Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft
File: TeztaXzW72A8kPgBiBg7zjAgQOE.mft (raw, json)
Hash identifier: wp5K/O2gevgIND9/A7xBqabY1m3ERXkkbT6FGHWEfPA=
Subject key identifier: 2C:A4:A2:56:F2:3A:42:70:71:32:F0:9D:89:6A:7C:21:86:C6:0A:2D
Authority key identifier: 4D:EC:ED:69:7C:D6:EF:60:3C:90:F8:01:88:18:3B:CE:30:20:40:E1
Certificate issuer: /CN=4deced697cd6ef603c90f80188183bce302040e1
Certificate serial: 019D9B87D5C977815D38E2DA3B8952D440D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeztaXzW72A8kPgBiBg7zjAgQOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft
Manifest number: 0860
Signing time: Fri 17 Apr 2026 13:01:03 +0000
Manifest this update: Fri 17 Apr 2026 13:01:03 +0000
Manifest next update: Sat 18 Apr 2026 13:01:03 +0000
Files and hashes: 1: TeztaXzW72A8kPgBiBg7zjAgQOE.crl (hash: jhmfsM/8JYH0INUWQVxzepZEV+yW3tej+Xn1HNUUEmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TeztaXzW72A8kPgBiBg7zjAgQOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:d5:c9:77:81:5d:38:e2:da:3b:89:52:d4:40:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4deced697cd6ef603c90f80188183bce302040e1
Validity
Not Before: Apr 17 13:01:03 2026 GMT
Not After : Apr 18 13:01:03 2026 GMT
Subject: CN=2ca4a256f23a42707132f09d896a7c2186c60a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:de:5e:59:bb:13:ae:2b:03:9e:dc:ba:f1:3c:
39:23:23:d3:7c:45:05:23:ec:9d:e0:ce:05:89:e0:
34:16:cc:11:c9:07:95:d6:8b:ad:44:5b:17:f0:95:
bf:20:34:36:3c:d6:31:4a:d7:31:21:72:98:85:6c:
c3:3c:43:1e:9d:ff:b8:46:11:0f:4c:0b:59:c3:07:
ad:a7:f2:20:9c:66:04:66:be:3d:65:c9:bd:b4:6b:
d7:9e:6a:bd:94:32:f0:2a:9a:fd:ee:d1:2c:bf:ec:
29:3a:66:54:7a:99:97:3c:c7:b6:19:9a:cb:df:ac:
7b:ec:eb:20:12:6f:8b:0d:22:87:a8:74:80:b0:de:
8f:e9:83:b4:e3:7c:c2:5a:c1:6a:09:61:bf:8b:f4:
e0:6f:db:02:40:95:4a:54:7a:7c:19:37:ef:13:44:
c3:87:a0:67:90:07:76:90:8b:6c:22:33:71:8f:9a:
77:a8:15:50:04:d5:1b:ba:24:6f:c7:78:c2:31:2d:
a9:18:b4:48:8e:a0:5c:df:a8:74:58:20:55:15:f6:
ec:d5:2f:8c:c9:7f:68:0c:62:5f:1c:06:0c:da:2a:
ac:be:31:08:60:51:e6:2a:4e:3d:2b:72:2a:fe:07:
e7:36:4b:ad:86:af:0c:a9:bf:26:68:f3:0f:dd:a5:
f6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A4:A2:56:F2:3A:42:70:71:32:F0:9D:89:6A:7C:21:86:C6:0A:2D
X509v3 Authority Key Identifier:
keyid:4D:EC:ED:69:7C:D6:EF:60:3C:90:F8:01:88:18:3B:CE:30:20:40:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeztaXzW72A8kPgBiBg7zjAgQOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:7a:29:d7:25:8b:ae:ad:f3:67:90:2e:83:71:07:ca:a7:23:
71:d3:61:67:8c:94:d8:31:bd:4b:c7:c9:ee:9e:de:0e:41:9c:
bf:46:6e:f2:99:3a:56:fa:cf:a3:ed:d0:a5:9a:a0:ff:f6:be:
6e:8f:72:96:b1:b9:fc:bc:c8:0e:32:ef:09:35:8c:77:e9:9d:
cf:12:c3:b9:c3:21:39:3a:ea:81:6d:47:86:0f:71:8c:81:85:
c1:4c:68:f6:27:97:ea:5d:32:8b:b0:f9:1b:16:2b:bf:f4:63:
d0:5d:ae:8e:9d:59:79:da:36:47:f5:4f:a1:81:21:5a:97:5a:
b2:07:23:55:a7:17:95:69:fb:0b:8e:a7:3f:68:26:75:2a:b1:
07:05:a1:d3:ce:48:4e:c1:5f:83:ed:78:d2:46:e8:50:f2:75:
bc:cd:50:ee:4d:a7:98:98:4a:f5:02:50:2a:1a:53:f8:0a:d4:
c3:cc:79:cf:d2:e4:17:18:99:c5:5f:96:0a:fd:ff:4d:32:a2:
92:42:0e:3b:05:13:65:65:4a:fc:43:3f:34:d2:1c:c9:92:ea:
76:72:00:5c:dc:d7:7b:fc:4b:4f:52:05:7e:9f:1f:f8:41:b4:
20:09:f7:a8:10:e9:12:d3:0f:0c:01:e2:88:0d:7e:dd:6e:dd:
5b:ab:43:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:51:40 2026 by rpki-client