Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
File: TEA7xgtKE8Pao0EaySPGNy1CPrg.mft (raw, json)
Hash identifier: 5/Pj4ebgll163R1JULem2nyzP7RdPwOOylToYrprqek=
Subject key identifier: 40:D0:F3:21:5B:7D:56:09:41:40:2C:40:C0:AC:0F:89:67:DC:75:00
Authority key identifier: 4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8
Certificate issuer: /CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
Certificate serial: 019D996231A941DF93E9969275475081B899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 03:00:42 +0000
Manifest this update: Fri 17 Apr 2026 03:00:42 +0000
Manifest next update: Sat 18 Apr 2026 03:00:42 +0000
Files and hashes: 1: TEA7xgtKE8Pao0EaySPGNy1CPrg.crl (hash: UgtAuwqofYdGWEXvM2mKBl1YOxnVuwAsqBwuiP9R65w=)
2: daxj-MhkiZarWyN8EVbWUahA0Nw.roa (hash: DXI6WwfxF6esJ4bJvCIfH7p2ed5ZUha18BtslnvRoss=)
3: n7q5NwtaL8-zEQXH647Qf4RaQks.roa (hash: n40KhH8cPfP863DY99KhVmZjjBSxGcmy9+bxffCu9sY=)
4: v7NOMk3x2Uly1ZRD2JuF1N9_0qo.roa (hash: +/eUsv8fNjsa5iAvEDJgYJR3r1TegvUrhwXeQYQizWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:31:a9:41:df:93:e9:96:92:75:47:50:81:b8:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
Validity
Not Before: Apr 17 03:00:42 2026 GMT
Not After : Apr 18 03:00:42 2026 GMT
Subject: CN=40d0f3215b7d560941402c40c0ac0f8967dc7500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d3:cb:cb:d3:1f:ef:17:9b:a5:65:13:6b:ca:
05:19:de:ee:8e:17:b8:ca:0f:b5:a5:35:63:2b:86:
d2:a7:75:76:96:d6:21:2d:76:c9:69:17:4c:d3:61:
05:b6:de:47:a4:13:09:ac:b9:c0:96:47:84:7c:c6:
fe:fd:41:8a:81:d5:b8:36:ee:28:98:3f:e3:e0:4f:
75:b5:88:3d:e0:7f:7d:f6:eb:c1:1e:77:3e:da:51:
88:75:ab:87:8b:a4:25:b5:40:0f:c3:b0:36:dd:da:
05:b1:b3:3c:77:09:95:d8:99:b8:c9:b5:63:e2:bb:
00:59:b5:7c:01:a4:27:67:70:03:47:48:f5:72:c1:
99:6a:35:d1:8a:bd:3c:54:68:d2:93:7b:01:fd:53:
36:7b:6b:34:66:e0:20:5f:48:d2:33:89:cd:0e:57:
01:44:b4:12:33:d2:ff:dc:ed:3e:cc:b7:9a:f2:91:
a2:53:a4:70:6a:e4:34:fb:6c:69:f7:ba:0d:0d:3f:
bd:f2:99:a3:e9:20:ef:9b:ae:15:e8:d9:bc:03:e3:
32:c3:78:87:8d:f2:5e:87:46:bf:19:67:67:f2:26:
d7:1c:69:a8:ab:8c:18:a8:42:78:0a:84:85:41:cb:
41:7b:2e:f2:72:df:2a:c2:8a:4d:9e:44:83:39:21:
ed:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D0:F3:21:5B:7D:56:09:41:40:2C:40:C0:AC:0F:89:67:DC:75:00
X509v3 Authority Key Identifier:
keyid:4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d2:19:51:01:6a:60:e0:84:8f:4c:5e:d0:b6:f7:0e:7a:1f:
81:fb:f7:f0:7b:d9:8b:70:c7:26:7a:32:3a:6f:88:74:22:52:
8a:20:8b:14:cb:3d:52:27:e3:f0:be:0a:ac:89:5d:06:21:1d:
55:10:04:28:bd:1e:0f:4a:d0:d0:8e:fc:12:a1:d5:99:08:c8:
db:f5:1f:e8:60:a4:8d:41:84:63:50:10:79:68:5a:ff:1f:6b:
05:b9:84:29:9e:f7:76:23:aa:88:d3:25:40:05:c4:01:1d:33:
ad:87:1f:67:76:1e:2e:ab:1a:aa:18:eb:0e:71:28:f7:76:c5:
6c:63:69:1d:d4:da:40:af:c8:6e:4a:ad:62:a4:46:73:17:75:
2e:00:2e:46:cf:01:58:d6:0e:82:d8:8d:c4:03:0e:12:3f:37:
62:db:f8:10:1e:56:fa:5c:d1:fc:22:95:2c:35:ed:09:ab:35:
62:7a:c8:5a:38:9e:d6:56:df:e5:ff:35:1f:76:89:cc:02:53:
29:1b:c4:a2:22:72:bd:89:bf:96:8a:3a:8e:88:98:49:53:0c:
69:c0:86:f4:2f:0f:03:ec:b7:7b:44:1a:d6:01:5e:b3:7d:fe:
11:e6:d1:fa:aa:bc:f9:9b:a1:57:59:70:57:5c:db:78:2a:77:
4d:8f:bf:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:34:52 2026 by rpki-client