Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft
File: TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft (raw, json)
Hash identifier: VjSnaXHKvbxvfyqzBunOOYZrrYOzEYxLtYmCiHve7tQ=
Subject key identifier: 1B:4D:6F:9C:D0:DD:ED:A0:2A:4A:D3:A1:51:5F:8D:D9:9A:E4:49:88
Authority key identifier: 4C:4F:20:6F:DC:CA:B8:3D:DF:E1:9E:89:6E:91:63:D7:A9:AD:47:79
Certificate issuer: /CN=4c4f206fdccab83ddfe19e896e9163d7a9ad4779
Certificate serial: 019D38D2D1FE4D7184DC0CBA39DBF6DE7BE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TE8gb9zKuD3f4Z6JbpFj16mtR3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft
Manifest number: 09D7
Signing time: Sun 29 Mar 2026 09:00:33 +0000
Manifest this update: Sun 29 Mar 2026 09:00:33 +0000
Manifest next update: Mon 30 Mar 2026 09:00:33 +0000
Files and hashes: 1: TE8gb9zKuD3f4Z6JbpFj16mtR3k.crl (hash: gMcvHXDzQSfbz28mlXm6q1Ke3fff0t1ncEihfpM7n84=)
2: s4GobE8sP68HfnpFVrDAD7Hwpd4.roa (hash: PdzhOO0oTb4sqxU4udpTbIF7JFMYzVJmzBp6SizCWGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TE8gb9zKuD3f4Z6JbpFj16mtR3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:d1:fe:4d:71:84:dc:0c:ba:39:db:f6:de:7b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4f206fdccab83ddfe19e896e9163d7a9ad4779
Validity
Not Before: Mar 29 09:00:33 2026 GMT
Not After : Mar 30 09:00:33 2026 GMT
Subject: CN=1b4d6f9cd0ddeda02a4ad3a1515f8dd99ae44988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c1:38:f0:56:3e:4b:ea:ed:40:00:52:cd:f0:
98:9e:6e:6c:e0:64:ae:ea:bf:14:c7:81:59:60:fc:
a7:c5:e3:b3:33:2c:43:57:d1:1b:7c:c2:90:b1:d7:
e4:f2:0b:87:c4:bf:bc:bc:3d:fc:bb:19:d5:d5:76:
66:c5:92:b5:89:7f:ab:a4:f3:c2:0f:37:4f:c1:bb:
d0:30:b0:a8:4b:4e:cf:87:f2:ed:f3:72:4b:e6:3f:
91:e4:98:c6:c2:59:b0:7b:50:e7:43:81:ec:d3:c6:
66:de:db:86:d4:0d:d0:b9:48:30:6a:95:ed:0e:24:
bb:49:3c:1e:81:f3:0f:57:b1:f7:d7:0f:ea:5f:ae:
8a:d4:ad:ad:53:a6:6c:d2:b4:e4:ee:88:e3:06:c9:
75:02:40:16:31:90:c3:a7:96:b8:e4:91:ea:c4:0f:
50:80:d6:bb:93:c0:bb:e2:9b:3a:2b:06:58:52:37:
5c:3d:53:1f:75:fd:58:2d:fa:c0:37:7b:81:30:8b:
17:27:7d:17:b0:87:22:c5:c6:30:98:69:cf:7c:fd:
89:1b:15:20:1f:64:26:ea:b9:46:49:42:bc:19:f2:
7f:32:a7:9c:36:39:40:80:2a:dc:5d:9b:f7:63:df:
04:00:56:d6:9d:91:56:94:65:64:2c:fc:57:0a:75:
0c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4D:6F:9C:D0:DD:ED:A0:2A:4A:D3:A1:51:5F:8D:D9:9A:E4:49:88
X509v3 Authority Key Identifier:
keyid:4C:4F:20:6F:DC:CA:B8:3D:DF:E1:9E:89:6E:91:63:D7:A9:AD:47:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TE8gb9zKuD3f4Z6JbpFj16mtR3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:69:06:06:b2:e0:27:ad:7b:c9:df:ef:b5:ef:b4:5b:79:0e:
9d:63:11:1f:a1:3e:ac:d6:31:55:a9:a8:f6:1a:c5:e7:89:4e:
3c:31:6e:8f:87:2a:25:d2:a6:22:f6:33:78:4e:9a:05:da:2b:
8d:10:60:c2:ac:81:93:2f:6e:73:8f:3b:94:2d:a4:ec:19:a9:
29:1e:df:c1:c7:33:ef:55:29:4f:85:e8:81:5a:89:db:de:1d:
69:79:b7:99:5d:f2:36:e3:51:55:e2:fe:6c:45:c4:c6:b9:a3:
48:58:ef:95:55:30:8e:e7:ab:22:52:dd:f7:9a:f8:9f:ee:f1:
99:ec:85:1b:da:8f:96:65:ad:67:37:c8:77:5a:fd:f8:89:2d:
f1:46:0b:c3:56:ad:89:12:ce:7e:c8:09:76:d0:e3:ea:0e:30:
19:fe:c0:13:f1:86:fb:6b:43:88:31:87:43:ea:7b:5a:15:31:
83:18:51:29:bd:41:ed:70:73:16:b0:6b:e2:44:00:a4:9c:56:
d5:d8:fb:42:c4:9a:43:0f:19:e6:82:d1:42:14:6c:92:d3:dc:
d7:02:cf:43:06:33:6b:de:28:27:63:a3:53:f0:e9:0e:ed:16:
ef:74:78:73:8f:bd:bd:0d:6c:12:4d:cc:bc:d2:01:5c:74:3e:
fd:b7:ab:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:46 2026 by rpki-client