Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
File: TEA7xgtKE8Pao0EaySPGNy1CPrg.mft (raw, json)
Hash identifier: T0QWrJC07YtM6K1Z+D8qZ0ub10z2FpyIc+ck7bBWF78=
Subject key identifier: 23:1D:39:9D:90:2E:AC:03:80:6E:5D:9B:B3:88:2E:59:2D:FC:3E:CB
Authority key identifier: 4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8
Certificate issuer: /CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
Certificate serial: 019D2961A02DD6A8D56B3834A439A1A67695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 09:02:37 +0000
Manifest this update: Thu 26 Mar 2026 09:02:37 +0000
Manifest next update: Fri 27 Mar 2026 09:02:37 +0000
Files and hashes: 1: TEA7xgtKE8Pao0EaySPGNy1CPrg.crl (hash: qsU9gii5oJkABYhW0tST5bWC9W/XU82E83PP0lwobgI=)
2: daxj-MhkiZarWyN8EVbWUahA0Nw.roa (hash: DXI6WwfxF6esJ4bJvCIfH7p2ed5ZUha18BtslnvRoss=)
3: n7q5NwtaL8-zEQXH647Qf4RaQks.roa (hash: n40KhH8cPfP863DY99KhVmZjjBSxGcmy9+bxffCu9sY=)
4: v7NOMk3x2Uly1ZRD2JuF1N9_0qo.roa (hash: +/eUsv8fNjsa5iAvEDJgYJR3r1TegvUrhwXeQYQizWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:a0:2d:d6:a8:d5:6b:38:34:a4:39:a1:a6:76:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
Validity
Not Before: Mar 26 09:02:37 2026 GMT
Not After : Mar 27 09:02:37 2026 GMT
Subject: CN=231d399d902eac03806e5d9bb3882e592dfc3ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0a:a4:41:77:14:7d:8d:25:44:25:13:84:dd:
3c:dd:54:69:8a:67:3a:b8:6d:41:56:c5:f0:66:e0:
11:59:8e:f3:60:13:90:14:24:b0:b0:f4:08:72:42:
32:8c:d2:0f:8c:cc:a1:5b:6b:6c:ca:8e:c3:e8:5d:
1d:ae:10:f5:81:a1:93:ac:e9:6c:0b:f4:dd:3e:22:
25:c4:d4:75:91:9e:49:f4:cc:14:35:62:7b:76:b8:
a9:b2:9d:2a:ca:60:26:2f:e3:47:ab:a3:a2:91:47:
38:62:16:f4:db:ee:63:81:a9:8a:bf:0f:73:7c:ea:
19:9e:ef:21:0b:22:02:61:8c:c7:4a:98:ae:d6:56:
19:74:53:74:7f:4c:51:78:96:91:c3:c8:27:a2:e4:
5b:28:92:f2:7c:a9:ba:13:39:6d:76:51:0a:a1:6e:
0b:54:81:d1:71:51:25:62:8d:fe:40:1e:66:17:d2:
88:2d:45:55:cd:1c:55:fe:42:a8:46:5d:7e:73:bc:
c8:71:53:b5:dc:7d:fd:d9:ab:85:31:ca:3c:75:ff:
1a:ef:ee:4b:2e:9d:54:a7:11:f7:e5:16:e4:a6:be:
88:14:7a:cc:37:ae:75:bb:36:5b:7f:50:4c:2e:e0:
7a:fd:1f:18:da:1d:39:16:c5:ba:82:e6:86:66:31:
e6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1D:39:9D:90:2E:AC:03:80:6E:5D:9B:B3:88:2E:59:2D:FC:3E:CB
X509v3 Authority Key Identifier:
keyid:4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:87:64:09:2f:f2:1c:b8:7c:6c:f0:00:fd:6b:9a:bb:9e:48:
7e:68:6a:f9:27:61:fb:ed:c7:2d:6b:32:ea:f3:0a:0c:07:51:
ad:52:a3:9e:0e:84:59:cd:fe:a9:37:df:f0:f0:76:c8:63:f2:
d5:95:55:8d:f5:39:3a:78:d7:38:55:50:3f:fe:93:b7:06:e6:
59:e6:a3:6d:28:2d:04:57:8e:e6:0a:fa:fb:d5:13:35:94:a4:
e1:11:25:0d:40:f6:fe:61:31:09:0e:42:94:3b:e6:70:9d:33:
1f:45:6c:c3:80:0e:2e:d0:90:e7:2f:f9:cc:7f:f3:c3:38:e3:
7e:3a:b6:df:18:5b:5d:fd:a1:e7:48:52:58:17:df:61:49:da:
1e:5d:86:92:98:eb:03:90:9b:57:21:31:01:c8:4c:06:c3:de:
73:7b:19:bb:27:03:e4:ea:60:cd:d7:61:03:8b:62:a9:6e:f0:
18:5b:7e:11:0f:71:8e:c4:d6:51:d0:fc:38:69:74:96:e9:4c:
b0:7b:36:0d:66:0c:ac:bb:4e:5e:6b:1d:6a:a1:73:37:9c:2d:
48:d1:b1:b4:5a:ff:5a:48:cc:33:e9:d0:ac:ff:1a:6f:19:4d:
39:3a:17:81:60:fd:95:bc:df:8d:db:ce:6c:d0:b6:89:04:2a:
43:9a:d7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:37:55 2026 by rpki-client