Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
File: TeLcLByThHv5efmwEO3EzahJ9Pg.mft (raw, json)
Hash identifier: Ohrwb5uj7G2V0KWLU40fuIDjHV95dd+jmMbAdezHbeg=
Subject key identifier: 02:65:2A:6F:95:7B:D4:C8:B5:0C:7F:A9:8C:31:FC:60:4D:60:D4:E0
Authority key identifier: 4D:E2:DC:2C:1C:93:84:7B:F9:79:F9:B0:10:ED:C4:CD:A8:49:F4:F8
Certificate issuer: /CN=4de2dc2c1c93847bf979f9b010edc4cda849f4f8
Certificate serial: 019D2583657AB77A746AAE81C71A9247338E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeLcLByThHv5efmwEO3EzahJ9Pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 15:01:01 +0000
Manifest this update: Wed 25 Mar 2026 15:01:01 +0000
Manifest next update: Thu 26 Mar 2026 15:01:01 +0000
Files and hashes: 1: TeLcLByThHv5efmwEO3EzahJ9Pg.crl (hash: DxslwoYiGh4RfrUhk58bNOwzGyrQ1us78HnnNKnUlYM=)
2: _HIuZzar-n1-NtnPT4ILWhx5JcQ.roa (hash: YlonPhrB8pJKsMOBqBGjR8HF+guVCdo8Qc+kWpMQAYM=)
3: ubV6uNRnShbftmmplfcQEtQdgrg.roa (hash: paxG2DKZBg85lHU32fSEBTfDsuTkXdTNcpFoow17lSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TeLcLByThHv5efmwEO3EzahJ9Pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:65:7a:b7:7a:74:6a:ae:81:c7:1a:92:47:33:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de2dc2c1c93847bf979f9b010edc4cda849f4f8
Validity
Not Before: Mar 25 15:01:01 2026 GMT
Not After : Mar 26 15:01:01 2026 GMT
Subject: CN=02652a6f957bd4c8b50c7fa98c31fc604d60d4e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ad:09:f3:94:d4:e0:da:22:9b:a1:51:65:c1:
e4:5b:e5:ef:e7:f8:23:24:bd:1d:8b:b7:b1:43:dd:
d3:d3:01:7c:1d:7b:51:ab:77:98:10:da:d6:18:9e:
6b:ff:a9:9e:6e:56:3c:96:63:24:81:34:57:1b:bc:
03:2d:55:7b:25:fc:4a:46:f5:9a:3d:ee:58:29:0a:
71:53:9c:63:71:dc:53:74:33:49:5b:b6:66:ca:3f:
c0:c4:88:2b:42:e6:00:c5:61:12:f1:c2:38:1a:30:
c6:b5:ab:d0:6b:4c:8d:9a:1d:41:a8:5f:dd:5e:a5:
c9:92:ce:6f:40:1c:4b:c9:11:7c:14:1a:cb:ae:4d:
af:98:6b:2e:4d:6f:38:ff:ec:0c:b7:65:58:5b:99:
93:c8:b1:21:eb:54:0e:ef:0d:62:0c:37:40:64:d4:
2b:d9:e9:da:dc:d8:ff:9a:ee:b9:35:4f:fb:02:75:
68:57:2d:ba:87:53:f0:5c:66:32:d7:7f:0a:4a:b9:
4d:68:af:f0:dc:d6:2e:64:c3:e7:01:02:fb:97:22:
88:c7:1b:33:04:fa:17:4d:39:90:aa:25:63:12:7a:
4d:15:4d:f7:5d:af:42:9a:db:39:40:6c:67:10:7b:
a0:6d:ab:64:51:0a:da:14:dd:e6:ae:75:40:11:73:
74:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:65:2A:6F:95:7B:D4:C8:B5:0C:7F:A9:8C:31:FC:60:4D:60:D4:E0
X509v3 Authority Key Identifier:
keyid:4D:E2:DC:2C:1C:93:84:7B:F9:79:F9:B0:10:ED:C4:CD:A8:49:F4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeLcLByThHv5efmwEO3EzahJ9Pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ac:1b:f0:d9:8b:d2:27:cf:8e:cc:95:46:f8:46:b7:d6:5a:
00:5c:34:89:be:97:8d:91:7d:66:6a:42:5f:fb:e1:c1:43:28:
3f:ce:fa:14:69:f5:3c:76:f5:30:8f:85:9f:0d:1c:ea:34:ae:
c7:c4:d6:2a:bd:4d:68:5b:ed:9b:a1:50:93:5d:4a:32:96:6e:
42:33:b4:ef:a7:ac:05:36:22:be:10:bb:90:77:7d:d0:55:43:
50:7d:6f:00:36:98:20:e9:ec:4b:78:2c:67:d1:c5:df:c0:23:
70:22:9f:d1:8c:2d:73:0a:6a:0f:d3:12:22:c1:06:f8:5f:75:
c5:64:ad:64:22:ed:d2:a1:c9:87:28:67:72:31:68:84:12:81:
f9:63:11:1a:3d:6e:db:d4:81:66:76:c1:36:03:c9:85:df:8e:
d3:b4:16:65:3a:1d:62:16:5c:a7:0d:c3:79:95:47:2d:b6:1a:
24:80:af:8b:01:b7:ed:16:02:86:8f:8d:c5:1d:78:73:2c:99:
53:38:c8:6f:97:b5:e6:a7:66:e3:4d:90:fb:a7:9d:1f:c7:7c:
55:9c:58:77:96:aa:81:ea:ed:f9:0a:4b:5a:94:73:6a:6c:b6:
21:41:31:61:71:91:ab:f2:98:41:72:8c:ef:b8:c9:6e:db:93:
9e:76:e1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:51 2026 by rpki-client