Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
File: TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft (raw, json)
Hash identifier: MRnkubvTe2xNkuDiJfn3Uqmt6MIe1tVqJbdeCxMVXJA=
Subject key identifier: 63:3B:BD:03:58:DE:28:A4:8E:87:16:D5:CE:51:07:2E:87:14:B3:C4
Authority key identifier: 4C:4C:FC:E6:0C:9B:0F:2D:47:B3:62:86:4D:8F:EB:B2:25:BB:52:44
Certificate issuer: /CN=4c4cfce60c9b0f2d47b362864d8febb225bb5244
Certificate serial: 019D389C13C0C6B6B20DA571F701FEF6B95E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 08:00:45 +0000
Manifest this update: Sun 29 Mar 2026 08:00:45 +0000
Manifest next update: Mon 30 Mar 2026 08:00:45 +0000
Files and hashes: 1: TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl (hash: tc/iAHDzopglnSJpe7dVwwMiVI8xzU7KbZ8VHHdYyK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:13:c0:c6:b6:b2:0d:a5:71:f7:01:fe:f6:b9:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4cfce60c9b0f2d47b362864d8febb225bb5244
Validity
Not Before: Mar 29 08:00:45 2026 GMT
Not After : Mar 30 08:00:45 2026 GMT
Subject: CN=633bbd0358de28a48e8716d5ce51072e8714b3c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ab:3b:76:7b:84:b3:a3:18:0c:65:5b:f5:27:
4b:ab:7a:40:a1:0d:44:bc:e3:49:cf:1a:10:f8:1a:
58:fd:17:1f:7c:fc:d7:0e:0d:3a:da:d0:77:fe:cc:
6f:26:34:53:1c:40:9b:dc:52:e1:e7:ec:f2:a5:09:
81:7e:0e:3b:bd:02:09:10:d1:d7:38:70:4c:11:7c:
5d:08:a0:5a:ac:54:a4:38:50:84:2d:dd:37:38:be:
42:41:bd:7f:14:31:51:91:b4:92:44:0d:c6:fb:3f:
51:3a:15:d8:af:6b:24:c0:8f:60:f3:6b:67:f1:b8:
c9:ed:76:e6:4a:f8:a8:5f:06:44:46:1d:ab:84:49:
33:35:7a:7a:9a:28:62:4a:41:23:b8:06:14:11:38:
9c:e8:2e:8f:3a:08:b5:c2:ad:5c:c3:5e:cb:93:81:
c9:ad:2b:10:2c:d7:e0:55:ce:e8:6d:ef:fc:83:c5:
5c:a5:16:f3:43:2f:c7:f8:07:ef:dc:83:a3:76:3e:
b3:96:43:09:17:19:38:cd:97:fd:a8:08:cb:23:c1:
09:40:68:ea:a5:07:df:1c:5e:8b:19:f7:a1:68:d4:
73:8a:80:fb:47:a8:11:cd:9f:7a:bb:47:9f:59:57:
6e:4c:2e:03:62:53:15:6b:06:2a:e7:b7:81:10:ef:
9a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3B:BD:03:58:DE:28:A4:8E:87:16:D5:CE:51:07:2E:87:14:B3:C4
X509v3 Authority Key Identifier:
keyid:4C:4C:FC:E6:0C:9B:0F:2D:47:B3:62:86:4D:8F:EB:B2:25:BB:52:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:93:ae:e7:10:d4:84:68:e1:18:b9:66:f9:29:2f:de:30:2b:
3f:1a:76:fa:11:b5:e9:17:4a:ec:17:8c:ed:21:2f:79:ab:1b:
6e:42:51:3d:f9:df:01:00:d3:72:6d:92:72:81:1e:66:bf:7a:
18:05:7f:5e:a1:f5:4c:1a:32:74:b6:1c:ae:a3:5e:23:b2:94:
23:df:8a:f8:9a:db:ac:2f:8e:fa:2c:8d:77:69:11:f0:71:e5:
19:f6:14:92:be:6c:4e:e2:b1:e4:2c:e5:ca:aa:cb:7e:62:de:
3e:ff:23:e1:4b:40:ee:6b:2f:4b:aa:35:6a:4d:1c:2e:1c:fe:
fa:c2:80:88:e1:26:1a:0f:8a:17:99:64:fe:dc:a3:62:9f:21:
38:03:5a:93:47:12:c4:be:bd:ab:7c:43:fc:7e:0a:90:2c:28:
9c:d4:24:26:4a:79:fa:c0:d8:db:55:15:63:fe:63:be:22:76:
47:21:d3:43:98:85:ad:53:7b:3b:1d:83:7f:c5:c2:e6:1a:f5:
90:97:7f:db:1c:42:f5:41:04:7b:cf:20:e8:31:b4:e8:0b:0a:
fd:eb:19:d8:96:c6:67:08:23:84:90:3d:c6:74:e0:9d:7d:48:
a4:45:dd:f9:3a:2a:d7:03:43:7a:b5:d7:94:fa:19:f1:bd:9b:
16:84:02:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:51 2026 by rpki-client