Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
File: TEDHERwpFqX1ra8eUFCpQMJrI3g.mft (raw, json)
Hash identifier: 1lGQHCk93XUOX0fN09dKNolbNH4Z4L8y+S1Gu4CIUrk=
Subject key identifier: E4:71:21:39:41:F2:D5:62:A2:0A:F9:E5:49:49:EE:8D:9B:1F:A2:A5
Authority key identifier: 4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78
Certificate issuer: /CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
Certificate serial: 019CADFEA7D474E2E195A53D5C8CE818731B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 10:01:13 +0000
Manifest this update: Mon 02 Mar 2026 10:01:13 +0000
Manifest next update: Tue 03 Mar 2026 10:01:13 +0000
Files and hashes: 1: TEDHERwpFqX1ra8eUFCpQMJrI3g.crl (hash: w+x0XDJMF3ILzxNLdA3Vx61TP5GgrOxKS45+ZNgSff4=)
2: WWNIYacMJoEIRfEav5J1OWOX504.roa (hash: tPd27yKggwGnWK5YYeEd5gD5neTnZ1BFKcvvTfuouW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:a7:d4:74:e2:e1:95:a5:3d:5c:8c:e8:18:73:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
Validity
Not Before: Mar 2 10:01:13 2026 GMT
Not After : Mar 3 10:01:13 2026 GMT
Subject: CN=e471213941f2d562a20af9e54949ee8d9b1fa2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f1:9a:70:fe:92:26:a7:ea:33:ef:bb:09:87:
d7:a7:8e:38:69:11:0f:66:cc:98:57:41:55:4f:c9:
32:14:fa:62:9e:c7:69:6c:d8:25:e3:40:a4:e5:36:
5c:f8:3f:df:14:4f:a0:39:30:b6:bc:9a:78:69:c2:
e6:76:86:8e:b0:a3:f8:90:12:b4:3d:26:9e:ef:b4:
7f:88:fb:fd:36:d3:03:a8:ae:18:97:35:18:d2:fe:
6a:2d:a9:8a:db:4c:04:73:82:9a:13:44:e3:b3:62:
48:0f:fc:5b:29:37:82:60:bd:13:e3:4c:17:6f:0c:
aa:b3:12:55:16:ab:35:b2:12:19:5f:5a:61:ce:77:
dd:22:48:16:24:a4:89:68:37:66:d3:38:5d:20:9e:
dd:d9:34:34:bc:ca:56:e0:67:21:a6:15:94:3e:ce:
30:a7:21:9f:cf:f9:c4:a1:e6:da:0a:09:73:d3:05:
c1:91:38:0c:25:a5:79:9e:46:a3:14:6c:b0:10:85:
5f:f4:0d:a2:b7:3a:9b:af:21:35:6e:7a:71:5d:ba:
ad:e3:4f:70:99:b7:63:a8:04:84:30:fa:9e:99:0e:
92:a3:ec:63:b6:42:da:72:1b:f7:62:2c:b7:c2:ee:
a7:21:3f:84:fb:a8:0c:d7:79:64:60:70:6c:b5:c9:
5f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:71:21:39:41:F2:D5:62:A2:0A:F9:E5:49:49:EE:8D:9B:1F:A2:A5
X509v3 Authority Key Identifier:
keyid:4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:1d:db:d9:c1:8e:8c:28:7e:1b:cc:a8:1c:e7:92:12:46:c6:
31:c4:21:63:62:15:c7:fc:9d:de:c0:4a:0b:fa:94:e0:55:1a:
71:ef:7b:4d:2f:81:c3:1f:7e:09:07:16:47:8a:c4:12:eb:76:
