Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
File: TEDHERwpFqX1ra8eUFCpQMJrI3g.mft (raw, json)
Hash identifier: GwKfQVK1/iS12fYPrE0JQ8nl+TTG5hZBoFyYdZSoMCM=
Subject key identifier: 26:78:43:55:AD:02:6F:71:B5:5F:E6:EE:79:84:B1:2D:B1:44:74:49
Authority key identifier: 4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78
Certificate issuer: /CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
Certificate serial: 01A1065C4AB9C9678A8A8465222AFEC5C501
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
Manifest number: 1A86
Signing time: Sun 04 Oct 2026 10:01:14 +0000
Manifest this update: Sun 04 Oct 2026 10:01:14 +0000
Manifest next update: Mon 05 Oct 2026 10:01:14 +0000
Files and hashes: 1: TEDHERwpFqX1ra8eUFCpQMJrI3g.crl (hash: 7g1njdJ5doqkJh13MMpwY0Bqbt230Y6W8gI5pxtzENs=)
2: WWNIYacMJoEIRfEav5J1OWOX504.roa (hash: tPd27yKggwGnWK5YYeEd5gD5neTnZ1BFKcvvTfuouW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 10:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:5c:4a:b9:c9:67:8a:8a:84:65:22:2a:fe:c5:c5:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
Validity
Not Before: Oct 4 10:01:14 2026 GMT
Not After : Oct 5 10:01:14 2026 GMT
Subject: CN=26784355ad026f71b55fe6ee7984b12db1447449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:da:6c:07:c5:44:a3:cf:3e:37:34:2c:1d:dd:
71:18:c4:55:4c:63:0b:d7:d9:9e:f9:e7:f1:99:76:
1c:49:ae:38:a0:a5:61:4f:45:2a:31:99:03:1c:77:
59:2c:a6:d6:ac:bc:8d:f8:50:7e:e2:e1:48:1b:99:
f0:52:7a:2f:0c:66:5b:25:85:55:5b:a5:5a:6e:4e:
5e:53:3b:01:b0:7d:f1:59:b7:b3:e3:bb:84:21:85:
5a:a1:31:10:6c:5a:3d:44:79:ea:e0:13:ff:2c:1f:
ee:4f:74:b2:5c:2c:bc:e0:71:b1:d7:da:86:59:44:
dd:bc:e9:13:50:60:1c:28:46:bd:bc:3d:c1:2d:01:
fb:a5:a5:5b:bc:94:53:a3:6b:e6:25:3e:a6:44:6c:
fc:10:a4:57:0d:13:4c:3b:05:ea:7b:cf:bb:a3:05:
bf:8f:06:d2:2f:a5:86:52:62:4d:67:7a:72:4c:1c:
2a:a0:c4:5e:35:8a:ce:7d:2c:fc:1e:d4:e5:ee:aa:
29:5d:26:6d:4d:a0:4b:a3:97:3e:6e:65:16:99:b3:
5d:be:da:e2:00:9c:86:27:ef:e7:b2:ca:25:2c:7c:
86:49:43:c5:db:dd:c3:89:65:c5:0c:12:49:2f:fe:
8f:78:6b:93:61:5b:0b:b4:98:76:9d:1a:cf:56:52:
9a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:78:43:55:AD:02:6F:71:B5:5F:E6:EE:79:84:B1:2D:B1:44:74:49
X509v3 Authority Key Identifier:
keyid:4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:cf:a0:f1:9e:02:da:c4:7a:6c:7f:04:39:bd:8c:82:d0:d0:
4c:da:85:ba:7c:ed:71:53:a3:38:b7:bd:19:5e:b2:66:34:79:
9f:43:2f:39:cc:33:1f:16:be:7c:b5:e7:0d:c5:b4:4b:64:63:
8a:71:66:6e:f1:73:5a:6f:ef:6b:48:ef:4c:0f:2b:1d:00:59:
ae:25:0f:14:25:1f:6d:b3:7c:65:93:e1:2b:33:f2:a9:b3:4b:
bb:45:b4:38:94:f0:c0:91:fa:e5:27:96:68:fd:9c:ae:c8:30:
7e:56:a7:80:9a:ac:a3:87:71:59:e1:e7:cf:fd:f9:e6:94:d5:
bb:5f:bb:82:46:a0:2e:46:87:74:17:6a:7e:4e:74:79:f4:d0:
b4:c8:e5:f0:03:70:ad:c7:81:30:9c:fb:99:7c:68:08:13:66:
92:43:73:79:65:0c:72:2c:f1:37:89:ed:ec:4e:49:2f:98:5a:
61:b0:00:41:28:b6:51:89:21:52:b5:e4:e4:b3:61:5c:e3:f1:
21:da:55:81:a8:34:be:e1:42:ff:e1:88:34:f7:59:f6:48:c7:
14:4a:53:28:d8:b8:ec:b3:78:f8:43:86:1d:7d:7d:d3:66:ff:
97:3f:e1:34:77:67:24:49:c5:23:2a:c3:33:35:3f:14:fc:33:
68:ac:3b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:36:48 2026 by rpki-client