Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
File: TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft (raw, json)
Hash identifier: IRglGUX7z/0R9sRCu8xGSR+d3sfVBjuKW1+On2jT1f0=
Subject key identifier: 0B:CE:94:71:2C:44:5A:AD:94:C7:E8:ED:C5:38:AC:BE:21:BB:90:69
Authority key identifier: 4C:4C:FC:E6:0C:9B:0F:2D:47:B3:62:86:4D:8F:EB:B2:25:BB:52:44
Certificate issuer: /CN=4c4cfce60c9b0f2d47b362864d8febb225bb5244
Certificate serial: 019D992BAFC14CD08E50CA469F6F495B34A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 02:01:10 +0000
Manifest this update: Fri 17 Apr 2026 02:01:10 +0000
Manifest next update: Sat 18 Apr 2026 02:01:10 +0000
Files and hashes: 1: TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl (hash: F502jUdGfz8OGiNegmpq5lcpQYg1nNIMYaLvdyCfSjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:af:c1:4c:d0:8e:50:ca:46:9f:6f:49:5b:34:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4cfce60c9b0f2d47b362864d8febb225bb5244
Validity
Not Before: Apr 17 02:01:10 2026 GMT
Not After : Apr 18 02:01:10 2026 GMT
Subject: CN=0bce94712c445aad94c7e8edc538acbe21bb9069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3d:9a:00:5b:b9:de:fd:fd:95:62:a0:0e:0f:
02:54:ef:9f:e7:8f:23:ab:91:0b:6e:3f:0e:eb:1c:
23:78:46:b3:82:51:de:22:d6:4c:14:b1:ad:7e:96:
3f:de:dc:83:52:e1:05:eb:42:cf:6d:47:4f:e7:54:
06:e0:04:0c:45:c9:8c:2b:ee:38:53:19:14:36:4e:
d6:6e:ad:8d:f1:ad:f0:11:9b:24:82:62:68:69:7b:
f9:29:61:94:60:8c:21:58:2a:9d:28:11:48:5b:fa:
39:71:c2:2a:92:f7:db:c8:a4:54:f8:84:26:1e:c6:
b5:43:a9:85:0e:1e:3b:3b:c5:77:9e:32:9f:4b:dc:
9f:d1:7b:0f:20:d3:c1:3b:24:2a:11:d5:88:ad:66:
15:8b:b5:1e:df:b2:b9:2b:f1:f3:f0:eb:55:1d:20:
6b:10:8c:7d:ce:59:36:d4:76:92:80:45:6c:b8:7e:
f9:f3:2c:53:06:65:5e:00:23:40:19:cb:74:06:d8:
23:cc:5a:4e:75:f6:5c:e5:7c:41:91:fa:d0:1b:2d:
c0:af:20:a6:85:7e:18:f2:27:c5:02:7c:7c:18:80:
d9:51:3f:81:86:ad:5d:d2:80:f7:89:84:a3:79:00:
b0:df:ec:4c:e1:ff:59:e0:0a:50:2d:b2:55:e5:b5:
e5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CE:94:71:2C:44:5A:AD:94:C7:E8:ED:C5:38:AC:BE:21:BB:90:69
X509v3 Authority Key Identifier:
keyid:4C:4C:FC:E6:0C:9B:0F:2D:47:B3:62:86:4D:8F:EB:B2:25:BB:52:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b1:ad:c6:84:7b:fa:9f:56:0c:ac:d0:b2:ed:e5:c6:5b:85:
11:c5:68:92:b1:16:3e:35:29:3f:13:4a:e8:b9:de:20:9e:1a:
96:b3:97:8c:7f:5e:ee:5f:a1:bd:bc:28:da:dc:ba:b2:88:35:
da:e5:7f:92:85:be:3c:59:58:f9:29:fa:0a:a2:d3:52:06:8a:
04:c5:31:dd:91:4b:87:b4:a4:44:4f:57:59:6b:74:0c:82:ce:
6d:f7:9a:f5:13:c3:ed:9d:14:2a:fb:3b:6c:e4:18:2e:1d:4c:
3c:de:b2:7e:9e:75:76:05:3d:7f:d6:6d:8f:f5:c1:3f:46:f0:
4f:13:79:cb:78:4e:f7:12:e9:f5:d8:bf:c4:e6:96:53:93:fd:
f6:c8:2f:31:a2:cc:03:ef:1a:11:8f:2c:e9:67:b2:75:6c:5f:
34:ce:a3:1b:87:29:3e:4f:2a:3a:ec:6b:95:af:0a:7d:24:90:
4d:1a:35:6d:8e:7a:5a:ef:c1:f9:c4:6c:2d:2f:06:8b:3b:53:
d6:4c:ac:20:3a:3f:00:5b:39:0f:7e:be:e5:33:40:ad:96:8f:
b1:dc:b9:3c:c1:4a:77:4e:15:9b:5c:af:aa:63:b6:23:0f:13:
8a:37:a1:49:aa:88:29:a6:83:a1:2b:8f:07:0c:12:3d:86:48:
40:f0:f9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:30:02 2026 by rpki-client