:f3:df:eb:c2:be:e5:71:69:
c5:e0:36:79:0f:33:3c:38:0d:20:27:5d:03:99:a3:
00:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5F:41:A8:3E:BF:CC:E8:D8:FE:87:84:6B:A9:6D:BC:21:AA:81:DA
X509v3 Authority Key Identifier:
keyid:4D:E2:DC:2C:1C:93:84:7B:F9:79:F9:B0:10:ED:C4:CD:A8:49:F4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeLcLByThHv5efmwEO3EzahJ9Pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b8:f8:af:2a:7d:ad:da:52:81:fc:ac:f0:49:64:d4:5d:2a:
03:75:78:11:37:37:10:dc:7a:c1:b3:96:61:4a:a9:bb:02:f4:
63:57:e5:d7:2a:fa:ea:90:71:3a:e5:74:9c:85:c1:50:f9:57:
da:21:5e:ad:7d:1a:05:fb:63:0b:3d:79:8f:12:d5:46:86:9e:
27:a9:cf:c0:54:15:c2:72:1e:dd:1d:c5:a3:fc:ab:2d:25:1f:
db:fa:40:9b:19:c9:cb:14:ca:66:21:d4:74:90:fd:6b:fc:fa:
d9:cd:08:8a:e3:b8:f8:0b:46:fc:96:a1:7e:7a:d2:48:64:3c:
3d:13:c1:fb:62:d8:ad:0c:0c:fd:c7:0f:02:8e:d3:48:46:9f:
03:d8:2d:72:91:ac:02:32:b3:ba:e3:7d:88:a0:4a:6c:7e:a4:
a2:4a:8a:a3:25:1b:2b:67:d5:17:0b:35:8d:b1:42:48:8a:da:
44:19:33:4f:98:4c:fc:42:ed:1c:8c:b0:a8:41:76:1d:a9:31:
b1:d6:b0:96:fb:29:b8:8f:c7:e8:0b:44:65:98:6c:61:b6:15:
32:e7:f7:0c:a7:af:e0:d9:13:09:f3:2a:19:2f:57:5c:93:08:
a3:f2:97:57:fe:2b:cc:e3:8d:2b:f1:a8:da:42:04:6e:93:ce:
5c:e3:d0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:53:02 2026 by rpki-client