Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
File: TEA7xgtKE8Pao0EaySPGNy1CPrg.mft (raw, json)
Hash identifier: gXbJCKqc/BQqqMAjvfwaRCrhjyPnrj3CCtMq0CyR63Y=
Subject key identifier: 84:BA:1D:7B:14:C0:4A:AB:3A:DE:C6:FD:0E:B6:B7:33:62:36:42:25
Authority key identifier: 4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8
Certificate issuer: /CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
Certificate serial: 019D3AC16A6435C3BBD350372F757CD1A379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 18:00:47 +0000
Manifest this update: Sun 29 Mar 2026 18:00:47 +0000
Manifest next update: Mon 30 Mar 2026 18:00:47 +0000
Files and hashes: 1: TEA7xgtKE8Pao0EaySPGNy1CPrg.crl (hash: 45BlLtrNo9xSCnJZuaRuBdZBGN6mCoAi8VulhgtGHTM=)
2: daxj-MhkiZarWyN8EVbWUahA0Nw.roa (hash: DXI6WwfxF6esJ4bJvCIfH7p2ed5ZUha18BtslnvRoss=)
3: n7q5NwtaL8-zEQXH647Qf4RaQks.roa (hash: n40KhH8cPfP863DY99KhVmZjjBSxGcmy9+bxffCu9sY=)
4: v7NOMk3x2Uly1ZRD2JuF1N9_0qo.roa (hash: +/eUsv8fNjsa5iAvEDJgYJR3r1TegvUrhwXeQYQizWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:6a:64:35:c3:bb:d3:50:37:2f:75:7c:d1:a3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
Validity
Not Before: Mar 29 18:00:47 2026 GMT
Not After : Mar 30 18:00:47 2026 GMT
Subject: CN=84ba1d7b14c04aab3adec6fd0eb6b73362364225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:86:d6:d9:fe:ae:a5:e5:a6:37:61:15:fe:65:
fd:61:c4:2d:ad:a1:57:16:64:a9:62:16:92:bb:07:
02:af:b8:89:bd:f7:86:c8:6c:f3:2f:57:88:f6:d5:
1f:9a:a1:10:b8:4f:9f:2d:c2:43:ee:aa:77:69:f0:
1c:df:ee:f8:ca:eb:65:bb:a7:90:7a:f9:b5:ac:9e:
49:c8:76:5e:b8:7c:22:e4:bc:e2:65:cb:20:20:b6:
22:7a:8b:57:31:91:9a:f0:38:de:90:42:c3:eb:2c:
13:e6:94:96:fa:ca:f5:3d:b0:88:76:44:39:1b:15:
f2:4a:53:47:6c:b2:78:e4:7b:48:2d:fa:c9:b6:59:
bf:c1:86:1d:51:c0:b9:ad:38:80:87:30:e0:65:a9:
e2:cb:dc:5d:7b:dd:f9:27:9d:ed:1f:1f:6c:41:bb:
41:35:87:5b:8a:8a:35:00:51:91:ba:b6:7e:8d:3f:
d6:f7:2c:c1:a4:27:fb:81:e0:d9:9c:8f:08:e2:a4:
05:b3:56:5b:77:2e:ca:da:e3:a9:e2:7e:c2:78:f2:
7e:4d:8f:f2:06:9b:69:cf:1a:a2:4e:8a:0c:20:2e:
29:50:cd:74:bd:d1:c8:15:1a:32:d6:e4:02:01:72:
be:bf:40:4c:54:b0:f3:bc:fc:04:81:42:ac:be:03:
14:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BA:1D:7B:14:C0:4A:AB:3A:DE:C6:FD:0E:B6:B7:33:62:36:42:25
X509v3 Authority Key Identifier:
keyid:4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:02:a9:f4:89:d5:80:00:04:16:ed:31:4a:cf:c4:65:57:ad:
45:41:82:43:3d:7b:6c:6b:94:8d:db:7a:03:a4:0d:bf:9f:e1:
46:80:9e:7f:97:29:12:4e:bb:d4:93:c1:49:1a:b9:d5:ea:b4:
78:23:d3:7b:04:66:0f:d2:d0:f7:a0:ae:40:7c:02:16:05:0e:
6f:40:76:a9:65:c8:fb:f9:57:ae:3d:99:e0:14:0d:9e:ae:36:
a1:86:00:e0:90:d7:ee:ce:b0:cb:8a:7a:61:79:c4:37:98:da:
bd:51:c1:04:01:00:e6:85:c0:3a:31:8e:09:9f:cc:65:09:47:
05:fd:59:84:aa:da:2e:04:68:9d:50:a7:9e:74:60:ac:63:a6:
82:d3:d2:ba:e7:1b:55:48:da:ce:50:e3:c9:a2:10:37:ff:83:
d0:e9:97:be:fc:db:3b:ce:c1:21:7f:b7:32:ac:ca:c1:78:e8:
3f:00:df:ba:ec:bf:a3:bb:1b:ad:1b:a2:11:17:27:6b:e8:c9:
50:0f:6e:58:31:7d:7f:92:d4:97:3d:a0:fc:0e:08:1a:ba:8c:
90:50:41:6d:49:c3:20:ea:98:1a:d7:9d:8c:fe:41:05:08:ea:
66:fe:72:fb:6b:b2:af:dd:ac:07:1a:e0:6d:6d:71:59:8d:b0:
a5:ef:05:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:25:35 2026 by rpki-client