Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
File: TecEA8nS15Ys8RPZPEYvlJPYc2I.mft (raw, json)
Hash identifier: 23JBmJHqFHfZXLs/qOWHQpj8TtxxYd+GXMO2Riwo5v4=
Subject key identifier: 1D:9E:E0:4C:77:A1:86:25:36:65:91:E2:1C:33:59:FB:D2:70:B2:FF
Authority key identifier: 4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62
Certificate issuer: /CN=4de70403c9d2d7962cf113d93c462f9493d87362
Certificate serial: 019CA9EA96998E4621FF62481EF7114BCD5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 15:00:49 +0000
Manifest this update: Sun 01 Mar 2026 15:00:49 +0000
Manifest next update: Mon 02 Mar 2026 15:00:49 +0000
Files and hashes: 1: TecEA8nS15Ys8RPZPEYvlJPYc2I.crl (hash: KKTsgh4RToSo8U3GMg4cHPsoi7+qqS596AwP1ZyNLWI=)
2: uhDIc0uEZUElVgS-_EocXKCrnM4.roa (hash: Q1EY9r/YhBigZO4RXwGxgcBbj+7/3SMubwYfDCdrIGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:96:99:8e:46:21:ff:62:48:1e:f7:11:4b:cd:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de70403c9d2d7962cf113d93c462f9493d87362
Validity
Not Before: Mar 1 15:00:49 2026 GMT
Not After : Mar 2 15:00:49 2026 GMT
Subject: CN=1d9ee04c77a18625366591e21c3359fbd270b2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9b:cf:f0:80:55:13:6b:99:3d:dc:ed:eb:23:
48:6c:80:bf:af:89:d3:58:10:5d:18:e7:92:80:62:
57:79:00:d1:c7:6d:9d:e8:9b:58:1c:de:80:53:5a:
22:ce:b0:83:99:f5:21:f5:dc:fb:ee:80:c9:5e:29:
55:a9:66:08:ac:83:5a:67:28:34:89:0b:d5:1d:77:
fb:85:aa:3f:f3:55:4b:44:f8:d9:eb:f1:df:31:f4:
5d:0e:dd:e9:3e:20:0f:bd:e1:bb:4b:d5:2c:97:f6:
a0:5b:5c:81:5f:ee:24:cd:ca:a8:dc:5b:26:8f:37:
b2:c7:80:9a:ba:05:cf:dd:27:22:4d:42:d4:37:40:
56:a6:2f:89:57:37:62:77:38:2e:ce:22:a8:8a:75:
e4:57:6c:92:d3:13:29:ca:55:c5:6a:ff:d0:74:cd:
d5:a4:e5:a1:50:be:e0:91:7f:f9:a1:bb:5e:5d:85:
a7:8e:bf:27:3b:46:30:d7:52:38:98:89:e8:5b:07:
85:07:3f:dd:aa:39:5d:1b:3b:ea:23:f9:94:f1:e3:
8b:f9:07:62:52:ac:13:4b:24:0c:8d:66:2e:8e:d4:
95:df:c3:84:53:90:f9:a9:10:3e:e1:48:6a:2a:35:
d1:bc:49:9c:ac:93:8a:5d:56:00:fd:0a:5b:e4:19:
cf:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9E:E0:4C:77:A1:86:25:36:65:91:E2:1C:33:59:FB:D2:70:B2:FF
X509v3 Authority Key Identifier:
keyid:4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:b5:13:ce:0e:38:ec:0b:07:bd:b6:5c:39:fe:19:92:cd:3c:
84:c4:a7:c0:ae:d4:48:ed:57:7c:d0:1b:50:93:45:24:20:43:
76:b1:28:a6:f3:46:43:b5:d1:6c:0f:a6:e6:dd:8a:a7:f0:38:
a9:d2:e5:24:d8:a8:e6:95:c1:fe:49:35:83:85:79:8e:4e:cb:
6a:23:fe:3b:c7:b1:ac:cd:3c:ee:e3:52:f6:38:c3:af:d5:57:
28:9f:7f:8b:e4:ee:a0:76:57:72:a3:67:39:c6:51:45:cf:f4:
7a:60:ff:5a:64:08:d9:3c:f3:4b:cf:ff:37:71:32:12:9c:59:
42:ee:e9:df:fb:4f:70:3f:26:a5:f8:5a:06:39:fe:73:c3:63:
fd:60:c2:8f:de:39:4c:aa:39:7a:9e:95:f8:44:65:77:35:80:
7d:68:16:7f:3c:5d:75:9d:44:54:eb:12:1c:bd:7b:28:b8:36:
af:d6:aa:87:1a:a4:a3:84:ed:66:33:ff:55:63:d1:ba:7c:cf:
9c:2b:a4:03:2f:e7:24:ce:f0:65:bd:57:f0:fb:f0:dc:82:66:
a1:4a:98:42:cc:d1:f7:d7:dd:9b:60:01:f1:df:e7:f1:55:7b:
ff:ab:95:a0:46:a3:b4:1a:73:b6:2b:dd:38:b3:03:20:62:a9:
0e:bc:a1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:55 2026 by rpki-client