Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.mft
File: TeHTcc2fJqEftklGZ0wxl198Lt8.mft (raw, json)
Hash identifier: h3pO83GenaH+sttX2HyzL7jVL7D3b/N19LCUnCfp2Gg=
Subject key identifier: 72:F4:BE:F0:42:D7:FF:A2:9D:C9:D4:05:CD:96:34:B3:EA:AF:53:13
Authority key identifier: 4D:E1:D3:71:CD:9F:26:A1:1F:B6:49:46:67:4C:31:97:5F:7C:2E:DF
Certificate issuer: /CN=4de1d371cd9f26a11fb64946674c31975f7c2edf
Certificate serial: 019D3789D4166B96D713A826EDDFA6AD5B82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeHTcc2fJqEftklGZ0wxl198Lt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 03:01:12 +0000
Manifest this update: Sun 29 Mar 2026 03:01:12 +0000
Manifest next update: Mon 30 Mar 2026 03:01:12 +0000
Files and hashes: 1: TeHTcc2fJqEftklGZ0wxl198Lt8.crl (hash: yfIenFAjFHfI9jzc4IsT42NYJrj2SBFB5zoSU1RdKWM=)
2: kaSyniqYasueS7oYVxIylvVfl10.roa (hash: 5pRT38fJuSZmqHDoSajFywjw8KAYcFC3TRSNOKLIxFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TeHTcc2fJqEftklGZ0wxl198Lt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:d4:16:6b:96:d7:13:a8:26:ed:df:a6:ad:5b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de1d371cd9f26a11fb64946674c31975f7c2edf
Validity
Not Before: Mar 29 03:01:12 2026 GMT
Not After : Mar 30 03:01:12 2026 GMT
Subject: CN=72f4bef042d7ffa29dc9d405cd9634b3eaaf5313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bd:54:10:f2:0f:7e:7d:8c:5c:16:58:6a:10:
02:33:b5:64:d7:34:4b:67:1b:dd:61:ba:5e:3c:ef:
00:b0:52:0e:5a:fe:3c:26:d5:02:93:cf:8a:a9:32:
53:fb:5d:01:9d:e8:7d:1b:a0:c7:ed:90:f8:be:b3:
68:24:18:03:1e:08:9e:0b:05:4a:22:18:de:ff:40:
a3:83:d2:50:4a:c8:af:b0:71:bc:06:45:d9:b9:63:
8d:b6:1e:51:6b:73:f7:8e:de:5a:11:11:20:13:b0:
cd:7b:31:5b:3f:e3:f8:75:61:3b:a8:14:fa:e6:06:
43:fe:35:41:e1:bb:fe:85:91:3d:38:6b:34:d0:f7:
39:99:48:de:b1:7b:6b:38:f5:d2:35:ef:e1:ab:54:
95:b6:85:26:4d:43:f9:cd:01:1a:31:4f:50:ae:e9:
63:c1:41:61:e8:c1:33:4e:f3:e2:b2:dd:67:cb:fc:
8b:f4:e8:eb:14:ae:51:ad:c7:0b:11:01:06:36:e3:
4c:eb:93:11:6c:7a:8f:4a:b7:bb:43:5f:62:b7:25:
46:4d:c6:66:7f:ba:9a:a6:c0:9b:49:c5:01:b8:0f:
12:b9:b2:57:52:d0:1e:c4:dd:33:47:1e:2f:99:77:
77:52:ba:c5:c9:ba:72:00:3b:71:be:0e:bd:9f:40:
8f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F4:BE:F0:42:D7:FF:A2:9D:C9:D4:05:CD:96:34:B3:EA:AF:53:13
X509v3 Authority Key Identifier:
keyid:4D:E1:D3:71:CD:9F:26:A1:1F:B6:49:46:67:4C:31:97:5F:7C:2E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeHTcc2fJqEftklGZ0wxl198Lt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:80:32:4f:b5:7b:f3:0a:19:84:4c:3b:64:88:d1:30:99:89:
f1:b4:b4:0d:f5:75:c4:0d:f0:5b:26:4a:29:3c:ed:4f:0f:03:
19:1c:b3:59:61:35:81:a1:7e:5a:09:eb:c6:4c:77:81:6c:2f:
7b:21:01:64:4a:78:12:7d:3d:83:10:97:76:fd:43:4c:09:f1:
4e:1e:d9:78:89:bb:c8:60:55:29:19:16:42:ec:06:a5:39:ed:
6c:9f:2b:4e:dc:a5:79:7d:3e:df:74:d1:f0:64:2b:11:2d:c0:
56:7d:51:f5:11:28:ca:69:46:69:7f:10:ac:cb:4c:2b:50:98:
92:c5:45:11:28:6d:e2:3b:e1:8e:df:07:07:11:18:81:3e:fd:
89:aa:a6:00:18:be:5c:1e:63:35:fe:06:63:76:0b:3f:67:76:
7e:b6:0f:fd:21:2d:dd:4f:6d:50:4a:c1:59:ab:3d:77:95:3f:
1a:dd:64:e8:c6:0b:48:13:30:ae:46:46:23:c9:e7:5e:49:e3:
92:62:7e:56:5b:0f:ee:64:89:d8:fa:60:4e:12:51:34:19:49:
fe:5a:77:99:1f:61:ae:74:15:f0:f1:4f:fd:2f:48:7d:10:98:
f4:c6:e0:fb:1d:53:0c:10:c0:d8:18:91:d7:2f:e1:63:de:dd:
de:3a:35:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:48:55 2026 by rpki-client