64:4a:99:7e:e2:f4:e4:60:53:67:b6:c9:bf:c2:ef:4c:30:6b:
f1:53:68:d6:77:0f:60:6a:df:e1:4a:7d:dd:3b:d3:44:79:89:
77:b3:a1:d2:a0:c2:25:04:4b:1d:53:46:d6:b5:6a:6f:be:df:
a7:80:a1:c6:f5:0e:fb:2a:5a:fa:ad:e4:3f:0d:5c:e7:95:46:
a1:45:8f:10:c1:36:01:71:37:7c:54:4e:6d:48:c9:ea:10:a2:
ca:e7:8d:e6:3c:1d:14:80:83:37:37:47:f4:73:ce:c1:8e:be:
af:1a:53:d1:f4:f7:99:d5:c5:dd:19:f2:c1:6c:a2:93:5d:c6:
6d:0e:cf:bf:0f:62:9e:ec:cd:18:db:71:d1:0a:3f:fc:a0:69:
4c:b1:b0:bb:48:84:dd:ec:7b:2a:ab:28:29:db:dd:e3:98:61:
b4:96:77:62:23:26:ae:ce:80:3e:c3:52:be:2d:1b:c3:7f:4a:
db:73:87:5f:e2:7a:f9:ef:f8:f8:51:b8:0e:d8:40:77:9f:92:
5b:29:b2:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/qfUdOLhlaU9XIzoGHMbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNDBjNzExMWMyOTE2YTVmNWFkYWYxZTUwNTBhOTQwYzI2
YjIzNzgwHhcNMjYwMzAyMTAwMTEzWhcNMjYwMzAzMTAwMTEzWjAzMTEwLwYDVQQD
EyhlNDcxMjEzOTQxZjJkNTYyYTIwYWY5ZTU0OTQ5ZWU4ZDliMWZhMmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/GacP6SJqfqM++7CYfXp444aREP
ZsyYV0FVT8kyFPpinsdpbNgl40Ck5TZc+D/fFE+gOTC2vJp4acLmdoaOsKP4kBK0
PSae77R/iPv9NtMDqK4YlzUY0v5qLamK20wEc4KaE0Tjs2JID/xbKTeCYL0T40wX
bwyqsxJVFqs1shIZX1phznfdIkgWJKSJaDdm0zhdIJ7d2TQ0vMpW4GchphWUPs4w
pyGfz/nEoebaCglz0wXBkTgMJaV5nkajFGywEIVf9A2itzqbryE1bnpxXbqt409w
mbdjqASEMPqemQ6So+xjtkLachv3Yiy3wu6nIT+E+6gM13lkYHBstclf2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFORxITlB8tViogr55UlJ7o2bH6KlMB8GA1UdIwQY
MBaAFExAxxEcKRal9a2vHlBQqUDCayN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEVESEVSd3BGcVgxcmE4ZVVGQ3BRTUpySTNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hZDRlODctNWIyOC00MmQ3LTk3NDgt
NGFiNDk4YjU5NmEzLzEvVEVESEVSd3BGcVgxcmE4ZVVGQ3BRTUpySTNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9hZDRlODctNWIyOC00MmQ3LTk3NDgtNGFiNDk4YjU5NmEz
LzEvVEVESEVSd3BGcVgxcmE4ZVVGQ3BRTUpySTNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHx3b2cGO
jCh+G8yoHOeSEkbGMcQhY2IVx/yd3sBKC/qU4FUace97TS+Bwx9+CQcWR4rEEut2
ZEqZfuL05GBTZ7bJv8LvTDBr8VNo1ncPYGrf4Up93TvTRHmJd7Oh0qDCJQRLHVNG
1rVqb77fp4ChxvUO+ypa+q3kPw1c55VGoUWPEME2AXE3fFRObUjJ6hCiyueN5jwd
FICDNzdH9HPOwY6+rxpT0fT3mdXF3RnywWyik13GbQ7Pvw9inuzNGNtx0Qo//KBp
TLGwu0iE3ex7KqsoKdvd45hhtJZ3YiMmrs6APsNSvi0bw39K23OHX+J6+e/4+FG4
DthAd5+SWymyTA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:57:14 2026 by rpki-client