Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
File: TecEA8nS15Ys8RPZPEYvlJPYc2I.mft (raw, json)
Hash identifier: 3TbCAluOWU3ZA+8ihdbd/awf2bsgecolam5mzebIlm8=
Subject key identifier: E8:C3:72:C6:D5:98:B8:7E:19:E7:8B:1A:2E:E0:10:B0:D6:6F:77:DA
Authority key identifier: 4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62
Certificate issuer: /CN=4de70403c9d2d7962cf113d93c462f9493d87362
Certificate serial: 019FAA884894FEC7099E48E153AEEF423BD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 21:01:25 +0000
Manifest this update: Tue 28 Jul 2026 21:01:25 +0000
Manifest next update: Wed 29 Jul 2026 21:01:25 +0000
Files and hashes: 1: TecEA8nS15Ys8RPZPEYvlJPYc2I.crl (hash: OrVolvxkFlOcFJuPmHAWV90LR5Okillha13cr4nxgJk=)
2: uhDIc0uEZUElVgS-_EocXKCrnM4.roa (hash: Q1EY9r/YhBigZO4RXwGxgcBbj+7/3SMubwYfDCdrIGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:48:94:fe:c7:09:9e:48:e1:53:ae:ef:42:3b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de70403c9d2d7962cf113d93c462f9493d87362
Validity
Not Before: Jul 28 21:01:25 2026 GMT
Not After : Jul 29 21:01:25 2026 GMT
Subject: CN=e8c372c6d598b87e19e78b1a2ee010b0d66f77da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:31:f6:3f:83:3d:24:a3:e5:33:13:c2:89:28:
43:08:80:e5:3c:e4:70:f3:56:a9:3b:5b:60:68:22:
89:3b:8e:df:e7:df:71:5c:12:2c:9e:e9:ca:bd:0c:
1f:eb:2c:a4:e9:89:0a:c8:f3:e5:b2:99:1b:ba:03:
cb:87:4f:16:e6:8a:bd:64:4f:c8:27:7f:c1:27:f7:
02:0b:18:55:e2:00:69:ae:74:f5:52:28:44:2c:c0:
21:0c:bb:87:55:75:25:32:c5:9f:2b:22:b5:85:52:
25:4a:60:9f:58:ee:48:19:f3:5b:26:08:fc:d2:fb:
1a:74:21:5b:36:31:f0:a0:69:db:6d:7e:db:b0:eb:
65:c6:91:4d:a1:cd:ca:6d:88:41:bc:a5:7b:c8:46:
15:f8:c3:53:ca:16:b4:82:a7:7d:37:28:ea:63:88:
ac:54:bb:af:63:67:cf:84:56:ba:e9:09:58:a8:da:
70:a0:18:67:13:de:8e:77:49:1c:a4:3f:68:36:f4:
9e:ef:d8:54:ef:19:c7:54:7d:fe:b8:41:8a:d1:66:
83:95:de:58:13:ae:e8:1f:a3:1e:a7:b2:46:78:57:
19:b6:38:79:78:64:8b:c8:a6:c9:ec:21:89:c2:80:
9e:77:d7:ba:10:7a:5f:78:9a:ea:fa:8d:63:9d:65:
fa:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C3:72:C6:D5:98:B8:7E:19:E7:8B:1A:2E:E0:10:B0:D6:6F:77:DA
X509v3 Authority Key Identifier:
keyid:4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:32:b9:cf:d8:a6:f3:7f:e5:47:1a:7b:c4:7c:f2:2d:db:9c:
e1:a6:60:94:3a:92:21:06:9e:45:ae:01:c4:27:d3:30:7f:8f:
7f:b1:c9:3a:b5:98:f9:be:71:7f:99:ac:7c:f6:24:82:67:c2:
59:c8:1d:5d:e0:7e:c8:68:f3:d3:95:d9:1d:3b:0b:ff:a1:5d:
65:43:fd:b9:c5:0e:bd:b4:75:8c:bf:42:3e:85:2f:2f:ff:fa:
f2:58:c1:a3:be:7d:7a:3f:98:50:34:75:3c:0d:6e:fa:25:55:
43:64:bf:35:2a:22:27:be:6d:aa:63:d3:1f:4d:f9:3c:4e:cf:
52:81:76:e4:ad:8e:4b:9d:95:44:a8:3d:39:f7:73:f0:15:db:
61:cf:c6:9f:1e:66:0e:a5:28:e1:9b:26:e2:74:5e:0c:61:35:
ec:2a:c7:7b:cf:6f:e2:0f:6a:c6:79:e1:28:2b:d4:e7:03:44:
12:10:b5:55:7f:66:b2:0c:b6:60:d2:5f:cb:6f:19:7d:29:cc:
4b:ec:f2:29:d0:1c:b0:29:da:72:13:c7:e7:d6:2b:84:da:ec:
4b:c6:89:1b:4d:ef:b5:07:73:2a:61:13:d4:ba:6e:85:3f:c5:
68:39:62:dd:e9:c0:ff:c6:f5:87:36:b7:dc:3c:76:98:f3:b8:
60:91:e7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:25:08 2026 by rpki-client