Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft
File: TE38e6TewmWW3IrCMFqR7Y6SnGk.mft (raw, json)
Hash identifier: zMcMgy9Fg2SvgxlCPiLrLaVZvjFOoPnwaa5QaMTI7DY=
Subject key identifier: E0:8F:04:B8:2B:F5:C8:4B:E9:27:95:35:B1:25:1F:6D:D3:05:94:5A
Authority key identifier: 4C:4D:FC:7B:A4:DE:C2:65:96:DC:8A:C2:30:5A:91:ED:8E:92:9C:69
Certificate issuer: /CN=4c4dfc7ba4dec26596dc8ac2305a91ed8e929c69
Certificate serial: 019D062EF9F4C4FC9C64532F7D2F3EE0AD31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TE38e6TewmWW3IrCMFqR7Y6SnGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft
Manifest number: 12A7
Signing time: Thu 19 Mar 2026 13:00:35 +0000
Manifest this update: Thu 19 Mar 2026 13:00:35 +0000
Manifest next update: Fri 20 Mar 2026 13:00:35 +0000
Files and hashes: 1: TE38e6TewmWW3IrCMFqR7Y6SnGk.crl (hash: Gvxrt9kz93jSDC3QVKkWJcYcwlK5o2hxhwhpD+zo6LY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TE38e6TewmWW3IrCMFqR7Y6SnGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:2e:f9:f4:c4:fc:9c:64:53:2f:7d:2f:3e:e0:ad:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4dfc7ba4dec26596dc8ac2305a91ed8e929c69
Validity
Not Before: Mar 19 13:00:35 2026 GMT
Not After : Mar 20 13:00:35 2026 GMT
Subject: CN=e08f04b82bf5c84be9279535b1251f6dd305945a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1f:26:57:3c:53:ae:26:21:e5:1e:af:56:f9:
78:38:be:ef:5d:05:11:50:ba:c8:51:e9:68:de:c9:
d6:d9:91:08:99:e1:e8:fa:85:8b:a5:ed:ee:60:59:
0c:2b:5c:20:73:bb:45:db:eb:fd:25:af:32:f8:56:
3b:0a:bb:86:a8:c1:73:70:cf:31:02:0b:1e:cb:8f:
1e:63:2e:a8:d1:84:c6:4c:9b:55:d2:9f:5d:41:90:
13:cd:c4:fc:29:0c:b7:69:c9:c9:f7:41:7e:fe:8f:
28:33:82:d4:7d:10:9a:c3:57:95:e2:0e:4a:94:4e:
68:59:57:80:eb:7e:6c:e4:18:e7:5d:87:34:e3:f0:
0e:19:28:2c:e7:02:4f:a4:78:6f:7f:f1:5b:02:de:
a9:92:ca:38:38:16:22:b2:76:62:1e:74:d4:7f:b9:
ea:cd:31:b7:5f:3b:2e:f6:ea:e7:f8:c9:4f:36:41:
d4:d7:eb:e1:4b:da:30:ad:c6:82:33:c9:3d:df:9b:
51:d7:cf:8a:30:22:c5:e0:66:0e:42:25:1e:cd:02:
9e:42:93:a2:58:72:eb:ba:7b:ed:3e:4b:51:af:f0:
3f:f7:c4:81:22:92:7b:40:a1:06:a3:61:92:1e:28:
a3:7e:6d:d7:8c:99:90:96:b3:c5:56:ed:41:fb:d3:
9b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8F:04:B8:2B:F5:C8:4B:E9:27:95:35:B1:25:1F:6D:D3:05:94:5A
X509v3 Authority Key Identifier:
keyid:4C:4D:FC:7B:A4:DE:C2:65:96:DC:8A:C2:30:5A:91:ED:8E:92:9C:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TE38e6TewmWW3IrCMFqR7Y6SnGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:3b:e4:d7:71:46:d9:bb:8f:f4:d1:a6:c2:bf:59:ab:db:69:
1b:d9:44:0d:db:ff:2f:1c:98:9b:d8:b1:b5:eb:e2:b1:ec:4a:
de:9a:b3:c8:75:dc:d6:67:24:31:4c:ee:6d:60:51:29:11:33:
d1:59:f5:e7:99:20:2c:30:16:95:f9:f9:25:bc:f1:96:e8:4b:
5d:62:59:50:b5:b0:69:83:e1:46:b3:38:82:99:a2:60:9a:96:
ab:78:80:9c:50:d6:a1:3c:35:cf:d9:bd:2f:58:5e:14:3b:c7:
37:b5:80:3b:2c:d0:98:61:1e:e4:d8:4d:b5:49:57:ad:34:3f:
b1:56:2b:1e:ae:1e:78:4d:c3:d6:b2:6e:8f:bb:40:22:6e:84:
40:40:e3:64:ef:2a:13:49:da:56:9a:23:94:11:85:e5:00:37:
47:04:af:fc:11:5a:b5:d8:65:ce:f0:db:44:a9:fd:a0:57:71:
00:70:63:9a:25:18:9a:d2:05:8d:ca:f5:13:04:5a:04:44:96:
a0:0d:30:55:89:3a:16:12:7d:a6:bd:3f:24:c9:40:dd:26:e7:
e1:99:c1:69:39:54:8b:cf:9c:92:fc:6a:4f:3b:1a:75:37:75:
2e:41:6e:65:5d:53:eb:c8:80:cb:5b:eb:50:c3:2a:16:ca:a6:
ee:eb:d9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 23:07:09 2026 by rpki-client