Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
File: TEDHERwpFqX1ra8eUFCpQMJrI3g.mft (raw, json)
Hash identifier: 3gmc+AiQe5lBbr0zH4nYws6aMiPQudfeOzw92v7lt9o=
Subject key identifier: D0:61:5B:84:67:04:5A:C4:B9:87:B1:A2:B6:60:D5:D5:2B:4A:AB:65
Authority key identifier: 4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78
Certificate issuer: /CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
Certificate serial: 019D371BE253F920307C66A59BE02DF56AEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 01:01:07 +0000
Manifest this update: Sun 29 Mar 2026 01:01:07 +0000
Manifest next update: Mon 30 Mar 2026 01:01:07 +0000
Files and hashes: 1: TEDHERwpFqX1ra8eUFCpQMJrI3g.crl (hash: RHzhpwNDtJ0g8EdQFOBZtCj9NmOOziJvC8WINw3bGKc=)
2: WWNIYacMJoEIRfEav5J1OWOX504.roa (hash: tPd27yKggwGnWK5YYeEd5gD5neTnZ1BFKcvvTfuouW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:e2:53:f9:20:30:7c:66:a5:9b:e0:2d:f5:6a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
Validity
Not Before: Mar 29 01:01:07 2026 GMT
Not After : Mar 30 01:01:07 2026 GMT
Subject: CN=d0615b8467045ac4b987b1a2b660d5d52b4aab65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:15:ca:38:df:22:8d:23:1b:31:a3:64:ab:27:
9f:9b:87:a7:07:5b:4a:c5:ff:04:60:22:4f:d9:3b:
8f:ed:42:b2:58:de:10:e7:21:25:40:18:f1:c7:e9:
52:ef:98:e7:d8:7f:b1:b8:26:1b:09:ec:d7:de:c7:
5a:6e:6f:b4:03:fe:a3:dd:e3:f9:fc:79:43:e4:63:
7d:48:18:56:5d:4d:e4:36:29:32:0d:d2:dd:6b:27:
ef:62:25:97:99:92:a1:11:41:3c:f6:54:e3:21:50:
25:aa:81:9c:80:98:a3:e2:6c:c7:6d:eb:75:7f:bb:
85:83:09:0c:76:3b:f6:6e:78:ee:80:97:e7:98:f2:
31:bd:00:4f:b3:fd:0d:90:21:7d:4f:c5:3c:d9:00:
4d:36:d0:b3:29:3d:37:74:73:e6:c3:13:57:19:2d:
f9:d9:b3:0b:37:a6:5a:5e:8e:ce:63:e7:74:eb:ad:
d2:a3:26:99:64:7b:80:92:4f:a9:2a:e2:f5:09:90:
db:aa:9a:15:00:3f:fb:63:74:a1:d1:a5:7d:87:36:
d0:50:28:64:ec:9c:71:63:18:e3:f7:63:98:e6:93:
36:0e:1f:70:0e:4a:c9:be:29:9c:35:f5:ec:13:43:
ad:9f:71:f6:57:41:db:9c:8e:92:86:59:d9:98:7e:
56:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:61:5B:84:67:04:5A:C4:B9:87:B1:A2:B6:60:D5:D5:2B:4A:AB:65
X509v3 Authority Key Identifier:
keyid:4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c2:61:73:63:e3:8c:47:1a:ea:e2:6d:e5:76:11:3d:d3:9c:
b8:17:16:f1:78:fd:28:3f:27:04:84:3e:10:86:ac:85:78:4e:
86:05:9d:de:1f:94:a1:9f:bd:12:f1:96:39:5f:6f:2e:00:ae:
24:48:34:fd:be:ca:27:6d:82:db:ac:15:17:16:37:89:44:08:
a2:a7:5f:f6:58:28:45:b4:44:44:18:a1:ad:07:dd:87:af:da:
40:c9:0a:d9:fb:8c:99:89:9b:81:df:89:1d:ab:8a:b8:33:68:
dc:04:b0:6d:2a:7f:ff:3d:ad:70:ca:b5:1b:c6:48:97:03:44:
6e:70:60:5b:2c:98:c1:ea:4d:78:e1:14:75:59:52:46:d6:5a:
60:3f:35:47:81:8c:e6:83:46:35:f8:b3:5a:de:47:ff:bf:6f:
60:78:3b:e2:f9:a3:24:00:a1:35:af:84:b6:a0:3f:84:b4:c5:
59:ed:10:7f:53:16:ab:f5:ea:05:0b:50:0f:66:84:66:ee:38:
a0:31:3a:ae:30:db:63:c4:bf:89:d6:70:c8:f7:09:ec:24:21:
45:a9:f0:ce:be:26:bf:3f:00:4a:3d:45:00:79:88:21:73:69:
fa:c9:70:3d:47:fb:63:26:8a:11:e6:21:ee:93:50:da:8a:64:
ea:36:94:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:28 2026 by rpki-client