Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
File: TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft (raw, json)
Hash identifier: kietX8L+7UViSHcmfmzHKoIORCvttqMhz+tB02DTbNE=
Subject key identifier: 5B:D5:5F:BC:6E:5B:87:AB:05:8A:33:0C:8B:DE:8D:F3:8C:30:23:21
Authority key identifier: 4C:4C:FC:E6:0C:9B:0F:2D:47:B3:62:86:4D:8F:EB:B2:25:BB:52:44
Certificate issuer: /CN=4c4cfce60c9b0f2d47b362864d8febb225bb5244
Certificate serial: 019CABA1D853326DB94F6B56546EDD7C2993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 23:00:36 +0000
Manifest this update: Sun 01 Mar 2026 23:00:36 +0000
Manifest next update: Mon 02 Mar 2026 23:00:36 +0000
Files and hashes: 1: TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl (hash: 5jH7CqdboV/eZb8koq/KgdttT/tT6MWniqw4SCgdtaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:d8:53:32:6d:b9:4f:6b:56:54:6e:dd:7c:29:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4cfce60c9b0f2d47b362864d8febb225bb5244
Validity
Not Before: Mar 1 23:00:36 2026 GMT
Not After : Mar 2 23:00:36 2026 GMT
Subject: CN=5bd55fbc6e5b87ab058a330c8bde8df38c302321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:41:1d:1c:90:bc:39:b7:7c:dd:4c:0e:99:42:
eb:3d:3d:6c:f6:d7:b1:02:b6:08:77:a9:35:44:72:
62:29:0c:e9:c0:23:df:10:6c:bd:b8:09:82:ab:0d:
12:5d:45:16:a2:59:8a:ab:9d:c7:73:bf:c9:f5:46:
ac:09:66:ab:dc:81:95:3a:99:75:ee:32:f2:e5:a7:
8e:0d:7f:5d:0e:47:fe:7b:c6:65:2a:c2:1c:39:21:
d6:fd:8e:a3:ad:76:4b:ba:5c:0d:01:95:80:7a:a0:
b0:13:c6:05:19:6b:83:7f:61:9a:0d:6d:60:4d:70:
72:65:81:ff:f0:a7:ec:0e:51:a1:7e:6e:f3:ff:87:
65:0c:90:15:c1:89:bd:e4:0a:96:20:7e:97:04:ef:
c8:3d:ae:d8:37:f8:f6:c9:1f:86:ff:b4:47:e5:d2:
29:93:10:4e:ba:cb:6d:09:d0:7e:70:1f:5c:26:ac:
39:15:ba:cd:ac:39:9a:99:f9:02:7d:16:86:76:68:
e0:14:5c:d4:08:4e:95:98:9a:38:e0:d7:79:ae:d8:
2c:4c:b7:51:e4:1b:25:0a:93:91:e5:96:07:de:1e:
1a:2e:5d:bb:29:ad:98:48:d2:a7:77:28:36:73:87:
cd:d0:a9:56:8e:6c:73:96:46:42:f0:59:f6:6f:5d:
8c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D5:5F:BC:6E:5B:87:AB:05:8A:33:0C:8B:DE:8D:F3:8C:30:23:21
X509v3 Authority Key Identifier:
keyid:4C:4C:FC:E6:0C:9B:0F:2D:47:B3:62:86:4D:8F:EB:B2:25:BB:52:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:8e:10:e5:49:61:73:8f:27:46:45:65:86:42:d4:2a:e2:03:
4d:02:f4:4d:64:aa:e9:79:37:a3:af:1a:b0:4c:aa:63:fc:8c:
49:09:00:20:79:54:65:89:90:b0:c0:c4:3f:98:8e:76:68:4b:
4c:8f:30:d9:df:2a:ba:38:c4:58:6a:0e:5d:86:a4:91:b4:a7:
ba:99:50:9d:a3:30:b9:bb:83:d3:a6:09:aa:8c:4e:8c:7a:7f:
f5:6a:2e:49:bf:97:3e:3d:e1:b0:7f:47:4e:09:d0:cc:d5:31:
be:d5:c7:67:67:58:a6:a5:24:a3:e2:f8:86:66:77:c7:d2:ca:
e7:67:62:65:8d:dc:f0:f1:50:d1:15:8f:3e:39:e4:c5:6c:18:
71:e8:35:9c:88:a4:b9:96:ff:da:d0:86:76:d7:21:3a:39:8a:
42:eb:88:a9:79:20:8a:b3:d4:38:93:4e:dc:e2:51:72:43:86:
69:e3:38:cf:f1:a6:e5:65:ca:a2:b5:3f:50:67:97:86:dd:b9:
33:ac:ee:4e:51:ef:a9:46:23:c1:3a:06:4f:b4:f8:a2:50:80:
5a:9e:9f:59:85:b2:8e:8f:9d:b4:44:02:01:7d:4d:e8:41:90:
08:99:00:58:9e:f6:4b:c7:06:38:b9:0d:82:c9:36:59:89:24:
90:99:a3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:19:38 2026 by rpki-client