
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
File: TecEA8nS15Ys8RPZPEYvlJPYc2I.mft (raw, json)
Hash identifier: uI8oliCYsuirMsOxmWUi0pm6PkE610GOv1rsQi/L5AI=
Subject key identifier: E5:25:6E:8A:3F:97:A8:3F:09:29:1E:81:41:9F:D9:1E:C1:34:FC:75
Authority key identifier: 4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62
Certificate issuer: /CN=4de70403c9d2d7962cf113d93c462f9493d87362
Certificate serial: 01A13E26267D2C6C596B46B779DA26848FBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 06:00:49 +0000
Manifest this update: Thu 15 Oct 2026 06:00:49 +0000
Manifest next update: Fri 16 Oct 2026 06:00:49 +0000
Files and hashes: 1: TecEA8nS15Ys8RPZPEYvlJPYc2I.crl (hash: p7JXbkBKs5sAJPEf1i2CCvzWSM6qUl8u9AxjQmOoqho=)
2: uhDIc0uEZUElVgS-_EocXKCrnM4.roa (hash: Q1EY9r/YhBigZO4RXwGxgcBbj+7/3SMubwYfDCdrIGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:26:7d:2c:6c:59:6b:46:b7:79:da:26:84:8f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de70403c9d2d7962cf113d93c462f9493d87362
Validity
Not Before: Oct 15 06:00:49 2026 GMT
Not After : Oct 16 06:00:49 2026 GMT
Subject: CN=e5256e8a3f97a83f09291e81419fd91ec134fc75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f1:66:de:62:31:5c:ae:1b:5f:78:90:1f:80:
60:51:ef:3f:71:d3:47:ab:01:08:94:9c:bd:7a:3e:
fb:d9:a5:d2:94:9d:c1:41:f9:ab:f2:08:01:36:6b:
bf:32:57:04:76:d1:24:d7:d8:b9:8a:b3:c5:b8:4d:
28:a2:d7:f2:22:c6:13:8b:a9:fd:c7:b4:f8:9e:db:
e7:15:1a:58:cf:2a:7a:e4:0f:47:41:ea:d5:f8:0d:
46:45:77:f3:63:84:00:d7:3a:86:09:bb:c8:78:16:
65:23:c4:20:c6:a5:a7:c2:f7:58:28:65:5d:8f:d1:
05:32:b4:8d:a9:fc:0c:ea:57:39:a3:1e:73:ed:2e:
66:bb:55:8d:3b:0f:02:4f:ce:26:bc:09:4b:a7:56:
5d:68:f6:63:17:0f:d2:f6:8d:58:d2:20:f4:66:3d:
16:6e:2b:6b:d4:fd:e0:07:ed:5b:c5:ec:c4:dc:09:
93:09:af:f4:02:52:d1:ee:7e:3e:b6:6c:fb:b2:87:
9b:69:2c:89:e2:64:9e:0f:ef:cb:4a:7c:bf:2c:4c:
bf:2b:c1:4c:11:c1:86:28:2e:2e:4c:f9:59:9b:d7:
d1:15:62:00:b2:ab:3a:d4:94:29:fa:f9:ce:3f:d4:
05:db:5c:29:92:3f:f0:90:08:a4:e6:c7:06:7e:f7:
28:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:25:6E:8A:3F:97:A8:3F:09:29:1E:81:41:9F:D9:1E:C1:34:FC:75
X509v3 Authority Key Identifier:
keyid:4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:c7:03:b6:09:be:68:93:34:f7:5b:61:c1:0d:61:f4:5c:91:
8c:3f:f8:2e:77:77:4f:d7:9d:66:74:0f:50:8d:a1:e8:ac:4d:
09:4e:fb:08:17:ff:7c:52:c6:39:37:d3:2b:69:7a:03:14:9b:
99:cd:da:e1:84:3b:11:36:ee:b0:3a:98:7b:3d:27:cd:5a:90:
b8:18:20:f1:1f:58:76:46:24:d3:c6:a7:c9:51:3c:a8:13:3c:
1f:eb:51:74:32:dc:59:51:97:3f:98:f4:d9:cb:da:bf:5f:74:
cb:99:a3:e4:b8:f4:56:74:a8:8c:30:d7:74:55:7e:97:9f:02:
58:27:22:42:e1:25:81:e7:23:93:70:50:94:73:d7:e0:45:bf:
ae:16:d7:0d:a7:1b:af:5c:ce:94:77:f7:00:47:5b:4b:68:80:
3b:f1:45:08:e0:9c:b7:5f:e6:cc:a6:7b:70:ac:14:29:a1:aa:
d3:73:7b:32:ba:04:ea:21:8c:50:8f:d0:b7:40:79:83:09:7a:
c1:17:da:c6:77:1c:9b:44:17:28:63:eb:d4:61:6e:b8:88:aa:
61:b0:0a:93:d0:df:21:eb:ed:42:f7:f8:83:86:2d:05:04:1b:
f3:33:92:d3:e4:49:c3:b0:3e:d5:05:1f:b6:cd:e1:6d:e7:a8:
c0:8e:98:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:30 2026 by rpki-client