Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
File: TEDHERwpFqX1ra8eUFCpQMJrI3g.mft (raw, json)
Hash identifier: Zd3IAEb7zTnx4tpHF6WCGaREoAGUr7/ZNxuK+/X74b0=
Subject key identifier: 95:5E:02:E8:B7:66:3C:BE:98:F5:13:96:2D:CF:1C:0E:55:67:70:22
Authority key identifier: 4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78
Certificate issuer: /CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
Certificate serial: 01A0C2C47AAE2A7A5324DBB4E2279D6C7A13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
Manifest number: 1A63
Signing time: Mon 21 Sep 2026 07:00:51 +0000
Manifest this update: Mon 21 Sep 2026 07:00:51 +0000
Manifest next update: Tue 22 Sep 2026 07:00:51 +0000
Files and hashes: 1: TEDHERwpFqX1ra8eUFCpQMJrI3g.crl (hash: MnFuH0Bn0+Z9c+IJdhCEXr2YqF2lsVnD9bh38UCd+wU=)
2: WWNIYacMJoEIRfEav5J1OWOX504.roa (hash: tPd27yKggwGnWK5YYeEd5gD5neTnZ1BFKcvvTfuouW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c4:7a:ae:2a:7a:53:24:db:b4:e2:27:9d:6c:7a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
Validity
Not Before: Sep 21 07:00:51 2026 GMT
Not After : Sep 22 07:00:51 2026 GMT
Subject: CN=955e02e8b7663cbe98f513962dcf1c0e55677022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d0:83:72:6c:8e:d4:32:3b:e8:de:a3:75:6d:
45:8b:1a:6c:17:91:98:a6:93:89:a0:c2:cb:3f:1b:
29:cb:69:29:7c:0d:dd:eb:58:93:98:ba:28:55:b3:
a4:e0:0b:5b:1b:90:f4:69:b5:9c:01:18:d4:e7:dd:
e5:bc:60:74:2a:f3:71:00:ad:f3:73:6b:d0:09:03:
42:50:69:cf:a3:d2:e7:5d:d3:6e:f4:f6:5f:cb:ef:
b9:7d:29:b3:72:87:23:09:c9:9f:88:17:b6:d6:e3:
ca:44:8e:b4:41:cb:5d:4e:7f:e9:e9:b2:91:4e:2c:
a9:7a:68:b0:e8:17:85:9d:ab:9d:79:27:5a:bc:2a:
36:28:15:40:2e:96:52:85:4e:b7:27:ec:e6:76:a9:
06:ba:0e:46:65:e9:bd:ff:e2:9b:e7:69:4b:01:ab:
91:b7:56:ec:cb:b0:b3:34:9c:e2:7d:48:79:6a:27:
31:6d:da:00:e8:bc:ef:ea:fe:ef:0e:2f:e5:8c:9e:
e7:30:ba:fd:16:cb:62:17:89:ad:5d:e8:7e:4b:e9:
91:65:ef:32:56:95:45:72:02:08:60:c3:36:ba:5a:
30:2d:20:f8:75:92:4a:55:d5:68:19:e7:5b:ce:52:
a7:4f:bd:50:7a:9c:3e:a5:eb:63:f4:6c:ee:df:95:
b8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:5E:02:E8:B7:66:3C:BE:98:F5:13:96:2D:CF:1C:0E:55:67:70:22
X509v3 Authority Key Identifier:
keyid:4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:45:85:86:48:b4:9c:b3:36:67:fd:e6:10:dd:39:b9:44:3c:
22:95:0e:81:1b:fa:79:2d:56:af:6d:ac:94:b7:74:77:9a:33:
b5:03:9b:be:e6:aa:b7:b9:06:f1:d1:cd:31:74:94:2b:3f:d8:
c7:81:1b:ad:b8:6e:fe:3a:3b:d2:3e:84:5f:41:d2:df:43:04:
f6:bf:2a:13:ca:82:ee:37:c5:59:fd:b4:ed:07:e3:a3:d7:7c:
69:ef:f2:af:33:04:5b:e7:28:27:1f:a8:77:f5:2d:22:d8:2d:
2e:59:cf:2c:07:55:ce:2f:d2:41:8e:74:28:6b:b4:31:78:b1:
ea:b7:8b:d6:3e:f7:f9:6b:03:87:b3:14:2c:7c:de:70:ea:70:
db:56:96:c0:68:ab:6b:48:fc:2f:72:bd:5f:cf:0f:04:c2:5c:
ed:3f:d2:1b:71:0f:f9:65:e2:c7:73:1e:0d:74:3b:31:db:71:
4f:7a:fd:f3:a5:e0:0c:ee:c8:12:0e:17:59:8c:c3:b1:be:95:
10:e0:35:f2:7b:01:f1:2b:e1:0f:ea:e4:34:3a:d8:22:20:21:
d4:71:7f:bb:22:75:de:f3:99:a1:e4:d8:99:dd:a5:c4:c3:fe:
3e:43:a2:b2:18:8e:60:9f:e6:00:a3:58:26:a7:4b:e8:f0:23:
fa:a9:f4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:19:50 2026 by rpki-client