Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
File: TeLcLByThHv5efmwEO3EzahJ9Pg.mft (raw, json)
Hash identifier: Xd9VEDifMjMZ0XgSJpiBKT+jDzXpAdYIzpyJZWVhQZo=
Subject key identifier: BE:29:FB:D8:89:66:C7:FF:72:8B:6F:57:6D:7D:31:FF:D3:03:75:1E
Authority key identifier: 4D:E2:DC:2C:1C:93:84:7B:F9:79:F9:B0:10:ED:C4:CD:A8:49:F4:F8
Certificate issuer: /CN=4de2dc2c1c93847bf979f9b010edc4cda849f4f8
Certificate serial: 01A15EFBA0277635F0AC2F2225C159E6A7FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeLcLByThHv5efmwEO3EzahJ9Pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
Manifest number: 1AB8
Signing time: Wed 21 Oct 2026 15:01:51 +0000
Manifest this update: Wed 21 Oct 2026 15:01:51 +0000
Manifest next update: Thu 22 Oct 2026 15:01:51 +0000
Files and hashes: 1: TeLcLByThHv5efmwEO3EzahJ9Pg.crl (hash: z9pnp0hj2T66B12Bc+C+wfHdZ7HWHHJvwIV96evnsnk=)
2: _HIuZzar-n1-NtnPT4ILWhx5JcQ.roa (hash: YlonPhrB8pJKsMOBqBGjR8HF+guVCdo8Qc+kWpMQAYM=)
3: ubV6uNRnShbftmmplfcQEtQdgrg.roa (hash: paxG2DKZBg85lHU32fSEBTfDsuTkXdTNcpFoow17lSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TeLcLByThHv5efmwEO3EzahJ9Pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:fb:a0:27:76:35:f0:ac:2f:22:25:c1:59:e6:a7:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de2dc2c1c93847bf979f9b010edc4cda849f4f8
Validity
Not Before: Oct 21 15:01:51 2026 GMT
Not After : Oct 22 15:01:51 2026 GMT
Subject: CN=be29fbd88966c7ff728b6f576d7d31ffd303751e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c4:dd:ad:85:d0:26:f5:15:b9:21:aa:16:d0:
2e:b9:c3:9d:d3:1a:3b:84:4d:a5:b1:c4:16:48:47:
42:d5:99:9e:a1:9b:d8:7d:c3:3b:fb:8f:4c:86:ce:
e5:67:03:56:1f:73:a5:1e:4f:93:cb:11:b4:9b:cd:
34:68:a5:21:a8:b9:da:6e:c4:32:a8:01:cf:89:c4:
4b:d0:c8:90:31:3c:e6:7d:70:4c:4f:97:f7:af:5d:
ff:a7:8a:ba:c4:5b:f5:45:60:e9:6d:9e:93:7c:03:
92:2f:1f:c8:82:5a:3a:9f:f7:0f:88:9d:04:6b:a1:
58:ef:a6:39:88:0e:fc:34:bd:74:d4:c5:0a:7d:4d:
7b:6f:61:17:95:de:87:21:e6:76:cf:c5:41:16:66:
34:a6:b2:a8:9b:8f:ca:0e:f4:52:e5:49:ea:3b:8e:
e2:6e:71:9e:20:fe:ff:8c:3c:31:d4:55:98:90:b8:
7c:4e:7c:53:03:e0:42:64:cf:ca:2f:2d:b3:12:89:
9c:77:9c:55:9c:3d:2e:81:25:76:a5:80:2f:12:d4:
a3:06:df:e3:03:c7:8c:f1:15:49:e7:7e:8f:9e:fb:
d8:51:82:6d:74:a9:ed:f1:59:55:ce:f7:2c:3a:67:
c9:ca:08:f0:e6:8d:1b:fe:82:bb:a0:23:50:74:0a:
f5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:29:FB:D8:89:66:C7:FF:72:8B:6F:57:6D:7D:31:FF:D3:03:75:1E
X509v3 Authority Key Identifier:
keyid:4D:E2:DC:2C:1C:93:84:7B:F9:79:F9:B0:10:ED:C4:CD:A8:49:F4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeLcLByThHv5efmwEO3EzahJ9Pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:4b:48:a7:59:ff:eb:61:d5:4a:7f:ec:dc:0d:2b:c7:85:7f:
3d:cf:31:b1:ae:c8:f5:fc:7b:9f:f0:1d:bf:60:ff:58:7c:6a:
d1:be:90:b8:5d:30:21:af:6a:0b:28:ce:18:8e:2d:2c:7f:a5:
f8:bb:d2:80:89:0d:20:ed:9c:8d:34:ec:42:64:19:df:4d:42:
cd:80:1f:c9:68:85:ad:0d:d7:65:20:f2:43:30:f5:d1:c7:9b:
58:df:30:d0:85:b0:51:97:cf:09:36:35:98:4c:b7:7b:1a:8b:
76:ae:65:7f:0f:26:e4:d9:0f:8b:7f:d8:09:24:9c:85:94:29:
d1:09:1b:9f:cf:bc:93:70:c0:7b:86:83:27:67:68:c3:37:96:
d3:02:ca:a1:ef:c3:f5:37:16:1b:47:c3:66:a8:11:e4:00:5d:
12:31:bf:b7:0a:25:de:bf:6a:e8:bf:e0:fd:61:6b:4b:cc:5d:
40:9e:95:f9:9c:9f:7b:bf:31:d2:79:72:ce:ae:d0:b2:2b:23:
6b:ba:b3:ce:be:fa:ad:48:63:26:aa:2c:a7:8c:d2:4a:bf:9a:
27:cc:1d:1b:6c:29:0e:6c:08:a5:2a:d3:58:3f:a0:97:57:22:
99:2c:be:03:1f:87:fb:25:d6:eb:c6:3b:47:43:e6:69:1f:a6:
7c:b1:ff:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 17:32:05 2026 by rpki-client