Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft
File: TeztaXzW72A8kPgBiBg7zjAgQOE.mft (raw, json)
Hash identifier: gHwFcXtxcs5lwkpMsXCzuScSymFHbnbHfoMOFqe4yro=
Subject key identifier: 5C:08:E2:9A:63:E7:BB:76:98:FC:B5:B1:48:9B:7B:5E:F7:F6:95:A4
Authority key identifier: 4D:EC:ED:69:7C:D6:EF:60:3C:90:F8:01:88:18:3B:CE:30:20:40:E1
Certificate issuer: /CN=4deced697cd6ef603c90f80188183bce302040e1
Certificate serial: 019D3909BD260A24A8BC24662CF5129ECAFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeztaXzW72A8kPgBiBg7zjAgQOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft
Manifest number: 082D
Signing time: Sun 29 Mar 2026 10:00:32 +0000
Manifest this update: Sun 29 Mar 2026 10:00:32 +0000
Manifest next update: Mon 30 Mar 2026 10:00:32 +0000
Files and hashes: 1: TeztaXzW72A8kPgBiBg7zjAgQOE.crl (hash: Zc8C/NXysKmX0z8E9lI4D8ZGADUPqajyO9Us9Z/9SbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TeztaXzW72A8kPgBiBg7zjAgQOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:bd:26:0a:24:a8:bc:24:66:2c:f5:12:9e:ca:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4deced697cd6ef603c90f80188183bce302040e1
Validity
Not Before: Mar 29 10:00:32 2026 GMT
Not After : Mar 30 10:00:32 2026 GMT
Subject: CN=5c08e29a63e7bb7698fcb5b1489b7b5ef7f695a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:91:17:ba:87:37:70:ea:56:4d:77:af:47:51:
cf:38:1e:88:a1:bb:1f:d5:7c:e5:1c:96:1e:1a:53:
af:aa:eb:0a:a2:51:9f:7f:76:2c:3e:0a:c9:04:66:
af:48:48:5d:6d:78:7d:e9:7d:f7:43:63:9e:32:87:
e4:6a:54:f8:e9:ed:24:5c:5d:42:a3:a4:aa:27:9c:
6f:92:ed:5a:d5:bf:01:4a:9d:76:df:af:99:1c:81:
77:65:a1:19:fb:1f:4f:2e:da:2e:4f:92:33:64:0e:
a0:91:0b:b9:98:35:09:b5:2b:d9:58:c7:1c:0f:2b:
ae:a3:f9:a0:45:61:78:54:cb:71:62:72:01:d9:82:
a1:12:d7:19:ed:17:e3:0e:25:dc:86:f4:d6:3e:d8:
8d:5f:3a:d9:85:38:67:22:34:6f:eb:e7:ac:db:6b:
87:65:0e:29:6b:7e:7d:04:2b:dd:88:b5:d5:12:f1:
dd:7b:60:31:f6:f2:ce:4b:5a:33:50:fa:be:71:3a:
58:26:cb:3a:c9:dc:d4:44:61:2e:69:f9:d1:ca:a5:
1d:12:e3:90:59:49:a3:ff:3b:5d:ed:5c:7a:dc:66:
ba:f3:f8:3d:df:5d:b0:d7:1a:46:e4:1b:d3:07:da:
79:32:85:a4:b0:67:08:aa:ca:98:55:ca:ee:74:97:
91:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:08:E2:9A:63:E7:BB:76:98:FC:B5:B1:48:9B:7B:5E:F7:F6:95:A4
X509v3 Authority Key Identifier:
keyid:4D:EC:ED:69:7C:D6:EF:60:3C:90:F8:01:88:18:3B:CE:30:20:40:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeztaXzW72A8kPgBiBg7zjAgQOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:90:c8:c4:8b:50:92:bf:b8:aa:4b:aa:cf:db:49:c4:3b:24:
a6:de:33:1f:44:22:e4:a5:76:05:ae:15:e4:63:b0:7b:3e:ad:
f1:db:f9:08:df:44:51:00:20:29:9a:a3:d1:62:e9:2f:76:d0:
19:f9:db:f3:db:0b:c2:54:33:46:8e:df:38:3f:85:da:66:f8:
ce:cb:bc:5d:af:02:37:38:e9:1a:42:0b:2c:82:23:9b:47:0f:
5b:09:af:8e:99:8e:7f:e1:2f:2c:be:da:f4:54:24:36:41:0a:
a4:c7:95:d9:47:2b:9a:24:a8:ed:4f:63:2b:73:bb:5f:7c:23:
66:d5:80:18:3b:52:5e:86:4d:8a:06:06:a0:3e:2a:1d:07:b6:
84:9a:9f:14:f2:30:7c:05:9c:34:18:22:8c:64:23:08:2a:78:
62:a3:33:fb:3c:78:42:6f:8d:d7:e6:2e:38:d9:88:1e:bc:e9:
c4:bc:24:48:ae:b1:7e:52:5d:44:ac:1f:45:20:80:01:4c:fc:
27:46:de:f9:bd:c1:52:53:78:d1:66:43:67:69:64:9a:ad:53:
e9:de:74:45:13:f5:00:b4:69:63:84:17:5f:83:ec:67:4d:cb:
4a:57:94:75:54:46:4e:ff:e5:6c:53:67:41:9a:58:03:c8:80:
e7:1e:6b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:09 2026 by rpki-client