Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
File: TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft (raw, json)
Hash identifier: JdVPmjprAbT4j5SYM9pPrZqgVe/80uiOMCVVJ9k4NfI=
Subject key identifier: E1:82:44:1F:12:C7:B4:9A:7F:A7:5D:D6:5E:0C:61:FC:A9:F2:2F:85
Authority key identifier: 4C:4C:FC:E6:0C:9B:0F:2D:47:B3:62:86:4D:8F:EB:B2:25:BB:52:44
Certificate issuer: /CN=4c4cfce60c9b0f2d47b362864d8febb225bb5244
Certificate serial: 019D29295D7E3AEA9052E8E94DC01F50FEAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 08:01:09 +0000
Manifest this update: Thu 26 Mar 2026 08:01:09 +0000
Manifest next update: Fri 27 Mar 2026 08:01:09 +0000
Files and hashes: 1: TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl (hash: kDSiOcKk+jG3vkYX8NYNgYR5mVQBx8qndTCAUPh843U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:5d:7e:3a:ea:90:52:e8:e9:4d:c0:1f:50:fe:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4cfce60c9b0f2d47b362864d8febb225bb5244
Validity
Not Before: Mar 26 08:01:09 2026 GMT
Not After : Mar 27 08:01:09 2026 GMT
Subject: CN=e182441f12c7b49a7fa75dd65e0c61fca9f22f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5a:cf:3a:cd:d4:fd:74:1c:c2:a0:b3:a4:98:
3f:77:73:b9:6d:68:c6:e3:c8:52:8f:96:42:fa:fa:
b9:67:e3:7b:0a:e4:d9:f3:ad:cc:43:17:3a:63:b4:
1f:34:01:ad:ef:18:3b:e9:23:fc:c1:00:26:5b:02:
76:4f:d1:cc:56:53:ea:b1:33:0f:fe:db:20:65:d8:
c1:d8:3a:13:b1:13:4f:7b:94:95:9e:7b:bc:92:92:
b9:f6:e3:f2:e9:58:b7:f7:89:e2:a0:0a:75:19:4f:
a0:78:18:56:7c:e3:e0:c6:af:eb:69:03:8e:c0:e3:
13:99:1e:e0:45:fe:16:63:7a:f2:0f:17:cd:9b:6d:
93:76:00:53:00:42:7d:8e:58:47:c2:95:c1:ac:9a:
5c:e0:f0:e8:12:78:bb:97:9a:85:59:12:4c:d6:fa:
2f:69:1f:2f:eb:15:8e:fe:8c:e2:d8:d5:87:84:57:
24:47:9b:0b:46:c8:2b:cc:1b:c8:74:62:85:d3:04:
d5:80:4a:f2:e7:ca:58:ee:12:b3:e8:3b:60:f5:69:
ff:89:0d:3c:c1:86:d0:be:21:de:72:17:5e:c8:df:
cb:78:81:f6:89:1b:cf:d5:ff:a9:e7:94:36:bf:a8:
a3:4e:95:b6:d4:c1:52:6d:bc:10:83:2d:c0:dd:38:
9c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:82:44:1F:12:C7:B4:9A:7F:A7:5D:D6:5E:0C:61:FC:A9:F2:2F:85
X509v3 Authority Key Identifier:
keyid:4C:4C:FC:E6:0C:9B:0F:2D:47:B3:62:86:4D:8F:EB:B2:25:BB:52:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:8a:96:37:8a:12:e5:59:8c:e4:eb:f5:22:c1:d2:3d:2c:50:
e5:d2:40:d5:b8:5e:65:39:aa:19:3f:4e:c5:aa:e5:12:fc:e5:
7e:af:cd:b6:1a:7c:05:53:81:8f:2a:b3:80:2d:04:69:d3:14:
6a:75:4d:17:73:49:ec:06:2b:f9:f4:ec:47:7b:0d:c3:51:4b:
a4:c9:59:d9:45:04:e3:13:e1:eb:89:58:12:1e:b6:0f:30:1b:
36:dc:87:14:7a:27:ed:15:87:93:94:9b:34:90:df:ca:2d:f8:
f2:4a:9b:88:69:9f:e7:9d:4f:87:d7:2a:1d:12:4e:1a:b1:d8:
10:6e:29:54:39:3b:44:8b:77:24:d8:ad:d9:01:d0:dd:c8:22:
51:d5:19:39:e1:03:0c:25:b0:c6:28:82:07:a4:cb:a0:22:70:
9a:06:0e:02:1c:e6:a9:41:7a:83:72:5c:b2:0e:62:f5:aa:39:
8f:bf:4c:94:c1:24:bd:9d:a2:de:bd:b1:6b:bf:31:73:61:d6:
ee:86:6b:a3:10:29:a2:f4:7a:43:58:f7:48:e8:a1:23:52:b7:
ca:cc:a5:10:ca:f6:8d:21:6b:52:67:8f:2b:65:55:25:62:7f:
d6:76:54:89:09:6d:d5:a2:7e:2c:cb:b6:d0:66:6a:b0:1b:a9:
0d:ec:c3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:02:56 2026 by rpki-client