Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft
File: TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft (raw, json)
Hash identifier: GpurqPsFpCOF7rSE4x+xKo+pCagQmYSc7iq/XW6HZxM=
Subject key identifier: BA:1C:23:71:11:B3:E0:6C:15:50:75:0E:A6:07:2E:0B:1E:F7:F6:75
Authority key identifier: 4C:4F:20:6F:DC:CA:B8:3D:DF:E1:9E:89:6E:91:63:D7:A9:AD:47:79
Certificate issuer: /CN=4c4f206fdccab83ddfe19e896e9163d7a9ad4779
Certificate serial: 019DA30ACD9C4B26E4ED7B9AB6A13087781D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TE8gb9zKuD3f4Z6JbpFj16mtR3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft
Manifest number: 0A0E
Signing time: Sun 19 Apr 2026 00:01:27 +0000
Manifest this update: Sun 19 Apr 2026 00:01:27 +0000
Manifest next update: Mon 20 Apr 2026 00:01:27 +0000
Files and hashes: 1: TE8gb9zKuD3f4Z6JbpFj16mtR3k.crl (hash: VG9UjHEy2H9CsG4UxL0wiHHsdl7QDhukWFvx2U1Ykvo=)
2: s4GobE8sP68HfnpFVrDAD7Hwpd4.roa (hash: PdzhOO0oTb4sqxU4udpTbIF7JFMYzVJmzBp6SizCWGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TE8gb9zKuD3f4Z6JbpFj16mtR3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:cd:9c:4b:26:e4:ed:7b:9a:b6:a1:30:87:78:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4f206fdccab83ddfe19e896e9163d7a9ad4779
Validity
Not Before: Apr 19 00:01:27 2026 GMT
Not After : Apr 20 00:01:27 2026 GMT
Subject: CN=ba1c237111b3e06c1550750ea6072e0b1ef7f675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:01:cb:35:98:5f:8b:4a:66:38:3b:db:79:dc:
9d:56:2c:10:6e:3e:7c:79:c7:f4:19:a7:a2:40:5c:
53:84:72:06:95:8f:47:56:2d:b9:6e:90:dd:17:a6:
5d:7b:c1:0f:95:c7:50:90:26:2b:bf:46:66:3d:08:
24:7c:ce:19:aa:cc:9c:20:4b:d9:93:31:31:d6:0b:
8e:ff:b8:61:2d:d5:d2:0b:73:f6:06:61:3c:e6:f2:
14:ae:de:e6:d8:67:eb:fc:61:6c:5f:25:52:5a:62:
79:da:62:56:47:2d:ba:3c:fa:de:0c:9d:45:8b:eb:
60:4e:5f:7e:5d:eb:d2:24:ac:bb:06:b2:2a:c1:1a:
22:a0:25:31:8f:7e:e9:85:6f:e2:ce:b5:06:a8:50:
99:8f:c2:d4:39:63:78:95:9f:6d:65:81:e3:bd:6f:
28:5b:0d:bf:28:d4:53:6f:1d:79:41:7c:b0:cf:ff:
be:5c:50:e2:ee:31:fe:ce:65:6b:88:41:6a:96:cb:
da:c1:5a:f0:95:36:02:72:4b:83:c3:52:4c:fb:c5:
7d:91:6b:be:3f:93:06:b6:19:95:20:0d:77:2d:fe:
60:e6:d9:ee:95:43:88:b1:a4:77:c1:8b:30:6b:62:
d2:30:14:2d:ef:57:75:d3:e2:da:11:1d:07:39:f4:
34:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1C:23:71:11:B3:E0:6C:15:50:75:0E:A6:07:2E:0B:1E:F7:F6:75
X509v3 Authority Key Identifier:
keyid:4C:4F:20:6F:DC:CA:B8:3D:DF:E1:9E:89:6E:91:63:D7:A9:AD:47:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TE8gb9zKuD3f4Z6JbpFj16mtR3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:8d:e8:36:f7:f0:fa:5d:8b:4b:f9:8f:2d:e9:cc:6f:d2:43:
20:0a:12:b9:37:3c:27:2c:83:aa:9e:a8:da:45:29:08:47:e4:
f3:e4:8d:f2:b2:93:35:21:f6:b7:c8:1e:63:5a:b9:d3:8d:45:
13:ab:4e:4c:3e:85:d1:37:61:b0:f0:2e:d0:4e:c4:30:e6:ae:
ca:8a:77:f7:bb:d7:dc:48:49:08:3c:d9:f5:e4:47:fa:01:df:
39:91:06:1b:22:90:e5:6f:da:a9:76:ca:9a:e3:c1:bc:10:a2:
77:f1:0e:a3:29:53:ea:8b:2e:f2:1a:68:dc:27:f5:45:d5:70:
ab:fe:f3:f9:3e:86:f4:eb:0a:12:5f:b0:9c:d2:2e:ab:b3:2b:
9e:c6:45:19:97:13:19:99:a0:ae:30:f3:8e:a5:43:fc:29:d1:
d1:20:0a:ab:09:0d:99:27:fd:5b:d0:be:41:ba:f6:39:dc:f2:
b8:19:07:41:52:04:e7:9d:74:6c:83:7a:f2:a4:a0:f6:1c:fb:
bf:9e:9f:d5:f2:37:04:28:1c:72:3d:72:a9:be:b7:0c:97:7c:
ad:c0:83:b2:15:6e:a5:85:6f:9f:79:36:78:46:65:46:18:dc:
e9:cb:42:5a:ed:e6:48:6f:96:c0:94:aa:10:fe:a4:4e:0b:a6:
2d:08:d4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:05:38 2026 by rpki-client