Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft
File: TE6QpGzZL4_8sZJLk7cdG60xMBI.mft (raw, json)
Hash identifier: fMOiuwViXHS8sZ7PtLez7o1IAbsw6rmp51ms/zQf4Yc=
Subject key identifier: 40:0C:B7:EC:53:2E:86:21:9E:5A:C8:98:A8:F4:CB:E7:33:B1:AA:BD
Authority key identifier: 4C:4E:90:A4:6C:D9:2F:8F:FC:B1:92:4B:93:B7:1D:1B:AD:31:30:12
Certificate issuer: /CN=4c4e90a46cd92f8ffcb1924b93b71d1bad313012
Certificate serial: 019CAC46FD2EF28FFB8BA964D1D407BDE093
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TE6QpGzZL4_8sZJLk7cdG60xMBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft
Manifest number: 1044
Signing time: Mon 02 Mar 2026 02:00:59 +0000
Manifest this update: Mon 02 Mar 2026 02:00:59 +0000
Manifest next update: Tue 03 Mar 2026 02:00:59 +0000
Files and hashes: 1: TE6QpGzZL4_8sZJLk7cdG60xMBI.crl (hash: W97sO697ZBOFuB01gE1g7XSwgU+Si+18FRX+AjoPORY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TE6QpGzZL4_8sZJLk7cdG60xMBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:fd:2e:f2:8f:fb:8b:a9:64:d1:d4:07:bd:e0:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4e90a46cd92f8ffcb1924b93b71d1bad313012
Validity
Not Before: Mar 2 02:00:59 2026 GMT
Not After : Mar 3 02:00:59 2026 GMT
Subject: CN=400cb7ec532e86219e5ac898a8f4cbe733b1aabd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:00:53:55:04:e3:ce:e6:f8:e9:32:a7:e6:18:
ed:7f:81:b6:e8:a8:04:98:0d:36:57:8a:d1:b4:16:
0f:4f:60:7e:ae:4b:d0:88:93:3a:b9:d8:a2:d4:99:
59:aa:1e:b2:cf:33:a4:d5:4e:d9:8b:98:0d:d8:21:
e5:4e:80:44:06:7e:c1:5d:aa:c3:2f:1e:35:ee:89:
ff:d8:24:1a:f3:2b:e9:38:4e:5b:7b:85:3f:b4:10:
25:bc:6f:8d:f0:ea:c1:5c:6c:ba:e0:40:46:5a:d7:
c8:90:93:60:bd:e1:96:a6:26:8f:05:a7:f9:e6:c1:
d5:9b:79:eb:b2:f0:a4:b4:b1:ea:80:d6:04:cf:2d:
d4:aa:da:7f:8b:f8:af:71:ab:a5:d9:99:28:06:ef:
35:5d:72:f4:d4:0c:c4:9f:e5:36:20:35:1f:49:bf:
ad:f0:e5:14:64:18:c9:97:7b:16:3f:ff:60:a8:7f:
52:f8:cc:bf:85:6d:9a:ec:a9:5a:3d:c6:de:84:8c:
3a:08:f6:f9:d5:79:e0:a1:cd:e8:78:9f:b1:a2:cf:
9a:76:d0:15:ab:f1:df:4f:07:ee:6d:de:9a:a0:11:
c7:a8:7c:52:a5:a5:95:c2:63:4b:b7:ef:a5:10:87:
9b:b6:49:c1:0a:2d:e5:cb:75:6b:ad:c9:83:14:21:
20:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0C:B7:EC:53:2E:86:21:9E:5A:C8:98:A8:F4:CB:E7:33:B1:AA:BD
X509v3 Authority Key Identifier:
keyid:4C:4E:90:A4:6C:D9:2F:8F:FC:B1:92:4B:93:B7:1D:1B:AD:31:30:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TE6QpGzZL4_8sZJLk7cdG60xMBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:4a:8b:e9:bb:98:a8:5f:98:f8:0a:63:89:b5:49:c2:6a:2f:
99:9b:13:e6:f1:fe:b0:3c:37:6a:62:b0:29:86:4b:35:e2:75:
c1:be:55:25:57:ab:2e:2c:0d:fa:4e:14:6d:58:8f:4d:f6:83:
c4:70:17:86:70:47:02:50:21:7a:08:16:56:eb:32:57:dd:c4:
66:66:8c:97:b0:b4:0b:7e:a1:ea:cb:b6:47:18:83:09:7d:9a:
d5:31:3b:95:cc:c1:4e:b8:e4:22:86:a9:5b:53:14:be:60:7c:
3a:b4:1d:a3:c2:8b:b1:d6:df:ba:a4:6e:e9:37:0b:ab:33:b4:
96:10:57:78:02:61:b9:1b:6f:c9:f2:5e:9c:fb:e5:85:ca:b3:
4e:f9:8c:22:79:d6:04:0e:e5:80:0c:47:d4:fc:47:12:1f:bd:
f4:b9:b9:fd:a6:ae:a3:a7:58:b9:3f:76:65:90:72:23:94:2c:
c4:6c:e8:3a:fd:e5:cc:3c:5a:81:fc:e8:3e:24:1e:6d:2e:84:
4c:16:1a:c5:77:f8:4f:85:e1:7f:47:c9:94:e2:4c:8a:ad:10:
8d:36:32:7b:79:21:87:c0:04:16:c7:b5:5a:a2:ac:7a:ac:3c:
73:0c:70:04:a3:4e:03:58:08:7f:fa:57:90:8e:b1:3b:d4:f8:
e2:c7:6e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:52:50 2026 by rpki-client