Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
File: TEDHERwpFqX1ra8eUFCpQMJrI3g.mft (raw, json)
Hash identifier: 58vNqoJB6JN3fh5yM5/JpuLPmU9SAgJm55K2jtOFzjM=
Subject key identifier: 9D:E3:62:11:94:2E:55:F9:8C:32:37:D9:D4:61:9E:7A:F7:92:27:03
Authority key identifier: 4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78
Certificate issuer: /CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
Certificate serial: 01A1DEA7BE85560BE2507E249C23C524ABD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
Manifest number: 1AF6
Signing time: Sun 15 Nov 2026 10:01:37 +0000
Manifest this update: Sun 15 Nov 2026 10:01:37 +0000
Manifest next update: Mon 16 Nov 2026 10:01:37 +0000
Files and hashes: 1: TEDHERwpFqX1ra8eUFCpQMJrI3g.crl (hash: NABxtnZA1VI2o1r5brgwF3o1R8nbhDg0/cx4H5lF280=)
2: WWNIYacMJoEIRfEav5J1OWOX504.roa (hash: tPd27yKggwGnWK5YYeEd5gD5neTnZ1BFKcvvTfuouW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:be:85:56:0b:e2:50:7e:24:9c:23:c5:24:ab:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
Validity
Not Before: Nov 15 10:01:37 2026 GMT
Not After : Nov 16 10:01:37 2026 GMT
Subject: CN=9de36211942e55f98c3237d9d4619e7af7922703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fb:4e:38:e4:c5:91:44:42:43:6b:bb:75:2b:
27:d6:84:73:ed:1e:22:9e:5b:47:60:cd:b6:76:70:
32:13:20:10:1d:73:3d:a8:27:c2:c7:3a:0b:65:15:
39:74:98:52:48:ce:d3:3a:50:75:9f:62:2b:2b:d8:
8c:4e:09:0b:5d:91:bd:f1:68:3a:1e:19:bc:c0:6e:
f4:a6:eb:48:04:8d:ce:81:a2:cd:c5:13:4a:8a:22:
a2:e9:e3:c6:26:d5:08:82:01:94:e3:36:46:46:e8:
b2:f6:04:5b:76:ce:bf:27:da:c3:40:fa:15:db:41:
4e:04:7f:90:23:a7:ef:69:6c:71:29:a6:3c:22:e1:
e4:93:ec:d1:43:60:0d:99:05:73:d7:4d:2f:b9:a3:
3d:e3:d1:68:c3:ee:34:76:9f:13:f4:f8:7b:17:8b:
1b:63:1a:f4:c5:86:e5:d9:77:07:0a:45:21:93:19:
19:87:41:fb:17:4d:b6:a8:f5:25:2b:25:26:b0:9f:
e2:b1:cb:7b:1c:f8:9c:d2:12:fe:e6:ae:14:f7:ae:
7d:f3:92:ef:4b:f0:49:18:ea:03:04:ec:59:3b:27:
f9:dd:4a:97:67:98:cb:94:d7:03:5f:c8:d3:11:8d:
6f:30:67:d0:57:63:46:cc:cc:52:fe:29:3c:50:6b:
11:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E3:62:11:94:2E:55:F9:8C:32:37:D9:D4:61:9E:7A:F7:92:27:03
X509v3 Authority Key Identifier:
keyid:4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:50:f7:0c:69:41:4a:fe:8e:12:1a:c0:27:6f:b5:45:4f:71:
3c:40:e6:c5:34:45:e0:99:e8:b6:c9:bb:da:1e:6f:7b:21:57:
4c:4a:e3:e0:f7:bd:f3:b5:76:0b:58:5d:ec:12:34:b4:49:25:
11:c9:c2:9a:c0:a7:f4:f3:fe:5e:a6:0c:d2:7f:37:b1:48:3f:
05:4d:ec:2b:90:ea:3e:98:48:c0:a1:2b:39:3c:f5:08:23:42:
13:04:f3:b3:07:2b:b0:1b:64:d4:82:c4:68:a6:e6:ac:ae:e6:
9f:4a:20:43:dc:02:01:2a:6a:50:f6:99:e0:50:53:e6:83:43:
8c:b0:7c:30:70:5b:23:79:3c:c6:60:c9:2d:2c:99:5a:9d:bc:
5a:31:6a:e9:7d:ac:13:c9:f0:a7:82:5c:1b:f5:a7:f4:92:d7:
57:7b:d1:1a:c8:f0:9b:06:9b:e7:1e:a6:ff:84:a2:e1:d4:74:
18:64:45:a1:c5:1e:86:58:30:3a:06:2c:5c:4b:ac:82:74:43:
2b:ec:54:64:d9:1b:cb:74:34:2b:b9:23:2c:76:ec:bf:17:82:
c6:3b:eb:98:6b:51:81:6a:69:ea:cf:b1:64:7d:ba:aa:1e:24:
07:22:5b:b8:39:64:62:3c:c3:8a:ee:a3:80:23:c1:26:fa:70:
62:88:e8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:01:45 2026 by rpki-client