Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
File: TeLcLByThHv5efmwEO3EzahJ9Pg.mft (raw, json)
Hash identifier: u5QfHfYZT7SX09XgIVptXpFVMlTk9nOavx8Z/46VTzg=
Subject key identifier: EA:3C:C3:1A:CC:6E:21:DA:71:DB:89:CC:4E:9C:2B:EA:AA:01:86:4E
Authority key identifier: 4D:E2:DC:2C:1C:93:84:7B:F9:79:F9:B0:10:ED:C4:CD:A8:49:F4:F8
Certificate issuer: /CN=4de2dc2c1c93847bf979f9b010edc4cda849f4f8
Certificate serial: 01A10437110018C7E94419575047D1FBED2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeLcLByThHv5efmwEO3EzahJ9Pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
Manifest number: 1A89
Signing time: Sun 04 Oct 2026 00:01:19 +0000
Manifest this update: Sun 04 Oct 2026 00:01:19 +0000
Manifest next update: Mon 05 Oct 2026 00:01:19 +0000
Files and hashes: 1: TeLcLByThHv5efmwEO3EzahJ9Pg.crl (hash: dRqW++nqB7iWSsXlPu2s7s2mDfSkz4F701gE/A3MXJ4=)
2: _HIuZzar-n1-NtnPT4ILWhx5JcQ.roa (hash: YlonPhrB8pJKsMOBqBGjR8HF+guVCdo8Qc+kWpMQAYM=)
3: ubV6uNRnShbftmmplfcQEtQdgrg.roa (hash: paxG2DKZBg85lHU32fSEBTfDsuTkXdTNcpFoow17lSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TeLcLByThHv5efmwEO3EzahJ9Pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:37:11:00:18:c7:e9:44:19:57:50:47:d1:fb:ed:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de2dc2c1c93847bf979f9b010edc4cda849f4f8
Validity
Not Before: Oct 4 00:01:19 2026 GMT
Not After : Oct 5 00:01:19 2026 GMT
Subject: CN=ea3cc31acc6e21da71db89cc4e9c2beaaa01864e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c6:ad:f2:a9:9b:a7:8b:f7:3a:80:9f:99:e1:
de:df:d8:48:6e:6b:aa:b5:03:78:c9:68:6c:3f:fd:
0f:60:79:9b:bf:bf:0a:d8:d3:53:22:3e:8a:56:07:
a8:d7:f6:7a:c3:83:21:44:b5:9b:87:09:74:68:1c:
1c:87:e6:99:37:3a:34:e6:17:9c:7d:0d:a4:8b:05:
d3:0f:02:83:30:bc:e3:5a:37:dc:2b:06:59:c4:83:
b3:20:b8:fc:cd:81:e2:f3:dd:21:e5:d5:4a:7b:bc:
00:33:dd:77:40:08:96:3d:64:4a:59:45:e6:e5:cf:
6c:58:67:59:8a:61:0c:55:9e:f2:eb:e9:c4:53:74:
58:49:d7:6f:d7:86:dd:66:d3:fd:25:b0:c4:07:e6:
f3:08:4b:70:b4:27:86:da:22:ce:e5:ac:6a:70:76:
1f:91:26:fe:28:74:53:ed:c2:b5:37:6f:80:d4:17:
d2:9f:d8:f1:be:c1:cd:17:a8:cd:26:bf:c9:55:1e:
17:94:9b:be:73:b1:52:13:d3:25:40:98:29:fc:84:
65:90:ba:78:aa:93:9b:2c:dd:54:17:7b:72:e3:a7:
e7:9c:8b:2d:88:86:1c:b4:7c:61:8b:af:83:3c:4b:
bd:6c:15:1e:79:45:3b:ee:62:45:18:a8:58:36:f2:
00:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3C:C3:1A:CC:6E:21:DA:71:DB:89:CC:4E:9C:2B:EA:AA:01:86:4E
X509v3 Authority Key Identifier:
keyid:4D:E2:DC:2C:1C:93:84:7B:F9:79:F9:B0:10:ED:C4:CD:A8:49:F4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeLcLByThHv5efmwEO3EzahJ9Pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:88:42:4d:d8:69:0a:ce:58:02:f4:fc:07:e9:6b:6f:b1:be:
18:fd:e2:0b:ad:ce:ca:ef:45:9b:a9:c8:26:f4:d7:71:d5:de:
0b:8f:7f:62:be:e3:ff:de:b9:54:ad:23:d5:43:5b:76:86:8c:
b6:87:98:6d:80:5e:97:6e:af:55:83:69:6b:ed:7b:fe:ef:ef:
dd:cd:59:e0:2d:b9:b5:e4:2e:30:d9:da:3c:58:2c:a8:da:6d:
74:71:d2:af:56:74:d1:ac:3d:d7:81:a6:2d:e5:51:2b:c2:cf:
c8:20:bd:5d:db:94:29:26:6e:c8:cd:77:37:0e:e6:40:a4:d5:
f7:46:11:39:86:bd:93:dc:87:f5:c1:8b:a1:31:54:63:5c:1c:
bb:53:74:79:f2:52:5b:3a:e6:65:f8:fa:f0:08:d6:1f:7d:17:
90:ad:f7:d7:6f:e8:f2:bc:08:ca:08:0a:81:72:a6:92:70:35:
f3:56:f1:0e:96:b8:a0:f5:b0:f6:05:3d:e5:64:92:e5:3d:c4:
73:b4:1f:bd:da:0e:90:63:78:0e:77:b1:17:d1:18:ff:dd:dc:
65:21:5e:a7:86:f7:51:12:21:39:1b:d4:6e:c0:48:08:9b:17:
60:77:4e:1c:e6:f2:95:14:3f:73:9a:e7:fd:24:6a:25:85:98:
19:76:b4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 09:34:57 2026 by rpki-client