Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
File: TEDHERwpFqX1ra8eUFCpQMJrI3g.mft (raw, json)
Hash identifier: j1MjbpQj5tYhG4CyloBsE4f48CUQVOWQALu1hpIH8xA=
Subject key identifier: 15:A9:E4:07:C1:87:A9:5F:24:81:D0:78:DA:78:69:0D:D8:C7:E0:17
Authority key identifier: 4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78
Certificate issuer: /CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
Certificate serial: 019EBF23F9BC82D3A74C4DCB09C4BFB3BE8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
Manifest number: 1958
Signing time: Sat 13 Jun 2026 04:01:06 +0000
Manifest this update: Sat 13 Jun 2026 04:01:06 +0000
Manifest next update: Sun 14 Jun 2026 04:01:06 +0000
Files and hashes: 1: TEDHERwpFqX1ra8eUFCpQMJrI3g.crl (hash: GECMhEtqdmxn1hAaL+QnfQq+JMg9mMnOFseZPWQmcR4=)
2: WWNIYacMJoEIRfEav5J1OWOX504.roa (hash: tPd27yKggwGnWK5YYeEd5gD5neTnZ1BFKcvvTfuouW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:f9:bc:82:d3:a7:4c:4d:cb:09:c4:bf:b3:be:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
Validity
Not Before: Jun 13 04:01:06 2026 GMT
Not After : Jun 14 04:01:06 2026 GMT
Subject: CN=15a9e407c187a95f2481d078da78690dd8c7e017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1f:a1:13:95:c2:7f:d3:c3:5d:45:fc:02:87:
84:0c:9f:b7:4e:33:c4:a9:be:14:d4:f2:20:ff:49:
72:9a:45:3d:25:84:fd:2a:f2:78:e7:63:17:e9:3f:
25:9d:e9:a4:eb:e6:12:80:cd:74:ef:13:a0:8f:fc:
78:81:52:4e:81:3f:95:ce:53:4a:1f:d5:0c:7f:0e:
24:fc:16:bc:50:56:31:6c:e6:4b:96:c6:e0:3c:6f:
e1:bf:38:9f:bc:71:76:43:35:13:0a:a3:72:57:fe:
8b:3b:80:a9:06:6e:5c:6c:16:9b:24:3e:5e:de:53:
e1:da:61:b6:ca:3b:80:fb:ec:2b:ee:34:ff:07:15:
71:e1:6e:9f:68:6b:7a:e8:13:c6:58:fe:72:6c:6a:
79:c0:b4:b9:88:78:04:a0:dd:d3:81:03:91:ba:46:
9e:c2:b9:24:fd:71:e4:b6:6e:af:55:cf:b5:a5:39:
20:ad:52:39:f6:0b:ef:38:81:aa:4c:42:99:9c:fc:
3e:c8:b8:d5:9b:cd:37:7c:0a:66:a9:88:c4:c3:95:
86:4c:53:12:3a:bb:5e:1b:3e:fd:51:c5:7d:fd:6d:
7f:78:5e:ab:c5:0d:e6:ae:db:cf:07:e0:b2:b3:0c:
4a:99:c2:c2:8c:0e:a6:84:74:21:ef:d6:fe:90:62:
3a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A9:E4:07:C1:87:A9:5F:24:81:D0:78:DA:78:69:0D:D8:C7:E0:17
X509v3 Authority Key Identifier:
keyid:4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:d1:f6:09:09:3c:96:72:1a:da:0f:0b:11:79:d7:43:a3:f5:
76:4e:5d:51:5a:30:86:77:77:21:b7:34:cf:44:2f:2f:ae:18:
f0:1e:e7:9e:fc:9e:92:e7:50:08:1e:96:55:d5:bd:f0:08:ec:
dd:83:e3:e8:f2:67:d0:22:6f:95:98:66:ca:c4:a2:77:4a:ef:
d9:fc:ff:58:f7:67:43:87:95:ad:4d:a8:d6:e2:d2:3f:80:26:
22:1a:5d:4a:bb:91:70:f1:c3:d7:59:22:74:c2:ea:b1:54:8d:
21:d3:e2:85:e5:83:0b:a4:93:b8:76:1e:8f:ba:e3:6b:25:35:
0c:58:dd:3a:28:bf:e9:3d:53:1a:5d:0d:40:ce:20:7b:28:1c:
c1:13:54:ee:79:5c:54:4a:fb:67:e0:7c:db:b4:05:0d:6a:56:
bb:c7:9c:ab:6d:b2:64:3f:4a:3d:ce:b5:07:cf:2e:7d:c2:67:
51:61:9e:4a:a0:3d:c0:4e:db:90:e0:83:2d:80:87:a3:51:85:
08:82:4c:84:45:a0:71:a8:2f:50:76:0c:05:96:75:3b:fa:e9:
c1:17:85:ee:35:71:f5:87:44:cb:6d:dd:25:4a:fa:8a:1a:90:
dd:01:9c:fb:9b:91:e2:30:7b:bd:81:48:be:52:e2:4f:63:a7:
cf:8d:a8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:29:25 2026 by rpki-client